Vervana Privacy Policy

1.2. Data Collection

• Personal Data: We collect information you provide voluntarily, including sensitive medical information related to your experiences with medical cannabis.
• Usage Data: We also collect data automatically (e.g., cookies, IP addresses) as explained in our Cookie Policy.

1.3. Purpose and Legal Basis for Data Processing

• Service Delivery: Your data is used to provide, maintain, and improve our services.
• Data Aggregation: Aggregated, anonymized data is used for generating insights for cultivators.
• Legal Compliance: Data processing is based on your explicit consent (as evidenced by our User Consent Form) and is compliant with international legal requirements (e.g., GDPR, FADP).

1.4. Data Sharing

• Third Parties: We do not sell your personal data. It is only shared:
  • As required by law;
  • With your explicit consent; or
  • In aggregated, anonymized form for analysis.
• Healthcare Providers: If you opt in, your data may be shared with healthcare providers via secure, encrypted channels (e.g., HIN.ch).

1.5. Data Storage, Retention, and Security

• Secure Storage: Your data is stored on secure servers located in Switzerland and, where necessary, in other jurisdictions under equivalent protection standards.
• Retention: Personal data is retained only as long as necessary to fulfill the purposes outlined in this policy or as required by law.
• Security Measures: We employ state-of-the-art encryption, access controls, and regular audits to protect your data.

1.6. Data Breach Notification and Remediation

• Breach Procedures: In the event of a data breach, we will notify affected users promptly, in compliance with applicable laws (e.g., GDPR, FADP).
• Mitigation: We will take immediate remedial action to mitigate any damage.

1.7. Your Rights

• Access & Correction: You have the right to access, correct, or update your personal data.
• Deletion & Withdrawal: You may request deletion or withdraw consent at any time by contacting our Data Protection Officer (DPO) at info@vervana.co. Instructions for doing so are also provided in our User Consent Form.
• Portability: Where applicable (e.g., under GDPR), you have the right to data portability.

1.8. International Data Transfers

• Cross-Border Transfers: Should your data be transferred outside its country of origin, we will ensure that such transfers comply with applicable legal frameworks (e.g., Standard Contractual Clauses under the GDPR).

1.9. Cookie and Tracking Technologies

• Cookie Use: We use cookies and similar technologies to enhance user experience. Detailed information and controls are provided in our Cookie Policy, which forms an integral part of this Privacy Policy.

1.10. Compliance with International Regulations

Our data practices conform to the requirements of:

• EU: GDPR
• US: Applicable privacy laws including the CCPA
• Canada: PIPEDA
• UK: Data Protection Act 2018
• Australia: Privacy Act 1988
• Switzerland: FADP

This ensures that your data is handled with the highest standards of protection worldwide.

1.11. Changes to the Privacy Policy

• Updates: We may update this Privacy Policy periodically. Significant changes will be communicated on the platform and via email.
• Continued Use: Continued use of our services implies acceptance of any updated policy.

1.12. Governing Law

This Privacy Policy is governed by the laws of the United States, with reference to other applicable international laws as noted.