Last Updated on May 8th, 2020.
Information collection and use
We may collect, transmit, and store information about you in connection with your use of the Services, including any information you send to or through the Services. We use that information to provide the Services’ functionality, fulfill your requests, improve the Services’ quality, engage in research and analysis relating to the Services, personalize your experience, track usage of the Services, provide feedback to third party businesses that are listed on the Services, display relevant advertising, market the Services, provide customer support, message you, back up our systems, allow for disaster recovery, enhance the security of the Services, and comply with legal obligations. Sometimes we do not retain said information, yet it may still be transmitted to our servers initially and stored long enough to process.
A. Account Information: When you create a MapMyCBD user account, we store and use the information you provide during that process, such as the first and last name you enter, email address, zip code, physical address, age, and any other information you may provide during the account creation process, such as a gender, phone number, or birth date. We may publicly display the first name and last name that you provide or your created username, as well as any photo or other content you submit through the account creation process, as part of your account profile. We also store and use any preferences you provide to personalize your user experience, including local shops or other business services you use or any other activity preferences. You can always modify some of the account information you provide through your account profile settings. If you believe that someone has created an unauthorized account using your personal information, you can request its removal by communicating with us.
B. Public Content: Your contributions to the Services are intended for public consumption and are therefore viewable by the public, including your photos, feedback, reviews, posts, and edits to your or any business page information. Your account profile is also intended for public consumption, as well as some of your other activity through the Services, like your feedback and ratings and communications about other persons’ posts, and which businesses you make your favorite or mark for future reference. You can limit certain public characteristics of some of these activities through your profile account settings.
C. Contacts: You can invite others to join MapMyCBD by providing us with their contact information, or by allowing us to access contacts from your computer, mobile device, or third party sites to select which individuals you want to invite. If you allow us to access your contacts, we will transmit information about your contacts to our servers long enough to process your invitations.
D. Communications: When you sign up for an account or use certain features, you are opting to receive messages from other users, businesses, and from us. You can manage some of your messaging preferences through your profile account settings. However, you cannot opt out of receiving certain administrative, transactional, or legal messages from us. For example, if you place an order or request a quote from a business through the Services, we may send you messages about your transaction using the contact information you provide, including through automated emails or SMS text messages to your phone number. We may also track your actions in response to the messages you receive from us or through the Services, such as whether you deleted, opened, or forwarded such messages, and share that information with other parties to your messages (for example, to let them know if you have viewed their message). When a user requests a quote or similar information from multiple businesses through the Services, we may disclose to those businesses information about the status of the user’s requests, such as whether any business has responded to the request, the type of response provided (for example, a quote or a request for more information), and whether the user has responded to any business’s reply. If you exchange messages with others through the Services, we may store them in order to process and deliver them, allow you to manage them, and we may review and disclose them in connection with investigations related to use of the Services, as required by applicable law or as part of our efforts to improve the Services. We will not deliver messages that we believe are objectionable, such as spam messages, fraudulent solicitations, or requests to exchange reviews for compensation. If you send or receive messages through the Services (including via SMS text message), we may keep a log of phone numbers, carriers, as well as the date and time that the messages were sent and processed. Carriers may charge recipients for texts that they receive. We may also store information that you provide through communications to us, including from phone calls, letters, emails and other electronic messages, or in person. If you are a representative of a business listed on MapMyCBD, or use a phone number associated now or previously with such a business, we may contact you, including by phone or email, using the contact information you provide us, make publicly available, or that we have on record for your business. Our communications with you, including phone calls, may be monitored and recorded for quality purposes.
E. Transactions: If you initiate a transaction through the Services, such as a service engagement or purchase, we will collect and store information you provide associated with your transaction, such as your name, phone number, address, email, and payment information, as well as any other information you provide, in order to process your transaction, send communications about the transaction to you, and facilitate future transactions. This information may be shared with third parties, and third parties may share such information with us, for the same purposes. When you submit credit card numbers and other sensitive payment information, that information is encrypted using industry standard technology. If you write reviews about businesses with which you transact through the Services, we may publicly display the fact that you transacted with those businesses in connection with such reviews. For example, if you make an online order through the Services and later write a review about your experience, we may publicly display the fact that you made your purchase through the Services.
