During the processing of personal data HempWorx works in accordance with the requirements of the applicable data protection legislation, like the General Data Protection Regulation. This means we:

• Specify our purposes before we process personal data, by using this privacy statement;
• Limit our collection of personal data to only the personal data needed for legitimate purposes;
• First, ask for explicit permission to process your personal data in cases where your permission is required;
• Take appropriate security measures to protect your personal data and we demand the same from parties who process personal data on our behalf;
• Respect your right to access, correct or delete your personal data held by us.

HempWorx is the party responsible for all data processing. In this privacy statement, we will explain what kind of personal data we collect and for which purposes within our HempWorx. website. We recommend that you read it carefully.

If you have any questions regarding the processing of personal data, you can find the contact details of HempWorx and/or our representative in The Netherlands at the end of this privacy statement.

Certain features of our service require you to register beforehand. You will have to provide some information about yourself and choose a username and password for the account that we will set up for you.

For this purpose, we use your:

• Identification data (name, name co-applicant, birth date, username, display/nickname)
• Contact data ((delivery) address, phone number, email address)
• Financial data (invoice address, payment details)
• Media data (profile picture)
• Technical data (IP address)
• Company data (company name, VAT number)

We need this data because of our agreement with you. In accordance with Article 49.1.b GDPR we transfer these data to our servers in the United States of America for the performance of our agreement and the performance of agreements concluded in your interest between HempWorx and another natural or legal person. We retain your data on the basis of United States taxation laws for seven (7) years on our servers after you closed your account.

We will retain this data so that you do not have to re-enter it every time you visit our website and to be able to contact you in connection with the execution of the agreement, invoicing, payment and delivery, and to provide an overview of the products and services you have purchased from us.

We collaborate with other organizations that may receive your personal data. We share data with the following parties, who will use the data for communication and order processing purposes:

• Zoho; shipping providers; HighLifeTravel; payment providers, mailgun; fieldwatch

We also share data with the following parties, that will provide personalized advertisements based on your personal data:

We will use your personal data when handling your order. We may share your data with the delivery service to have your order delivered. We may also obtain information on your payment from your bank or credit card company.

For this purpose, we use your:

• Identification data (name, name co-applicant, birth date, username, display/nickname)
• Contact data ((delivery) address, phone number, email address)
• Financial data (invoice address, payment details)
• Company data (company name, VAT number)

We need this data because of our agreement with you. In accordance with article 49.1.b GDPR we transfer these data to our servers in the United States of America for the performance of our agreement and the performance of agreements concluded in your interest between HempWorx and another natural or legal person. We retain this information on the basis of United States taxation laws for period of seven (7) years after your order has been completed. Certain types of personal data can be retained for a longer period with regard to legal tax retention.

To handle your orders, we work together with:

• Payment providers: BlueSnap, Esquire (NMI), Authorize.net, MaxiCash, iPayAfrica, nowpayments
• Postal service providers: USPS, UPS
• Landmark & Global Access

Of these parties, our payment provider and postal service providers are established outside the EU.

We send out marketing messages to inform those interested in news, tips, and information about our products and services. Your email address is added to the list of subscribers, only with your permission.

For this purpose, we use your:

• Identification data (first name, last name)
• Contact data (email address)

We do this based on your consent. In accordance with Article 49.1.a GDPR we transfer these data to our servers in the United States of America for the performance of our marketing messaging service and the performance of agreements concluded in your interest between HempWorx and another natural or legal person. We store this information for six (6) months after you cancel your subscription.

You may cancel your subscription to our marketing messages at any time. Each marketing message contains a link to unsubscribe from our marketing message service.

We collaborate with other organizations that may receive your personal data.

To handle your newsletter, we work together with:

• Mailgun

Our delivery organization, Mailgun is established outside the EU.

Within our portal, you can access a management environment where you can set, specify and change settings. We will keep track of your activities for proof.

For this purpose, we use your:

• Identification data (name, name co-applicant, birth date, username, display/nickname)
• Contact data ((delivery) address, phone number, email address)
• Financial data (invoice address, payment details)
• Media data (profile picture)
• Technical data (IP address)
• Company data (company name, VAT number)

We need this data because of our agreement with you. In accordance with Article 49.1.b GDPR we transfer these data to our servers in the United States of America for the performance of our agreement and the performance of agreements concluded in your interest between HempWorx and another natural or legal person. We store this information based upon United States taxation laws for seven (7) years after our services to you have ended.

Via HempWorx you can buy credits to purchase products. We use your personal data to complete the transaction and to register the credits.

For this purpose, we use your:

• Identification data (name, name co-applicant, birth date, username, display/nickname)
• Contact data (email address, telephone number)
• Financial data (invoice address, payment details)
• Technical data (IP address, device identification)
• Company data (company name, VAT number)

We need this data because of our agreement with you. In accordance with Article 49.1.b GDPR we transfer these data to our servers in the United States of America for the performance of our agreement and the performance of agreements concluded in your interest between HempWorx and another natural or legal person. We store this information based upon United States taxation laws for seven (7) years after your order has been completed. Certain types of personal data will be retained for a longer period with regard to legal tax retention.

We collaborate with other organizations that may receive your personal data.

To handle your orders, we work together with:

• Our payment providers BlueSnap, Esquire (NMI), Authorize.net, MaxiCash, iPayAfrica, & nowpayments.