Updated as of 13th December 2021
- Personal data
- Data Controller
- Personal data that we collect and hold
- Purposes for which we use information you provide us
- Information we collect from third parties
- Purposes for which we use your information we automatically collect from you
- What types of cookies do we use?
- Consequences for you if your personal data is not provided for us
- Disclosures of personal data to third parties
- Storage and transfer of your data to other countries
- How personal data is held and protected
- Accessing and correcting your information
- Privacy complaints or disputes
- Contact Us
"Personal Data" means any information or pieces of information that could identify you either directly (e.g. your name) or indirectly (e.g. through pseudonymised data, such as a unique ID number). Examples of Personal Data are email/home addresses, usernames, profile pictures, personal preferences and shopping habits, user generated content, financial information, and health information. It could also include unique numerical identifiers like your computer’s IP address or your mobile device’s MAC address, as well as cookies. We recognise that your Personal Data is valuable and is committed to protecting your personal information.
Health and Happiness (H&H) Inc. is responsible as data controller for the processing of your Personal Data collected on the https://us.cbii-cbd.com
Personal data that we collect and hold
We collect Personal Data to allow us to provide you with services and deliver information on the products and/or services offered by us. We make sure that the Personal Data we collect from you is necessary for and directly related to this purpose.
The type of Personal Data that we collect from you, will vary depending on the circumstances in which we are dealing with you. This information may include:
- Personal details about you such as your name, gender, date of birth, residential and business addresses, telephone numbers, email and other electronic addresses;
- If you have registered on our website, we may collect any information from your browser and our servers that may be connected to the contact details you gave when you registered, such as username, password, profession, company, email address, etc. Other details relating to your relationship and dealings with us, including if we deal with you in a capacity other than a customer (for example, if you have applied for a position with us, pre-employment history, income, results of aptitude and other tests, contact and emergency details).
- Information that you voluntarily provide to us through your responses to competitions, surveys, search functions, questionnaires, feedback, ratings and reviews and the like.
Credit card information we collect from you will go directly to our processor or bank and no personnel of CBII will have access to this data.If you choose to purchase a product from us, our third-party payment processors will collect your payment information, and none of our personnel will have access to this data.
As a general rule, we do not collect sensitive information about you, such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, physical or mental health or condition, biometric data, sexual orientation and judicial or criminal records ("Sensitive Information"). However, in circumstances where we require Sensitive Information from you for a lawful purpose, for example for the purpose of providing our services to you, we will seek your consent to collect Sensitive Information prior to collecting it.
We capture, process and retain personal information from you and any devices you may use when you navigate to us.cbii-cbd.com web or mobile view, by transacting, by registering an account and otherwise interacting with us.
We may capture customer information, purchase data and browsing behaviour as part of the rewards for life loyalty programme. This is so we can optimise and personalise your experience with us.cbii-cbd.com.
We collect such Personal Data from you in a number of ways, including:
- directly from you, such as when you enter your personal details on our websites (for example during registration or application for products and services, enter a competition, promotion, survey or complete a questionnaire, request marketing to be sent to you, give us some feedback), when you provide information by phone or in documents such as an application form;
- from our affiliated companies;
- from your representatives;
- from our agents or service providers when engaged by us to do so or by other third parties, such as from referees, to verify the information you have provided us or to assist us to locate or communicate with you from sources where you’ve made your information publicly available;
- from automated technologies or interactions;
- from credit-reporting and fraud-checking agencies and credit providers for credit related purposes such as credit worthiness, credit rating, credit provision and financing;
- from our own records of your dealings with us; or when legally required to do so.
We make sure that the way we collect data from and about you is lawful and fair in your circumstances.
We take all practical steps to ensure that you are informed of what data you are obliged to provide us, what data you may voluntarily provide us and what we may do if you do not provide us with data which you are obliged to provide.
