By using the H2C Services, you acknowledge that H2C will use your information in the United States, and any other country where H2C operates. Please be aware that the privacy laws and standards in certain countries, including the rights of authorities to access your personal information, may differ from those that apply in the country in which you reside. We will transfer personal information only to those countries to which we are permitted by law to transfer personal information.
1. Information Collected or Received
In the course of providing our H2C Services, we collect or receive your personal information in a few different ways. We obtain the categories of personal information listed below from the following sources: directly from you, for example, from forms you complete or during registration; indirectly from you based on your activity and interaction with our H2C Services, or from the device or browser you use to access the H2C Services; from our vendors, brands, and suppliers that help provide H2C services to you or that you may interact with (such as, for example, for payments or customer support), and from our third party advertising and marketing partners. Often, you choose what information to provide, but sometimes we require certain information to provide you the Services. H2C uses the personal information it receives and collects in accordance with the purposes described in this policy.
Registration, Account Setup, Service Usage: In order to use the H2C Services, you will need to submit a valid email address. If you register, you will need to submit a name associated with your account. You may modify that name through your account settings. You need to provide this information to enable us to provide you with the H2C Services. Additional information, such as a company or brand name, billing and payment information (including billing contact name, address, telephone number, credit card information), a telephone number, and/or a physical postal address, may be necessary in order for us to provide a particular service. For example, we need a physical postal address if you are buying something on the Site for delivery. As an H2C seller, if you choose to use our payment service, H2C requires your full name, social security number, identification ID or tax ID, date of birth, bank account information, photograph, credit card information, and/or other proof of identification in order to verify your identity, provide this service to you, and comply with applicable law. For both buyers and sellers, H2C requires this information from you in order to provide you with the H2C Services (including, to verify ownership of an account, to mitigate fraud and abuse, to comply with regulatory obligations, or to complete a transaction as a buyer or seller). We may store credit card information for both billing and payment purposes. Members in certain countries can elect to save their credit card information to facilitate checkout for future purchases. H2C may contact individual brands, or companies confidentially to request more information about their products or items listed through the H2C Services, or may request information from buyers to ensure compliance with our policies and applicable law. In order to use certain products or services on H2C, you may be required to complete an application; information that you submit through the application process will not be displayed publicly and will only be used internally by H2C and its service providers, unless otherwise specified.
Automated Information: H2C automatically receives and records information from your browser or your mobile device when you visit the Site, use the Apps, or use certain features of the H2C Services, such as your IP address or unique device identifier, cookies, and data about which pages you visit and how you interact with those pages in order to allow us to operate and provide the H2C Services. This information is stored in log files and is collected automatically. H2C may also receive similar information (like, for example, IP addresses and actions taken on the device) provided by a connected Internet of Things device such as a voice-activated assistant or Smart TV. We may combine this information from your browser or your mobile device with other information that we or our advertising or marketing partners collect about you, including across devices. This information is used to prevent fraud and to keep the H2C Services secure, to analyze and understand how the H2C Services work for members and visitors, and to provide advertising, including across your devices, and a more personalized experience for members and visitors.
We also automatically collect device-specific information when you install, access, or use our H2C Services. This information can include information such as the hardware model, operating system information, app version, app usage and debugging information, browser information, IP address, and device identifiers. For more information about these online tools and how we use them, see our Cookies & Similar Technologies Policy and “Information Uses, Sharing, & Disclosure” Section below.
Data from H2C Brands, Vendors and Suppliers: We also receive information from our vendors and suppliers about you. This information can include customer service interactions, payments information, shipping information, and information shared to H2C.
Data from Advertising and Marketing Partners: As described below, H2C receives information from our advertising and marketing partners about you. This information can include attribution information via cookies and UTM tags in URLs to determine where a visit to H2C comes from, responses to marketing emails and advertisements, responses to offers, and audience information from partners who you have given consent to share that information with us.
Location Information: We collect information about your use of the H2C Services for advertising, for analytics, to serve content, and to protect the H2C Services. This can include your IP address, browser information (including referrers), device information (such as iOS IDFA, IDFV for limited non-advertising purposes, Android AAID, and, when enabled by you, location information provided by your device). When you use the Apps, you can choose to share your geolocation details with H2C in order to use functions like our local marketplace. You can choose to publish your location when you sell on H2C.