F. Activity: We store information about your use of the Services, such as your search activity, the pages you view, the date and time of your visits, businesses you call using links on our mobile applications, and purchases or transactions you make through the Services. We also store information that your computer or mobile device may provide to us in connection with your use of the Services, such as your browser type, type of computer or mobile device, browser language, IP address, WiFi information such as SSID, mobile carrier, phone number, unique device identifier, advertising identifier, location (including geolocation, beacon based location, and GPS location), and requested and referring URLs and mobile applications. We may also receive and store your location whenever our mobile applications are running, including when running in the background, if you enable our mobile apps to access such information in the course of using the Services. You may be able to limit or disallow our use of certain location data through your device or browser settings, for example by adjusting the settings for our applications in iOS or Android privacy settings.
G. Different Devices: You may access the Services through different devices (such as your mobile phone or personal computer) and different platforms (for example, the MapMyCBD website or MapMyCBD mobile apps). The information that we collect and store through those different uses may be cross-referenced and combined, and your contributions through one MapMyCBD platform will typically be similarly visible and accessible through all other MapMyCBD platforms.
H. Professional Information: If you represent a business on MapMyCBD, we may collect and display information about you related to your business activities, such as a business name that may incorporate your name, or a publicly available business address that is also used as a home address. We will also collect and display information about your professional background that you choose to share with us through the Services, such as information about your professional licenses or certifications, or your professional history or specialties.
I. Legal Basis for Processing (EEA and Switzerland only): For European Residents, our legal basis for collecting and using the information described above will depend on the specific information concerned and the context in which we collect it. We, however, will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person (for instance, to prevent, investigate, or identify possible wrongdoing in connection with the Services or to comply with legal obligations). If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), this interest will typically be to operate our Services, communicate with you in relation to our Services, or for our other legitimate commercial interests, for instance, when responding to your queries, to analyze and improve our platform, engage in marketing, or for the purposes of detecting or preventing fraud. If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us at the address listed below in the “Contact” section.
Third parties may receive information about you as follows:
B. Content Partners: We allow third party partners to use and display some of the public content available through the Services, such as your photos, reviews, and other information listed under “Public Content” above.
C. Service Providers: We rely on third party service providers to support or provide services for us in connection with your use of the Services, such as orders, delivery and procurement services, communications and hosting, security and fraud prevention, technical and customer support, tracking and reporting usage of the Services, quality assurance testing, payment processing, marketing, and other functions. We share information from or about you with these third party providers so that they can perform their services or complete your requests. For example, we may share your advertising identifiers (e.g., your IDFA, GAID, or a cryptographic hash of your email address) with third party service providers that help us facilitate MapMyCBD’s advertising programs and measure and report their effectiveness, including with third parties that help determine the effectiveness of our advertising programs by combining information they receive about you from sources other than the Services. You may be able to limit our access to some of this information through your mobile device settings, as described above, or through the Services’s settings. Our third party service providers may likewise share information with us that they obtain from or about you in connection with providing their services or completing your requests.
D. Aggregate or Anonymous Information: We share user information in the aggregate with third parties, such as businesses that are listed on MapMyCBD and content distributors. For example, we disclose the number of users that have been exposed to or interacted with advertisements, or that we believe visited the physical location of a particular business.
F. Businesses on MapMyCBD: We may share information from or about you (such as your city, and if you provide it, your age and gender), your device type, and your use of the Services (such as which businesses you mark as a favorite, visit their profile section or call, or if you visit a their URL) with businesses on MapMyCBD. You may adjust your account settings to increase or decrease the amount of information we share. Keep in mind that businesses can also view your public activity and posts, and may receive information from or about you when you transact or communicate with them, through us or otherwise, regardless of your settings. Additionally, if you make a phone call or send a message to a business through or in connection with your use of the Services, we may share information about your call with the business which the business would have received had you called them directly, such as the date and time of your call and your phone number. You may be able to limit our ability to collect and share your phone number through your phone settings or phone service provider.
G. Legal and Internal Investigations and Legal Disclosures: We may investigate and disclose information from or about you if we have a good faith belief that such investigation or disclosure: (a) is reasonably necessary to comply with legal or law enforcement processes, such as a search warrant, subpoena, statute, judicial proceeding, or other legal process or law enforcement request; (b) is helpful to prevent, investigate, or identify possible wrongdoing in connection with the Services; or (c) protects our rights, reputation, property, or that of our users, affiliates, or the public, such as disclosures in connection with our consumer alerts program. If you alert or otherwise complain to us about content through the Services, we may share the substance of your complaint with the contributor of that content in order to provide an opportunity for the contributor to respond.
