Privacy Policy

1. Who we are

Cannabizzz.nl ("cannabizzz", "we", "us") is an independent information platform that lists coffeeshops across the Netherlands along with their menus, strains, opening hours, reviews, and locations. We are based in Eindhoven, the Netherlands. For questions about this privacy policy or your personal data, contact us at info@cannabizzz.nl.

2. What data we collect

We collect different types of data depending on how you interact with our platform:

Website visitors: We use Google Analytics to collect anonymized usage data including pages visited, time spent, device type, browser, approximate location (city level), and referral source. This data is aggregated and cannot identify you personally. We also use cookies for website functionality and analytics (see Section 7).

Review authors: When you submit a review, we collect the name you provide and the review content. We do not require an account or email address to leave a review.

Shop owners (subscribers): When you create an account or subscribe, we collect your email address, name, and payment information. Payment data (credit card, iDEAL, Bancontact, SOFORT) is processed directly by Stripe and never stored on our servers.

3. Why we collect data

We process personal data for the following purposes and legal bases:

Analytics and improvement (legitimate interest): To understand how visitors use our platform, improve content and user experience, and monitor site performance.

Reviews (legitimate interest): To display user-generated reviews that help visitors make informed decisions about coffeeshops.

Account and subscription management (contract performance): To create and manage shop owner accounts, process subscription payments, and provide the services included in Pro and Business plans.

Communication (legitimate interest / contract): To respond to inquiries sent to info@cannabizzz.nl and send service-related notifications to subscribers.

4. Third parties

We share data with the following third-party services, all of which process data in accordance with GDPR:

Supabase (database hosting): Stores shop data, strain data, user accounts, and reviews. Supabase infrastructure is hosted in the EU.

Stripe (payment processing): Processes all subscription payments. Stripe is PCI DSS Level 1 certified. We do not store payment card details.

Google Analytics (website analytics): Collects anonymized usage statistics. IP addresses are anonymized before storage.

Google Places API (business data): Used to retrieve publicly available coffeeshop information such as addresses, opening hours, and reviews.

Netlify (hosting): Hosts our website. Netlify may process server logs containing IP addresses for security purposes.

We do not sell, rent, or trade your personal data to any third party.

5. Data retention

Website analytics data is retained according to Google Analytics default settings (26 months). Reviews are stored indefinitely unless you request removal. Shop owner account data is retained for the duration of the account and deleted within 30 days after account closure. Payment records are retained as required by Dutch tax law (7 years).

6. Your rights under GDPR

As a resident of the EU/EEA, you have the following rights:

Right of access: Request a copy of the personal data we hold about you.

Right to rectification: Request correction of inaccurate personal data.

Right to erasure: Request deletion of your personal data, subject to legal retention obligations.

Right to portability: Request your data in a structured, machine-readable format.

Right to object: Object to processing based on legitimate interest.

Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at info@cannabizzz.nl. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Cookies

We use essential cookies required for the website to function (e.g., language preference, session management). We also use Google Analytics cookies to collect anonymized usage data. By using our website, you consent to the use of these cookies. You can disable cookies in your browser settings, though some features may not work correctly.

8. Security

We take appropriate technical and organizational measures to protect your personal data. All data is transmitted over HTTPS. Database access is restricted to authorized personnel. Payment processing is handled by Stripe with PCI DSS Level 1 compliance.

9. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the website after changes constitutes acceptance of the updated policy.

10. Contact

For any questions about this privacy policy or your personal data, contact us at info@cannabizzz.nl.