We obtain location information you provide in your profile or your IP address. With your consent, we may also determine location by using other information from your device, such as precise location information from GPS or information about wireless networks or cell towers near your mobile device. We use and store information about your location to provide features and to improve and customize the H2C Services, for example, for H2C's internal analytics and performance monitoring; localization, regional requirements, and policies for the H2C Services; for local content, search results, and recommendations; for shipping and mapping services; and (using non-precise location information) marketing. If you have consented to share your precise device location details but would no longer like to continue sharing that information with us, you may revoke your consent to the sharing of that information through the settings on the Apps or on your mobile device. Certain non-precise location services, such as for security and localized policies based on your IP address or submitted address, are critical for the Site to function. We will only share your geolocation details with third parties (like our mapping, payments, or, to the extent applicable, advertising providers) in order to provide you with the H2C Services. You may also choose to enable the Apps to access your mobile device's camera to upload photographs to H2C.
Analytics Information: We use data analytics software to ensure Site and App functionality and to improve the H2C Services. This software records information such as how often you use the Apps, what happens within the Apps, aggregated usage, performance data, app errors and debugging information, and where the Apps were downloaded from. We do not link the information we store within the analytics software to any personally identifiable information that you submit within the mobile application. For more information, see H2C's Cookies and Similar Technologies Policy and Disclosures.
Information from Third Parties: Some members or visitors may choose to connect to H2C or register an H2C account using an external third-party application, such as Facebook, or an app developed using H2C's API. Connecting your H2C account to third-party applications or services is optional. If you choose to connect your account to a third-party application, H2C can receive information from that application. We may also collect public information in order to connect with you, such as when we communicate with you over social media. We may use that information as part of providing the H2C Services to you. You can also choose to share some of your activity on H2C on certain social media networks which are connected to your H2C account, and you can revoke your permission anytime in your account settings. Certain third-party applications that you use to create or sign in to your account may provide you with the option to discontinue receiving messages from us or allows you to forward those messages to another email address. If we are unable to send you critical messages about your account, we may suspend or terminate your account.
Non-Member Information: H2C receives or obtains information (for example, an email address or IP address) about a person who is not yet a registered H2C member (a “non-member”) in connection with certain H2C features, such as when a non-member chooses to subscribe to an H2C newsletter, a member invites a non-member to visit the Site, a member uploads non-member information using the contact uploader feature, a non-member engages in a transaction, a member sends a gift card code to a non-member, or a non-member uses Guest Checkout to make a purchase. Non-member information is used only for the purposes disclosed when it was submitted to H2C, for purposes necessary to the functioning of H2C's Services or where H2C has a legitimate interest, as disclosed in the “Information Uses, Sharing, & Disclosure” Section below, or to facilitate action authorized by a member or the non-member.
You can choose to import your contacts from your mobile device or personal email address book, or a social network account to H2C. We do not retain the login information for your email service, mobile device, or social network site. You can search for people you know by email address or phone number on the Site or through the contact information you import. When you begin following another member's activity, they will receive an email notification (if the member has consented to receiving this type of email).
If you do not want your contacts to be able to find you on H2C through your email address, phone number, or social networking connections, then you can change your findability through your account settings. If you do not wish to be located on H2C via your name, you can remove your name and instead may use a nickname or alias as your name in your public account information.
H2C is a marketplace and a community. We offer several features that allow members to connect and communicate in public or semi-public spaces, which are a part of the H2C community. You don't have to use these features, but if you do, please use common sense and good judgment when posting in these community spaces or sharing your personal information with others through the H2C Services. Be aware that any personal information that you choose to submit there can be read, collected, or used by others, or could be used to send unsolicited messages to you. We engage certain third parties to assist in providing community services to you and, in the context of that relationship, we need to share some of your information with such third parties in order to provide that service. This may include, for example, information from your H2C account that is publicly available, your H2C username and/or brand name, the display name you've optionally chosen to share publicly in your H2C account, avatar image, the date that you registered on H2C, as well as your language and regional settings on the Site. If you close your H2C account, your related personal information will be deleted. However, your posts may remain public after your account is closed, although your name will no longer be displayed alongside the post. You are responsible for the personal information that you choose to post in community spaces through the H2C Services. You can set your privacy preferences and download your data, and close or delete your account by submitting a request to H2C.
Another member may follow your public activity to receive updates, such as when you add an item to your public Favorites. You may choose to make certain activities private through your account settings. You have the option to block any member with whom you do not wish to share your updates.
4. Information Uses, Sharing, & Disclosure
We respect your privacy. H2C will not disclose your name, email address, or other personal information to third parties without your consent, except as specified in this policy.
You can control your privacy settings through the opt-out buttons in your account settings privacy tab. Please note that some changes to your privacy settings may take some time to take effect. We or our sellers, brands may advertise our H2C Services or products through a variety of different mediums and rely on your consent to do so off-site.
