Our Privacy Policy

Welcome to Startupq8.com (the “Site”), mobile and/or software applications, provided by Startupq8 Inc., and its affiliates, subsidiaries, parent company and other related companies, including Startupq8 Canada, Ltd., and Startupq8 Holdings GmbH (“Us”, “We”, or Startupq8). This Startupq8 Privacy Notice (“Notice”) describes the information we collect, use, and disclose about you when you use the Site, mobile applications, and related services (together, the “Services”) and how we use, process, and disclose that information. We may supplement this Notice with other notices. This Notice applies to Services that display or reference this Notice, but it does not apply to any services that display or reference a different privacy statement.

Information We Collect from You Through Your Use of the Services
The information we collect depends on how you interact with us, the Services you use, and the choices you make.

We collect information about you from different sources and in various ways when you use our Services, including information you provide directly, information collected automatically, third-party data sources, and information we infer or generate from other data.

Provided By You Directly. You may provide us with additional information by filling in forms on the Services or by corresponding with us or by using our Services by phone, text, email, live chat, or otherwise. If you create an account, we may collect the following types of information from you:

Contact information. We collect contact information such as your name, username, email address, and phone number;
Demographics data. When you register or at other times, we request that you provide demographics information such as your gender and location;
Content and files. We collect photos, documents, files, and any other information that you provide us, such as reviews, content, and bio information. If you send us email messages or other communications, we will collect and retain those communications; and
Reservations and transactions. If you initiate a reservation or order through our Services, such as a pickup reservation, we collect information necessary to complete your reservation or order, such as your contact information, order information, government-issued ID (if necessary), and depending on what type of reservation or order you place, a valid delivery address. In some instances, you may also submit data that may be considered personal medical information, such as medical marijuana patient identification for certain orders placed through our Services. We use this information to facilitate your order (and future orders), from receiving the order to sending the information to the retailer (or the retailer’s authorized service provider) you intend to have fulfill your order.
Information Collected Automatically. When you use the Services, se automatically collect information about you, for example:

Usage data. We automatically log your activity on our Services, including pages you have viewed and actions you take on the Services and the URL of the website from which you came to our sites.
Identifiers and device information. When you visit our Services, our servers automatically collect certain technical information about your device including your Internet protocol address and information about your device, including device identifiers (such as MAC address), your browser type, language and identifying information, your operating system and application version, device types, device model and manufacturer, and your device operating system type and version. As further described in the Cookies and Similar Technologies section below, our Services store and retrieve cookie identifiers, mobile IDs, and other data.
Geolocation data. Depending on your device and app settings, we collect geolocation data when you use our apps or online services.
Cookies and Similar Technologies. We also use cookies, Web beacons, mobile analytics and advertising IDs, URL information, and other similar technologies to operate our Services and to gather data, including other identifiers, device information, and usage data. Cookies are small pieces of information that a website sends to your computer’s hard drive while you are viewing a website. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which usually stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Site. The text in a cookie often consists of a string of numbers and letters that uniquely identifies your device, but it can contain other information as well. We use cookies on our websites to store your preferences and settings, enable you to sign-in, provide interest-based advertising, combat fraud, analyze how our Services perform, and fulfill other legitimate purposes.

Our web pages may also contain electronic images known as web beacons (also called single-pixel gifs) that we use to help deliver cookies on our websites, count users who have visited those websites, and gather usage and performance data. We also include web beacons in our promotional email messages or newsletters to determine whether you open and act on them.

Mobile analytics and advertising IDs are generated by operating systems for mobile devices (iOS and Android) and can be accessed and used by apps in much the same way that websites access and use cookies. Our apps contain software that enables our third-party analytics and advertising partners to access the mobile IDs.

We, together with our third-party analytics service providers and advertising partners, use these technologies in our Services to collect personal information (such as the cookies stored on your browser, the advertising identifier on your mobile device, or the IP address of your device) when you visit our Services. We and our partners may also use these technologies to collect personal information about your online activities over time and across different Web sites. This information is used to store your preferences and settings, enable you to sign-in, analyze how our Services perform, track your interaction with the Services, develop inferences, deliver and tailor interest-based advertising, combat fraud, and fulfill other legitimate purposes. We and/or our partners also share the information we collect or infer with third parties for these purposes.


