PRIVACY POLICY
**cannapuff.eu**
*Effective date: [DATE]*
1. WHO WE ARE:
Company:[COMPANY NAME]
Registered address: [ADDRESS, CROATIA]
VAT ID:** [VAT NUMBER]
Email:** [email protected]
Phone:** [PHONE]
We are registered in the Republic of Croatia and operate under Croatian and EU law.
2. WHAT PERSONAL DATA WE COLLECT AND WHY:
**a) Orders**
- Name, surname
- Delivery address
- Phone number
**Legal basis:** Contract performance (Art. 6(1)(b) GDPR)
**b) Payments**
We use [STRIPE / PAYPAL / CORVUS].
We do NOT see your credit card number or CVV.
**c) Newsletter**
We store your email only if you subscribe. You can unsubscribe anytime.
**d) Cookies**
We use essential cookies for cart and functional cookies for analytics (Google Analytics). You consent via pop-up on first visit.
3. WHO WE SHARE YOUR DATA WITH:
|Purpose | Recipient | Country |
| Delivery | [GLS / DPD / Croatian Post] | Croatia / EU |
| Payments | [Stripe / PayPal] | EU / USA |
| Email marketing | [Mailchimp / Ecomail] | EU / USA |
| Hosting | [Big Cartel] | USA / EU |
We never sell your data.
4. YOUR RIGHTS:
You have the right to:
- Access your data
- Rectify incorrect data
- Erasure (right to be forgotten)
- Restrict processing
- Data portability
- Withdraw consent
Contact: **[email protected]**
5. LEGAL COMPLIANCE – HEMP PRODUCTS:
All products sold on **cannapuff.eu**:
- 🌱 Contain **< 0.2% THC**
- 🌱 Are made from **EU-approved industrial hemp varieties**
- 🌱 Are **not medicines** – no medical claims
- 🌱 Are **18+ only**
Laboratory certificates are available for each product.
6. CROATIAN SPECIFIC PROVISIONS:
In accordance with Croatian and EU law, our products are classified as **industrial hemp products**. THC content is always below 0.2%. We do not sell to persons under 18.
7. CONTACT:
GDPR inquiries: **[email protected]**
Supervisory authority: **Croatian Personal Data Protection Agency (AZOP)** – azop.hr