Purposes for which we use information you provide us
This is information you give us when you enter your personal details on the CBII Websites (for example during registration or application for products or services) or by contacting us via post, phone, e-mail or otherwise, in the context of your communication with CBII. We will use your Personal Data to:
- Identify you. We do this because it is in our legitimate interest to make sure that your enquiry is genuine and is not being made for fraudulent reasons or is spam. We may also do this because we may be subject to legal obligations which require us to confirm the details that you provide us with before entering into a relationship with you.
- Create an account when you register with us. We will do this because it is in our legitimate interest to use your Personal Data to communicate with you, to respond to your requests and to develop the relationship between us in the context of establishing and operating your account. If you submit Personal Data comprising an email address to CBII, we may send you product and/or service related emails (e.g. transactional emails, service and policy updates in respect of matters related to or arising from the use of this Website) because it is in our legitimate interests to keep you informed of your account activities or service changes. It may also be necessary for us to:
- use your Personal Data to perform an agreement with you, where we would be unable to provide those services without that information;
- use your Personal Data to comply with a legal obligation relating to how we manage our relationship with you.
- Provide, administer and manage services and carry out obligations arising from any contracts entered into between us, such as but not limited to online purchases. In these circumstances, we will use your Personal Data to perform an agreement with you because we would be unable to provide those services without that information;
- Monitor your use of the Website to ensure that content from our Website is presented in to the most effective manner, to view given your device and to help the further development of the Website by compiling aggregate statistics about our users to analyse Website usage. We do this because it is in our legitimate interests to understand user behaviour so that we can ensure that we present information on the Website that is of most interest to users and to ensure that information is displayed to you correctly and in a user-friendly way;
- To enable CBII to conduct research and/or analysis on the use of its Website and to evaluate and improve the products and/or services offered by CBII. We do this because it is in our legitimate interests to understand the trends in the use and popularity of our products and services so that we can adapt existing and offer new services based on this research and analysis;
- Conduct communications between you and CBII and respond to feedback with regard to your needs and expectations of services and/or products offered by CBII. We will do this because it is in our legitimate interest to use your Personal Data to communicate with you, to respond to your requests about the services and facilities you require and to develop the relationship between us in the context of your use of our Website;
- Comply with legal obligations. For example, when you make a purchase, we need to keep your transaction information to comply with our tax and financial reporting obligations.
- Provide you with information related to CBII including the products, services, news, events and other privileges, benefits and other advantages from time to time offered by CBII, where you have opted in to receive this information.
- To contact you to obtain your feedback/testimonials after you have ordered and tried our products. Please note that testimonials are important to other consumers and shall reflect your own personal experience with the products. With your permission, we might publish your testimonial on our website and/or social media. We reserve the right to edit testimonials for clarity, conciseness and/or if any of its content could be perceived as misleading or offensive.
When you opt-in to receive communications from us, you are giving your consent for your Personal Data to be used by us to contact you (depending on your selection) by email, direct mail and telephone, and to deliver personalized Website experiences, to share information about relevant products and services, news and events in relation to CBII's offering.
We shall not use your Personal Data for marketing communications unless we have received your consent. Your consent may be communicated to us without charge by checking the opt-in / consent box in this Website or by contacting us.
If you subsequently decide that you do not want to receive correspondence from us about the services we could provide, you are entitled to withdraw your consent to us contacting you by clicking the "unsubscribe" link provided in a promotional email message, by amending your communication preferences or by contacting CBII Customer Service at email@example.com or by post at
Health and Happiness (H&H) Inc.,
10000 Washington Blvd 6th floor,
Culver City, CA 90232.
Withdrawing your consent will not affect our use of the Personal Data prior to you withdrawing that consent but it will mean that we will not be able to contact you about the services we may be able to offer you or your business in the future.
We will let you know where you must provide us with Personal Data in order to perform an agreement with you or your business or to comply with a legal obligation. If you do not provide us with the Personal Data in these circumstances, we may be unable to respond to your enquiry and/or engage in further communications with you.