We permit advertisements to be delivered to you by third-party Internet advertising companies (also called ad networks or network advertisers). These companies may use cookies, Web beacons, platform device identifiers, software agents, and other technologies to collect non-personally identifiable information about your visits over time on our Service and across other websites to deliver advertisements to you targeted to your interests, measure their effectiveness and personalize advertising content, and to understand the usage and visitation of the Services and the other applications and websites tracked by these advertising companies. We do not have access to or control over cookies, Web beacons, platform device identifiers, software agents, or other technologies that they may use. We are not responsible for the privacy practices of third party advertisers. You should check the privacy policy of the third-party advertiser to determine how it handles information it separately collects from you. In addition, the Network Advertising Initiative offers information about some of the Internet advertising companies we may use.

To learn about the privacy practices of these third parties and how to opt-out from their use of cookie data for targeted advertising purposes, click on the links above.

Many of these companies are also members of associations, which provide a simple way to opt out of analytics and ad targeting, which you can access at:

United States: NAI (http://www.networkadvertising.org/managing/opt_out.aspx) and DAA (http://www.aboutads.info/choices/)
Canada: Digital Advertising Alliance of Canada (https://youradchoices.ca/)
Europe: European Digital Advertising Alliance (http://www.youronlinechoices.com/)
California “Do Not Sell My Info”
The California Consumer Protection Act (“CCPA”) requires us to disclose categories of personal data sold to third parties and how to opt-out of future sales. The CCPA defines personal information to include online identifiers, including IP address, cookies IDs, and mobile IDs. The law also defines a “sale” to include simply making data available to third parties in some cases. We let advertising and analytics providers collect IP addresses, cookie IDs, mobile IDs through our sites and apps when you use our online services, but do not “sell” any other types of personal information.

If you do not wish for us or our partners to “sell” your personal data to third parties for advertising purposes, you can make your Do Not Sell Request.

Note that although we will not “sell” your personal data after we receive your email, we will continue to share some personal information with our partners (acting as our service providers) to help us perform advertising-related functions such as, but not limited to, measuring the effectiveness of our ads, managing how many times you may see an ad, reporting on the performance of our ads, ensuring services are working correctly and securely, providing aggregate statistics and analytics, improving when and where you may see ads, and/or reducing ad fraud. Further, emailing us will not necessarily opt you out of the use of previously sold personal information or stop all interest-based advertising. If you access this site (or app) from other devices or browsers, visit the link below from those devices or browsers to ensure your choice applies to the data collected when you use those devices or browsers.

Other information related to your right to opt-out from sales of personal data is contained in the California Privacy Rights section of this Notice.

Cookie controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated.

Mobile advertising ID controls. iOS and Android operating systems provide options to limit tracking and/or reset the advertising IDs.

Email web beacons. Most email clients have settings which allow you prevent the automatic downloading of images, which will disable web beacons in the email messages you read.

Do Not Track. Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our websites do not currently respond to browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the cookie controls and advertising controls described above.



Information created or generated. We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics (“inferences”). For example, we infer your city, state, and country location based on your IP address.

When you are asked to provide information, you may decline. And you may use app or device controls to prevent certain types of automatic data collection. But if you choose not to provide or allow information that is necessary for certain products or features, those products or features may not be available or function correctly.


Your Sharing of Your Information

The Startupq8 Services may allow you to connect and share your actions, comments, content, profile, and information publicly or with other people. Depending on what domain your account is on and what type of account you have created, you may be able to control some of the categories of personal information shared via your profile from the account settings menu on the Site. Please be mindful of your own privacy needs as you choose who to connect with and what to share and make public. We cannot control the privacy or security of information you choose to make public or share with others.

The Services may also provide you with the option to share certain information from your Startupq8 account with social networking services like Facebook, Google, or Twitter. We are not responsible for the use or re-sharing by others of any of your information once it is made public. If you do not want your information to be made public, you should not use the Startupq8 Services in this manner and/or you should adjust your privacy settings on the applicable social networking service accordingly. We are not responsible for and we do not control these social networking services privacy practices. Please review the applicable privacy policy for information about how they use your information.