When you access or use the H2C Services, we collect, use, share, and otherwise process your personal information for the purposes described in this policy. We rely on a number of legal bases to use your information in these ways. These legal bases include where:
- You have consented to the processing, which you can revoke at any time;
- Necessary to comply with a legal or regulatory obligation, a court order, or to exercise or defend any impending or asserted legal claims;
- Necessary for the purposes of our or a third party's legitimate interests, such as those of visitors, members, or partners (described in more detail below);
- You have expressly made the information public;
- Necessary in the public interest, such as to prevent crime; and
- Occasionally necessary to protect your vital interests or those of others (in rare cases where we may need to share information to prevent loss of life or personal injury).
We principally rely on consent (which can be withdrawn at any time) (i) to send marketing messages, (ii) for third-party data sharing related to advertising, and, to the extent applicable, (iii) for the use of location data for advertising purposes.
We or our brands, sellers may advertise our H2C Services or our products through a variety of different mediums and rely on your consent to do so off-site. As part of this, we may work with advertising partners such as Facebook, Google, and other partners disclosed in our Cookies and Similar Technology Policy. These partners have their own privacy policies and consent mechanisms for their customers, in addition to H2C's controls. You may see the privacy policies and privacy choices for these partners, and the information you share with them, in our Cookies and Similar Technology Disclosures.
Our Legitimate Interests
Where we process your information on the basis of legitimate interests, we do so as follows:
Providing and Improving our Services: We use your information to improve and customize our H2C Services, including sharing your information for such purposes, and we do so as it is necessary to pursue our legitimate interests of improving our H2C Services for our users. This is also necessary to enable us to pursue our legitimate interests in understanding how our H2C Services are being used, and to explore and unlock ways to develop and grow our business. It is also necessary to allow us to pursue our legitimate interests in improving our H2C Services, efficiency, interest in H2C Services for users, and obtaining insights into usage patterns of our H2C Services. As a core part of our H2C Services, we have a legitimate interest in customizing your on-site experience to help you search for and discover relevant items and recommended purchases, including using this information to help sellers find the best ways to market and sell their products on H2C.
Providing Marketing Communications: We rely on our legitimate interest to send you marketing messages (where permitted independent of consent) and for H2C's advertising programs (including H2C's on-site advertising and marketing).
Keeping our Services Safe and Secure: We use your information for safety and security purposes, which can include sharing your information for such purposes, and we do so because it is necessary to pursue our legitimate interests or those of a third party in ensuring the security of our H2C Services, preventing harm to individuals or property, or crime, enforcing or defending legal rights, or preventing damage to H2C's systems, or those of our users or our partners. This includes enhancing protection of our community against spam, harassment, intellectual property infringement, crime, and security risks of all kinds. We use your information to provide and improve the H2C Services, for billing and payments, for identification and authentication, and for general research and aggregate reporting.
Site Customization: We may learn about the types of products that you're interested in from your browsing and purchasing behavior on (and off) the Site or Apps and use such information to suggest potential purchases as a result. As a core part of our Services, we have a legitimate interest in customizing your on-site experience to help you search for and discover relevant items and recommended purchases, including using this information to help sellers find the best ways to market and sell their products on H2C.
If H2C receives a lawful, verified request for a member's records or information in one of the limited circumstances described in the previous paragraph, H2C may disclose personal information, which may include, but may not be limited to, a member's name, address, phone number, email address, company/trading name and, where appropriate, bank account and transaction details.
Aggregated Information: H2C may share demographic information with business partners, but it will be aggregated and de-personalized so that personal information is not revealed.
Service Providers: H2C also needs to engage third-party companies and individuals (such as research companies, and analytics and security providers) to help us operate, provide, and market the H2C Services. These third parties have only limited access to your information, may use your information only to perform these tasks on our behalf, and are obligated to H2C not to disclose or use your information for other purposes. Our engagement of service providers is often necessary for us to provide the H2C Services to you, particularly where such companies play important roles like helping us keep our H2C Service operating and secure. In some other cases, these service providers aren't strictly necessary for us to provide the H2C Services, but help us make it better, like by helping us conduct research into how we could better serve our users. In these latter cases, we have a legitimate interest in working with service providers to make our H2C Services better.