Information we collect from third parties
We may use information provided to us by third parties that operate automated tracking technologies on third party websites, information you may have made publicly available or information provided by third party sources, such as marketing opt-in lists or data aggregators.
PURPOSES FOR WHICH WE USE YOUR INFORMATION WE AUTOMATICALLY COLLECT FROM YOU
When you visit the CBII websites, we may automatically collect information such as your IP address and browser type using cookies, log files, and pixel-tags (also called web beacons). This automatic data is primarily used for delivering and optimising services offered by us, such as:
- authenticating your identity and confirming whether you are currently logged in as you move through the Website. Your browser allows us to place some information (e.g., session-based IDs and/or persistent cookies) on your computer's hard drive that identifies the computer you are using.
- tracking your usage across our CBII Websites in order to provide you with relevant, personalised content;
- improving our services, whereby we may occasionally display different versions of content to you and measure your usage of our web site pages.
To the extent this information constitutes Personal Data, we use it to ensure that content from the CBII Websites is presented in the most effective manner for you and your device because it is in our legitimate interest to improve our customers' online experience in relation to the CBII websites.
The following information sets out the types of cookies used on the CBII websites and provides detail about what they are used for. When you use the CBII websites for the first time, cookies which are essential to make the CBII websites operate (see those identified as "essential cookies" below) will have been set but other cookies will not have been set unless you agreed to those cookies being set at that time. Within your browser you can choose whether you wish to accept cookies or not. Different browsers make different controls available to you. Generally, your browser will offer you the choice to accept, refuse or delete cookies at all times, or those from providers that website owners use i.e. third-party cookies, or those from specific websites. Each browser’s website should contain instructions on how you can do this. If you have agreed to accept cookies, then the CBII websites will remember this and continue to set cookies each time you visit. If you do not want cookies to be stored, then you may, via your browser, turn off certain cookies listed below individually, or you can select the appropriate options on your web browser to delete some or all cookies. Please note, however, that if you block some or all cookies (including essential cookies) you may not be able to use or access all or parts of the CBII websites, such as being able to log on to member specific areas.
WHAT TYPES OF COOKIES DO WE USE?
We use several different cookies, outlined below:
- These cookies store temporary information essential to the site to display its content and are usually deleted when you close your browser.
- These cookies are stored in your browser for a set amount of time and stay on your computer after you close your browser. They usually contain information you may want to keep from session to session (e.g. your location or username).
First party cookies:
- These are 'our' cookies – the ones that we set up on your device and allows us to recognise you when you return to the website. It also helps keep track of your activity as you move page by page through our website and enables us to personalise our content and remember your preferences (for example, your choice of language or region).
Third party cookies:
- Other websites or servers set these cookies up on our behalf or allow us to access their cookies for activities such as tailored advertising, or tracking our ads' performance on other websites.
These cookies serve a function of:
Authentication, Security, Basic Functionality
- Sometimes called "essential cookies”, these cookies are needed for our websites to work properly. Without these cookies, core site services, such as accessing secure areas, can't be provided. Some of these cookies even help us to detect fraud and keep the sites secure. These cookies don't gather information about you and are not used for marketing or remember where you've been online.
- These cookies collect information about how our sites are performing. For example, they tell us which content is popular, which pages create errors, or how people are moving around our sites. The information they collect is anonymous, and is used to help us improve how the websites works.
- These functional cookies are all about the choices you make both on our sites and our advertising partners' sites. They store information about your choices (such as your user name, language or the region you're in) and tailor your internet experience to provide relevant features and content for you, such as localised information or news. These cookies can also be used to remember changes you've made to text size, font and other customisable content.
- Without these cookies, our website won't remember any choices you've previously made, or personalise your browsing experience.
Advertising, Marketing and Analytics
- These cookies help us tailor our marketing information online. They do things like limit the number of times you see an ad, as well as help us to measure the performance of our advertising – if you don't like what you see, we want to know it. On the other hand, if you are interested in a particular topic, we want to help you get the best information we have.
