Privacy Policy

Last updated: 6 November 2025
Applies to South African residents

Cool Canna operates this website and online store, including all related content, features, tools, products, and services (the “Services”), to provide members with a secure, curated, and responsible experience.

Our store is powered by Shopify, which enables us to provide the Services. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use the Services.

1. What Is Personal Information?

“Personal information” refers to information that identifies, relates to, or can reasonably be linked to you as an individual. It does not include information that has been anonymised or de-identified so that it cannot reasonably be linked to you.

2. Personal Information We Collect

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

• Contact details: Name, billing and delivery address, phone number, email address
• Financial information: Payment method, transaction details, and payment confirmations (full card details are not stored by us)
• Account information: Username, password, preferences, and account settings
• Transaction information: Products viewed, added to cart, purchased, returned, or cancelled
• Communications: Information you provide when contacting us or requesting support
• Device & usage data: IP address, browser type, device identifiers, and interaction data

3. Sources of Personal Information

• Directly from you when you register, place an order, or contact us
• Automatically through cookies and similar technologies when you use the Services
• From trusted service providers acting on our behalf (e.g. payments, analytics, fulfilment)
• From partners or third parties where permitted by law

4. How We Use Personal Information

We process personal information lawfully and only where necessary, including to:

• Provide, operate, and improve the Services
• Process payments, fulfil orders, and arrange delivery
• Manage member accounts and preferences
• Provide customer support and respond to enquiries
• Send essential service and account communications
• Send marketing or promotional communications (where consent has been given)
• Detect fraud, prevent misuse, and maintain platform security
• Comply with legal, regulatory, and contractual obligations

5. Marketing & Communications

You may receive promotional communications from us. You may opt out at any time by using the unsubscribe link included in our emails. Opting out of marketing communications does not affect essential service-related messages concerning your account or orders.

6. Disclosure of Personal Information

We share personal information only where lawful and necessary, including with:

• Shopify and trusted service providers (payments, hosting, analytics, delivery)
• Marketing and advertising partners (with consent)
• Affiliates within our corporate group
• Authorities or third parties where required by law or legal process
• Parties involved in a legitimate business transaction (e.g. restructuring or merger)

7. Relationship with Shopify

The Services are hosted by Shopify, which processes personal information to provide and improve the platform and related features. Shopify may process data across multiple jurisdictions. Cool Canna remains responsible for the personal information it collects and controls, while Shopify acts as a data processor in accordance with its own privacy obligations.

For more information, please review Shopify’s Consumer Privacy Policy at https://privacy.shopify.com/en .

8. Data Security & Retention

We implement appropriate technical and organisational safeguards to protect personal information. However, no system can be guaranteed to be completely secure.

Personal information is retained only for as long as reasonably necessary to fulfil the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements.

9. Children’s Data

The Services are intended for adults aged 18 years and older. We do not knowingly collect personal information from children. If such information is identified, it will be deleted.

10. Your Rights (POPIA)

Under South African law, you may have the right to:

• Access the personal information we hold about you
• Request correction or updating of your information
• Request deletion where legally permissible
• Object to certain processing activities
• Withdraw consent for marketing communications

Requests may be submitted to info@coolcanna.co.za. Identity verification may be required.

11. Complaints

If you have concerns regarding how your personal information is handled, you may lodge a complaint with:

Information Regulator (South Africa)
P.O. Box 31533, Braamfontein, Johannesburg, 2017
Email: complaints.IR@justice.gov.za

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page and reflected in the “Last updated” date above.

Cool Canna
Transparent. Responsible. South African.