H. Links: The Services may link to third party-controlled websites, like a business’s URL. Except as set forth herein, we do not share your personal information with them, and are not responsible for their privacy practices.
I. Third Party Integrations: If you sign up for, or log into, MapMyCBD using a third party service like Apple, Facebook or Google, or link your MapMyCBD account to your account with a third party service like Facebook, Instagram or Twitter, we may receive information about you from such third party service. If you post content to a third party service through the Services, that third party service will also receive that content, which will be visible to anyone that has access to it through that third party service. Some of our web pages utilize framing techniques to serve content to you from our third party partners, while preserving the look and feel of the Services. In such cases, please note that the information you provide may be transmitted directly to the identified third party partner. If you interact with businesses through MapMyCBD, they will receive whatever information you choose to share with them, for example contact information you share through direct messages to the business or your phone number if you call the business.
Controlling your personal data
Other users may be able to identify you, or associate you with your account, if you include personal information in the content you post publicly. You can reduce the risk of being personally identified by using the Services under a pseudonym or with your username, though doing so could detract from the credibility of your contributions to the Services. Please also note that the messages you send or receive using the Services are only private to the extent that both you and the recipient(s) of your messages keep them private. For example, if you send a message to another user, that user may choose to publicly post it. We may access, review, and disclose such messages in connection with investigations related to use of the Services, as well as our efforts to improve the Services.
Data retention and account termination
The Services is intended for adult audiences and is not directed to children under 18, although we have restricted it to 21. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information without parental consent, please contact us. If we become aware that a child under 18 has provided us with personal information without parental consent, we take steps to remove such information and terminate the child’s account.
We use various safeguards to protect the personal information submitted to us, both during transmission and after we receive it. However, no method of transmission over the Internet or via mobile device, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
MapMyCBD, Attn: Data Privacy Manager
814 Ponce de Leon Bvld, Suite 204
Coral Gables, Florida 31334
For security purposes, we will take such steps as we deem necessary to confirm your identity before completing your request or sharing any personal data with you.
California residents: your california privacy rights
Under the California Consumer Privacy Act of 2018 (“CCPA”), California residents have certain rights around MapMyCBD’s collection, use, and sharing of their personal information.
MapMyCBD does not sell your personal information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, we do not offer financial incentives associated with our collection, use, or disclosure of your personal information.
MapMyCBD collects various categories of personal information when you use the Services, including identifiers, commercial information, internet or other electronic network or device activity information, geolocation data, and professional information. A more detailed description of the information MapMyCBD collects and how we use it is provided above (Information: Collection and Use). Section 3 (Third Parties) describes the categories of third parties with whom we share personal information, and what information may be shared under different circumstances.
If you are a resident of California, you have the right to request to know what personal information has been collected about you, and to access that information. You also have the right to request deletion of your personal information, though exceptions under the CCPA may allow us to retain and use certain personal information notwithstanding your deletion request. You can learn more about how to submit a data rights request through our support center or by contacting us. You may also send your request by email to firstname.lastname@example.org. We will not discriminate against you for exercising your rights under the CCPA. An agent may submit a request on your behalf, but you must verify that your agent is authorized to do so.
Separate from the CCPA, California’s Shine the Light law gives California residents the right to ask companies what personal information they share with third parties for those third parties’ direct marketing purposes. We do not disclose your personal information to third parties for the purpose of directly marketing their goods or services to you unless you request such disclosure. If you have any questions regarding this policy, or would like to change your preferences, you may contact us at the address listed above.
Nevada residents: your nevada privacy rights
Nevada law (SB 220) requires website operators to provide a way for Nevada consumers to opt out of the sale of certain information that the website operator may collect about them. MapMyCBD does not sell your personal information to third parties as defined in Nevada law, and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. If you have any questions regarding our data privacy practices or our compliance with Nevada data privacy law, please contact us or email email@example.com.
European residents: your privacy rights and international data transfer
“European Resident” means a resident of a country in the European Economic Area (“EEA”) or Switzerland. If you are a European Resident, you have the right to access your personal data, and the right to request that we correct, update, or delete your personal data. You can object to the processing of your personal information, ask us to restrict processing of your personal information, and request portability of your personal information. Additional information regarding your exercise of these rights is available through the our support center. Similarly, if we have collected and processed your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. The Services generally provides you with a reasonable means to view and change your profile information and you can opt-out of marketing communications at any time by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you or in your account settings. If you have any questions or comments about the processing of your personal information, you may contact us as described in Section 8 above.