Privacy Policy

1. Introduction

Recreational LLC, doing business as We Have Hemp ("Company," "we," "us," or "our"), operates the wehavehemp.com wholesale platform ("Platform"). This Privacy Policy describes how we collect, use, store, share, and protect personal and business information when you access or use our Platform.

This Platform is designed for business-to-business (B2B) wholesale transactions. By creating an account or using the Platform, you consent to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

We collect the following categories of information:

2.1 Account and Business Information

When you register for an account or place an order, we collect:

• Full name and job title
• Business name, address, and EIN or business license number
• Email address
• Phone number
• Shipping and billing addresses
• State resale or hemp license information, where applicable

2.2 Payment Information

Payment transactions are processed through Clover, our third-party payment processor. We do not store full credit card numbers, CVV codes, or other sensitive payment credentials on our servers. Clover handles payment data in accordance with PCI-DSS (Payment Card Industry Data Security Standard) requirements. We may retain transaction identifiers, order totals, and payment status for order management and accounting purposes.

2.3 Usage Data

When you access the Platform, we may automatically collect:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring URL
• Date and time of access
• Device identifiers

2.4 Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your authenticated session, remember your preferences, and improve Platform performance. Specifically:

• Essential Cookies: Required for authentication and session management. These are necessary for the Platform to function and cannot be disabled.
• Functional Cookies: Used to remember your preferences and settings to provide a more personalized experience.
• Analytics Cookies: Help us understand how visitors interact with the Platform so we can improve functionality and user experience.

You can control cookie settings through your browser. However, disabling essential cookies may prevent you from using certain features of the Platform, including logging in and placing orders.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Order Fulfillment: Processing, shipping, and tracking your wholesale orders.
• Account Management: Creating, maintaining, and securing your account.
• Communication: Sending order confirmations, shipping notifications, account updates, and responding to inquiries. Transactional emails are sent via SendGrid, our third-party email delivery service.
• Payment Processing: Facilitating secure payment transactions through Clover.
• Platform Improvement: Analyzing usage patterns to improve functionality, performance, and user experience.
• Legal Compliance: Meeting our legal and regulatory obligations, including record-keeping requirements for hemp product sales.
• Security: Detecting, preventing, and addressing fraud, unauthorized access, and other security issues.
• Customer Support: Resolving issues, answering questions, and providing assistance related to orders and account management.

4. Data Storage and Security

Your account information, order history, and business data are stored in Supabase, our cloud database platform. Supabase provides enterprise-grade security features, including:

• Encryption of data at rest and in transit
• Row-level security policies that restrict data access to authorized users
• Regular security audits and compliance monitoring

Authentication is handled through Supabase Auth with secure, cookie-based sessions. Passwords are hashed and salted using industry-standard algorithms and are never stored in plain text.

While we implement commercially reasonable security measures to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information.

5. Third-Party Service Providers

We share information with the following third-party service providers solely to operate and improve the Platform:

• Supabase: Cloud database and authentication services for storing account, order, and product data.
• Clover: Payment processing for secure checkout transactions.
• EasyPost / UPS: Shipping label generation, rate calculation, and package tracking. Your name, business name, and shipping address are shared with UPS to fulfill deliveries.
• SendGrid: Transactional email delivery for order confirmations, shipping notifications, and account-related communications.
• Vercel: Platform hosting and deployment infrastructure.

Each third-party provider is contractually obligated to handle your information in accordance with their respective privacy policies and applicable data protection laws. We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal and business information for as long as your account is active or as needed to provide services to you. We may also retain certain information as required by law, for legitimate business purposes such as tax reporting and record-keeping, or to resolve disputes and enforce our agreements.

Order records and transaction history are retained for a minimum of seven (7) years to comply with tax and regulatory requirements. If you request account deletion, we will remove your personal information from active systems within thirty (30) days, except for data we are legally required to retain.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to legal retention requirements.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Opt-Out: Unsubscribe from non-essential communications at any time by using the unsubscribe link in our emails or by contacting us directly.

To exercise any of these rights, please contact us at orders@wehavehemp.com. We will respond to verified requests within thirty (30) days.

8. Children's Privacy

This Platform is intended exclusively for use by adults who are at least 21 years of age and who represent legitimate business entities. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have collected information from a person under 21, we will take steps to delete that information promptly.

9. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

To submit a request under California law, contact us at orders@wehavehemp.com with the subject line "California Privacy Request."

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will notify you of material changes by posting the updated Privacy Policy on this page and updating the "Last Updated" date below. For significant changes, we may also send a notification to the email address associated with your account.

Your continued use of the Platform after the posting of a revised Privacy Policy constitutes your acceptance of the changes.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Recreational LLC
Email: orders@wehavehemp.com
Website: wehavehemp.com