How Startupq8 Discloses Your Information

We may share your information as follows:

We may share your personal information with your consent or at your direction or as otherwise as necessary to complete your transactions or provide the Services you have requested or authorized. By placing a reservation or order with a dispensary or retailer through our Services, you consent to Startupq8 sharing the information related to your reservation or order with the dispensary or retailer, to the extent necessary to fulfill your reservation or order.
With our subsidiaries and affiliates, who may share common data systems and process information as needed to provide the Services and operate our business.
We may also share your personal information with others who perform services on our behalf (for example, with Twilio if you make a call or receive/respond to a text using the Service).
We may share your information with third-party service providers to fulfill your requests and to perform functions on our behalf. Examples include product reservation requests, fulfilling orders, and delivering orders. We only share information necessary for these third-party service providers to perform their functions, and any information shared may not be used for any other purpose.
To provide us with advertising and marketing services, we may share your information about you, such as order history, demographic data, and interests with certain third-party partners to target and serve you ads for our Services on other sites. These third parties may also use this collected information to draw inferences about you for their own purposes or collect information about your online activities over time and across different websites and services (in addition to our Services) to help predict your preferences and to display (review the Cookies and Similar Technologies section above) ads to you that are more likely to be of interest to you. Note that this Privacy Policy covers only our use of data and does not include use of data by such third parties. If you wish to opt out of interest-based advertising, please visit http://www.aboutads.info/choices/. For California residents, please see the California Privacy Rights section of this Privacy Policy to review your rights to opt out.
We may disclose your information if we believe we are required to do so by law, or to comply with a court order, judicial or other government subpoena, or warrant.
We also may disclose your information if we believe doing so is appropriate or necessary to prevent any liability, or fraudulent, abusive, or unlawful uses or to protect Startupq8 and our Services; or any rights, property, or personal safety of Startupq8 or others, including as we believe is necessary to enforce our agreements, terms, and policies.
In the event that Startupq8 is or may be acquired by or merged with another company or involved in any other business deal (or negotiation of a business deal), including a financing, transfer, or divestiture, involving sale or transfer of all or part of our business or assets, we may transfer or assign your information as part of or in connection with the transaction. Finally, in the event of insolvency, dissolution, bankruptcy, or receivership, information may be transferred as a business asset.
Third party analytics and advertising companies also collect personal information through our Services including, account information, marketing and communications data, demographic data, content and files, geolocation data, usage data, and inferences associated with identifiers and device information (such as cookie IDs, device IDs, and IP address) as described in the Cookies and Similar Technologies section of this Notice.

We may also share aggregated and/or anonymized data with our partners, advertisers, and other third parties as authorized by law for purposes including use for their own advertising and marketing activities.

Please note that some of our products include references or links to products provided by third parties whose privacy practices differ from ours. If you provide information to any of those third parties, or consent to our sharing information with them, that information is governed by their privacy statements.



Data Security

Startupq8 uses various safeguards designed to protect personal information submitted to us, including, where appropriate, encryption of data stored and encrypting information in transit. Where Startupq8 uses third party providers to store and transmit personal information, Startupq8 utilizes the security tools offered by these providers that are designed to protect personal information. In addition to use of certain security tools made available by third party providers, Startupq8 takes reasonable and appropriate steps to help protect your Information against loss, misuse, and unauthorized access, or disclosure. No company can fully prevent security risks, however. While we strive to protect your personal information, we cannot guarantee its absolute security. To help protect yourself and your information, choose a unique password for our Services and do not use a password on our Services that you would use on any other website or online service.



Location of Personal Data

The information we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, or service providers maintain facilities. Currently, we primarily use data centers in the United States where our servers are located. We have chosen this location to operate efficiently and improve performance. That information may then be transferred within the United States or back out of the United States to other countries outside of your country of residence, depending on the type of information and how it is stored by us. These countries (including the United States) may not necessarily have the data protection laws as comprehensive or protective as those in your country of residence; however we take steps designed to ensure that the information we collect under this Notice is processed according to the provisions of this Notice and applicable law wherever the information is located.

Accordingly, we transfer personal data from the European Economic Area and Switzerland to other countries, some of which have not been determined by the European Commission to have an adequate level of data protection. When we do so, we use a variety of legal mechanisms, including contracts, to help ensure your rights and protections. To learn more about the European Commission’s decisions on the adequacy of personal data protections, please visit: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en.



Retention of Information

We retain information for as long as necessary to provide the Services you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different products, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.