- These cookies help us deliver ads that are more relevant both on our sites and our advertising partners' sites. They remember that you have visited a particular website, and this information may be shared between us and other organisations, such as advertising partners. They also help us get a better understanding of you, your needs, your behaviours and how you interact with us so we can engage in product and service research, development and business strategy.
- If you would like to disable cookies, you can set your web browser to reject cookies. However, if you disable the cookie function, you may not be able to access or receive all the information contained on the CBII websites. How to alter your cookie setting will depend on the type of browser you use. We have provided examples of how to disable cookies on the most popular browsers below:
Microsoft Internet Explorer
- choose the “tools” menu then “Internet Options”;
- click on the “privacy” tab; and
- select the appropriate setting.
- choose the “tools” menu then “Options”;
- click on the “privacy” menu then “Options”;
- click on the “privacy” icon; and
- find the “cookie” menu and select the relevant options.
You must be at least the age of majority in your place of residence to use the Services. The Services are not directed to or intended for use by minors. Consistent with the requirements of the U.S. Children’s Online Privacy Protection Act, if we learn that we received any information directly from a child under age 13 without his or her parent’s verified consent, we will use that information only to inform the child (or his or her parent or legal guardian) that he or she cannot use the Services.
California Minors: While the Services is not intended for anyone under the age of 18, if you are a California resident who is under age 18 and you are unable to remove publicly-available content that you have submitted to us, you may request removal by contacting us at: firstname.lastname@example.org. When requesting removal, you must be specific about the information you want removed and provide us with specific information, such as the URL for each page where the information was entered, so that we can find it. We are not required to remove any content or information that: (1) federal or state law requires us or a third party to maintain; (2) was not posted by you; (3) is anonymized so that you cannot be identified; (4) you don’t follow our instructions for removing or requesting removal; or (5) you received compensation or other consideration for providing the Content or information. Removal of your content or information from the Services does not ensure complete or comprehensive removal of that content or information from our systems or the systems of our service providers. We are not required to delete the content or information posted by you; our obligations under California law are satisfied so long as we anonymize the content or information or render it invisible to other users and the public.
Consequences for you if your personal data is not provided for us
If you do not provide us with the Personal Data we ask for or the information provided is incorrect or incomplete, we might not be able to provide you with our products or services.
DISCLOSURES OF PERSONAL DATA TO THIRD PARTIES
We share your personal information with external companies that provide services on behalf of CBII, such as companies that provide IT services and web & data hosting services, data storage, content providers, digital marketing agencies (e.g. analysing customer lists, deliverability statistics, opens and clicks), Online and social media advertising, payment processors who will collect your payment information, aggregated statistics from the CBII websites, delivery services such as couriers, customer services, account set up or that do fraud and money laundering checks or reports of breach, professional advisers (such as our accountants, auditors and lawyers, insurers and industry groups) having a legitimate reason to receive such information and other persons that we need to deal with in connection with engagement of staff (such as training or medical providers, insurers, next-of-kin, referees); and other persons and entities as permitted under data protection laws.
Before sharing your data, we execute with those Companies a Data Processing Agreement to always ensure their give an adequate level of protection to your personal data and take appropriate technical and organisational measures to prevent from accidental or unlawful destruction or loss, alteration, unauthorized disclosure or access when processing with your personal data.
STORAGE AND TRANSFER OF YOUR PERSONAL DATA TO OTHER COUNTRIES
CBII also collaborates with third parties such as cloud hosting services and suppliers located around the world to serve the needs of our business, workforce, and customers. In some cases, we may need to disclose or transfer your personal data within CBII or to third parties in areas outside of your home country. When we do so, we take steps to ensure that personal data is processed, secured, and transferred according to applicable law.