This policy does not apply to the practices of third parties (such as other members who sell using the H2C Services, certain third-party providers on whom we rely to provide certain services, or API users) that H2C does not own or control or individuals that H2C does not employ or manage, except as otherwise provided for in the Terms or as required by law. If you provide your information to such third parties in connection with your use of the H2C Services, different practices may apply to the use or disclosure of the information that you provide to them. While H2C requires these third parties to follow H2C's privacy and security requirements, H2Cdoes not control the privacy or security policies of such third parties. To the full extent applicable in your jurisdiction, H2C is not responsible for the privacy or security practices of these sellers, API users, or other websites on the internet, even those linked to or from the H2C Services. We encourage you to read the privacy policies and ask questions of third parties before you disclose your personal information to them. These sellers, third party providers, and API users are independent controllers of data, which means that they are responsible for providing and complying with their own policies relating to any personal information they obtain in connection with the H2C Services.
The United States, European Economic Area (“EEA”) Member States, and other countries all have different laws. When your information is moved from your home country to another country, the laws and rules that protect your personal information in the country to which your information is transferred may be different from those in the country in which you live. To the extent that H2C relies separately, alternatively, and independently on the following legal bases to transfer your information:
Necessary for the Performance of the Contract between H2C and its Members
The security of your personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and after it is received. Unfortunately, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security.
Your account information is protected by a password. It is important that you protect against unauthorized access to your account and information by choosing your password carefully and by keeping your password and computer secure, such as by signing out after using the Services. H2C offers advanced security features and settings, such as two-factor authentication for signing in, and sign in history and notifications; you can view more information in your account settings.
H2C will retain your information only for as long as is necessary for the purposes set out in this policy, for as long as your account is active (i.e., for the lifetime of your H2C account), or as needed to provide the H2C Services to you. If you no longer want H2C to use your information to provide the H2X Services to you, you may close your account. H2C will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this policy. In addition, H2C brands, and sellers may also be required to retain and use your information in order to comply with their own legal obligations. Please note that closing your account may not free up your email address, username, or for reuse on a new account. We also retain log files for internal analysis purposes. These log files are generally retained for a brief period of time, except in cases where they are used for site safety and security, to improve site functionality, or we are legally obligated to retain them for longer time periods.
8. Your Rights & Choices
Certain privacy laws around the world, including the California Consumer Privacy Act (CCPA), provide users with rights related to their personal information. Consistent with those laws, H2C gives you the choice of accessing, editing, or removing certain information, as well as choices about how we contact you. You may change or correct your H2C account information through your account settings. You may also remove certain optional information that you no longer wish to be publicly visible through the H2C Services, such as your name. You can also request to permanently close your account and delete your personal information. Depending on your location, you may also benefit from a number of rights with respect to your information.While some of these rights apply generally, certain rights apply in limited cases.
- Right to Access & Portability: You can access certain personal information associated with your account by visiting your account privacy settings. You can request a copy of your personal information in an easily accessible format and information explaining how that information is used.
- Right to Correction: You have the right to request that we rectify inaccurate information about you. By visiting your account settings, you can correct and change certain personal information associated with your account.
- Right to Restrict Processing: In certain cases where we process your information, you may also have the right to restrict or limit the ways in which we use your personal information.
- Right to Deletion: In certain circumstances, you have the right to request the deletion of your personal information, except information we are required to retain by law, regulation, or to protect the safety, security, and integrity of H2C.
- Right to Object: If we process your information based on our legitimate interests as explained above, or in the public interest, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons. Where we use your personal data for direct marketing purposes, you can object using the unsubscribe link in such communications or changing your account email settings.
- Right to Withdraw Consent: Where we rely on consent, you can choose to withdraw your consent to our processing of your information using specific features provided to enable you to withdraw consent, like an email unsubscribe link or your account privacy preferences. If you have consented to share your precise device location details but would no longer like to continue sharing that information with us, you can revoke your consent to the sharing of that information through the settings on your mobile device. This is without prejudice to your right to generally permanently close your account and delete your personal information.
The CCPA provides California residents with the following additional rights:
- Right to Know: California residents may request disclosure of the specific pieces and/or categories of personal information that the business has collected about them, the categories of sources for that personal information, the business or commercial purposes for collecting the information, the categories of personal information that we have disclosed, and the categories of third parties with which the information was shared.
- Right to Opt-Out: To the extent that H2C “sells” personal information(as that term is defined under the CCPA), California residents are entitled to opt-out of the “sale” of data at any time (see below for more information).
If you would like to manage, change, limit, or delete your personal information, you can do so via your H2C account settings. Once you contact us to exercise any of your rights, we will confirm receipt of your request.