We may provide your personal data to:
- CBII-controlled affiliates and subsidiaries, located in and outside your country or region;
- outsourced service providers who perform functions on our behalf, located inside or outside of your country or region. For example, when you provide payment data to make a purchase, we will share payment data with banks and other entities that process payment transactions or provide other financial services, and for fraud prevention and credit risk reduction;
- our authorized agents and representatives, located inside or outside of your country or region, who sell products or provide services on our behalf;
- anyone expressly authorized by you to receive your personal data; anyone to whom we are required by law to disclose personal data, upon valid and enforceable request thereof.
Please contact aaron.Xie@hh.global if you want further information.
HOW PERSONAL DATA IS HELD AND PROTECTED
We will keep a record of the Personal Data that we receive from you in order to answer your query, respond to a request for more information about the services, or in response to an enquiry from one of our existing suppliers. Subject to legal requirements, we will only retain the Personal Data collected from a user for as long as the user’s account is active or has otherwise not been cancelled and the user has not requested that their Personal Data be deleted. We will retain Personal Data to fulfil the purposes for which we have initially collected it, unless otherwise required by law. All Personal Data will be retained only as necessary to comply with our legal obligations.
We will delete our copy of your Personal Data 7 years from the end of our contact with you or when we are no longer required by law to retain it (whichever is later), although we may retain a record of the existence of the relationship, to the extent and for so long as we are required to do so by law. For example, if you have contacted us to ask us for the processing of your Personal Data to be erased, we will retain a record of your request in order to ensure we comply with your wishes.
We have implemented technology and security policies, rules, and other reasonable steps to protect your Personal Data from loss, modification, unauthorized access, unauthorised interference, improper use, improper alteration, unlawful or accidental destruction, or accidental loss.
You should keep in mind that Internet transmissions (including emails) are never completely secure or error-free. As such, you should take steps to protect yourself, especially online and take special care in deciding what information you send to us via e-mail or other transmissions. Moreover, where you use passwords, ID numbers, or other special access features on the Websites, it is your responsibility to safeguard them. You should choose a strong password, do not use the same password that you use on other websites and do not share your password with anyone else. Also remember to sign out of our Websites and close your browser window when you have finished to ensure that others who may have access to your computer cannot access your Personal Information.
Accessing and correcting your information
You have a right to access the Personal Data that we hold abut you at any time, subject to certain exemptions under law.
We will take all reasonable steps to ensure that the Personal Data we collect, use or disclose is accurate, complete, up-to-date and relevant to our dealings with you and the nature of our relationship with you.
If you would like to request access to your Personal Data or correction of your Personal Data held by us, you may contact us in writing. The relevant contact details are provided below (see "Contact us").
PRIVACY COMPLAINTS OR DISPUTES
You have rights under data protection laws in relation to your personal information. Please see below to find out more about these rights and contact details should you want to make any of these requests:
- request access to that Personal Data;
- receive a copy of the Personal Data that you have provided to CBII in a structured, commonly used and machine readable format so that you can share it with others;
- request the transfer of your Personal Data to another party;
- ask that Personal Data be erased;
- object to us possessing your Personal Data by asking for the processing of that Personal Data to be restricted or stopped.
Please contact CBII Customer Service to exercise these rights or for additional information at email@example.com, for security of your Personal Data, we may accredit your identity.
In addition to the above, you have the right to review, update, and correct your account information and preferences at any time by managing your account’s Profile page. If there is any information that you are not able to edit or delete, contact our Customer Service to help you make the amendments.
You have the right to request for your account to be terminated and your information to be deleted when there is no longer a legitimate or legal reason for us to keep your Personal Data.
On the other hand, if you wish to change or use other services affiliated to us, you may request for your Personal Data to be transferred or transmitted.
If you wish to contact us about the privacy-related matters described above or find out more information about our privacy practices, please use the contact details below:
Data Protection Officer
Health and Happiness (H&H) Inc.,
10000 Washington Blvd 6th floor,
Culver City, CA 90232.