Limiting use of, or deleting, your personal information may impact features and uses that rely on that information. However, we will not discriminate against you for exercising any of your rights, including otherwise denying you goods or services, providing you with a different level or quality of services, or charging you different prices or rates for services. If you need further assistance, you can contact H2C through one of the channels listed below under “Contact”. We will respond to your request within a reasonable timeframe.
Please note that we may verify your identity before we are able to process any of the requests described in this Section, and in our discretion, deny your request if we are unable to verify your identity. As a part of this process, government or other identification may be required. You may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide a valid power of attorney, the requester's valid government issued identification, and the authorized agent's valid government issued identification, and we may verify the authenticity of the request directly with you.
Email & Messages
You may also control the receipt of certain types of communications from H2C in your account settings. H2C may send you messages about the H2C Services or your activity.
Some of these messages are required, service-related messages for members (such as transactional messages or legal notices). Other messages are not required, such as newsletters. You can control which optional messages you choose to receive by changing your account settings. Section of this policy. If you no longer wish to use the H2C Services or receive service-related messages (except for legally required notices), then you may close your account.
We use both technically necessary (for the functioning and security of the Services) and non-technically necessary cookies and similar technologies. A more detailed explanation of the technologies we use, and how to opt out when applicable, can be found in H2C's Cookies & Similar Technologies Policy.
Additional Disclosures for California Residents
Notice of Collection
In addition to the Rights & Choices described above, the CCPA requires disclosure of the categories of personal information collected over the past 12 months. While this information is provided in greater detail in the “Information Collected or Received Section above, the categories of personal information that we have collected â€“ as described by the CCPA â€“ are:
- Identifiers, including name, email address, shop name, IP address, and an ID or number assigned to your account.
- Other individual records such as phone number, billing address, or credit or debit card information. This category includes personal information protected under pre-existing California law (Cal. Civ. Code 1798.80(e)), and overlaps with other categories listed here.
- Demographics, such as your age or gender, or, where you have provided such information to H2C voluntarily, demographic information about your race, ethnicity, sexual orientation, or gender identity, provided in relation to specific marketing and advocacy projects and campaigns.This category includes data that may qualify as protected classifications under other California or federal laws.
- Commercial information, including purchases and engagement with H2C Services.
- Internet activity, including your interactions with our H2C Services and what led you to our H2C Services.
- Sensory visual data, such as pictures posted on our H2C Service.
- Geolocation data provided through location enabled services such as WiFi and GPS.
- Inferences, including information about your interests, preferences and favorites.
The Purposes for Our Collection
We collect and use these categories of personal information for our business and commercial purposes described in the “Information Uses, Sharing and Disclosure” Section above, including providing and improving the H2C Services, maintaining the safety and security of the H2C Services, processing purchase and sale transactions, and for advertising and marketing services.
Third Party Marketing and Advertising and Your Rights (Opt-Out of “Sale”)
H2C does not sell personal information to third parties for monetary value. However, the term “sale” is defined broadly under the California Consumer Privacy Act. To the extent that “sale” under the CCPA is interpreted to include interest based advertising or other data uses described in the “Information Uses, Sharing and Disclosure” Section above, we will comply with applicable law as to those activities.
To opt-out of receiving interest based advertising, you can exercise your choice by using your account privacy settings, or the general privacy settings link located at the footer of our homepage and most pages of the Site. The right to opt-out of interest based advertising is available to all H2C users.
Do Not Track Signals
Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no industry consensus as to what site and app operators should do with regard to these signals. Accordingly, unless and until the law is interpreted to require us to do so, we do not monitor or take action with respect to “Do Not Track” signals. For more information on “Do Not Track,” visit http://www.allaboutdnt.com.
Shine the Light
California law entitles residents to ask for a notice describing what categories of personal information we share with third parties for their own direct marketing purposes. Other than to Sellers on H2C, who must obtain your separate consent for their own marketing off of H2C, or unless you request us to or consent to it, H2C does not share any personal information to third parties for their own direct marketing purposes.
If you have a disability and would like to access this policy in an alternative format, please contact us.
9. Your Responsibilities
We may amend or update this policy from time to time. If we believe that the changes are material, we'll let you know by doing one (or more) of the following: (i) posting the changes on or through the Services, (ii) sending you an email about the changes, or (iii) posting an update in the version notes on the Apps' platform. We encourage you to check back regularly and review any updates.
If you have any questions:
Contact H2C's Support team via: info@Heres2CBD.com
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, you may contact us at: info@Heres2CBD.com
Without prejudice to any other rights you may have, if you are located outside of North America or South America, or you live in the EEA, you may also file a complaint with your local data protection regulator.
Last updated on Jul 13, 2020