Cloud9beyond – Privacy Policy

Effective Date: 11 April 2025
Website: https://weedtenerife.com
Data Controller: Cloud9beyond (“we”, “our”, or “us”)

At Cloud9beyond, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit or use the Cloud9beyond website at https://weedtenerife.com (the “Site”).

The Site provides an online directory and booking platform for cannabis social clubs in Spain and may also allow users to list clubs, submit booking requests, publish cannabis-related events, and post or respond to job vacancies.

By using the Site, you acknowledge the practices described in this Privacy Policy. Where consent is required for a particular type of processing, we will request it separately.

1. Who We Are

Cloud9beyond is an online platform registered in England and Wales. We provide information and technology services that help individuals discover and contact cannabis social clubs operating in Spain.

Cloud9beyond is not a cannabis social club and does not sell, supply, or distribute cannabis.

For the purposes of applicable data protection laws, Cloud9beyond is normally the data controller for personal information collected directly through the Site.

A listed club, event organiser, employer, or other third party may act as a separate data controller when it receives and processes your personal information for its own purposes.

2. Information We Collect

We may collect personal and non-personal information in the following ways.

a) Information You Provide Directly

Depending on how you use the Site, this may include:

Account information: Your name, email address, username, password, and account preferences.
Club listing information: Club name, address, contact details, description, opening information, photographs, videos, and other listing content.
Booking information: Your name, email address, telephone number, preferred club, requested date and time, booking reference, and any information submitted with your request.
Identity and eligibility information: Information needed to confirm that you meet applicable age or membership requirements. Unless expressly stated, identity documents should be presented directly to the relevant club rather than uploaded to the Site.
Event information: Event title, description, dates, location, organiser information, contact details, images, and booking information.
Job listing information: Job title, description, employer or company information, application instructions, and contact details.
Payment information: Transaction references, payment status, billing information, and limited payment details supplied by our payment providers. We may not directly store complete card details.
Communications: Information contained in messages, support requests, complaints, refund requests, reviews, or other correspondence.
Marketing preferences: Your choices regarding newsletters, promotional emails, and similar communications.

Please avoid submitting unnecessary sensitive personal information through booking forms, messages, reviews, or listing submissions.

b) Information Collected Automatically

When you visit or use the Site, we may automatically collect:

Your Internet Protocol address.
Browser type and version.
Device type and operating system.
Approximate location based on your Internet Protocol address.
Pages viewed and links selected.
Referring website or source.
Date, time, and duration of visits.
Login activity and account interactions.
Technical error, performance, and security information.

c) Cookies and Similar Technologies

We may use cookies and similar technologies to:

Enable essential website functions.
Keep users signed in.
Remember preferences.
Maintain security and prevent fraudulent activity.
Understand how visitors use the Site.
Measure website and advertising performance.
Provide personalised content or marketing where permitted.

Non-essential cookies will be used only where permitted by applicable law and, where required, after obtaining your consent.

You can manage your preferences using our cookie notice or your browser settings. Disabling certain cookies may affect the operation of some Site features.

3. How We Use Your Personal Information

We may use personal information to:

Create, administer, and secure user accounts.
Provide and maintain the directory and booking services.
Send booking confirmations, reminders, updates, and cancellation information.
Pass booking information to the club selected by the user.
Process payments, deposits, refunds, and transaction records.
Review, publish, manage, and moderate club, event, and job listings.
Respond to support requests, complaints, and other communications.
Personalise and improve the Site and user experience.
Analyse Site use and technical performance.
Prevent spam, fraud, abuse, security incidents, and breaches of our policies.
Enforce our Terms and Conditions.
Send marketing communications where you have consented or where otherwise legally permitted.
Establish, exercise, or defend legal claims.
Comply with legal, regulatory, accounting, and tax obligations.

We will not use personal information for purposes that are incompatible with those for which it was collected unless permitted or required by law.

4. Lawful Bases for Processing

Under applicable UK and European data protection laws, we rely on one or more of the following lawful bases:

Contract: Processing is necessary to provide a service you requested or to take steps before entering into a contract.
Consent: You have given clear permission for a specific purpose, such as receiving optional marketing communications or accepting non-essential cookies.
Legal obligation: Processing is necessary to comply with laws, regulations, court orders, tax requirements, or other legal duties.
Legitimate interests: Processing is necessary for our legitimate business interests or those of a third party, provided those interests do not override your fundamental rights and freedoms.
Legal claims: Processing is necessary to establish, exercise, or defend legal claims.
Vital interests: In exceptional circumstances, processing may be necessary to protect someone’s life or physical safety.

Where we rely on legitimate interests, these may include operating and improving the Site, protecting our systems, preventing fraud, moderating content, maintaining business records, and communicating with users about services they use.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect processing lawfully carried out before consent was withdrawn.

5. Booking Information Shared with Clubs

When you submit a booking or appointment request, relevant personal information may be shared with the cannabis social club you selected.

This information may include:

Your name.
Contact information.
Requested booking date and time.
Booking reference.
Information you voluntarily include in the booking request.

The club may use this information to manage your appointment, contact you, verify your eligibility, and complete its own membership or admission procedures.

Each club is independently operated and may act as a separate data controller. Its handling of your personal information may be governed by its own privacy policy and legal obligations.

Cloud9beyond is not responsible for a club’s independent use of your information after it has been lawfully provided to that club.

6. Sharing Your Information

We do not sell or rent your personal information, ever.

We may share your information with:

Clubs receiving booking requests or inquiries.
Event organisers or employers where you choose to contact or apply through the Site.
Website hosting and infrastructure providers.
Payment processors and financial service providers.
Email, booking notification, and customer-support providers.
Analytics, security, fraud-prevention, and performance providers.
Professional advisers, including lawyers, accountants, insurers, and auditors.
Government authorities, regulators, courts, law-enforcement bodies, or other parties where disclosure is required by law.
A purchaser, investor, or successor organisation in connection with a merger, restructuring, financing, or sale of all or part of our business.

Service providers may only process personal information in accordance with our instructions, contractual requirements, and applicable data protection laws.

We may also share aggregated or anonymised information that does not reasonably identify an individual.

7. International Data Transfers

Cloud9beyond is registered in England and Wales and provides services relating to clubs and users in Spain. Personal information may therefore be processed in the United Kingdom, Spain, the European Economic Area, or other countries in which our service providers operate.

Where personal information is transferred outside the United Kingdom or European Economic Area, we will use appropriate safeguards where required. These may include:

A legally recognised adequacy decision.
Standard contractual clauses approved by the European Commission.
The United Kingdom International Data Transfer Agreement or Addendum.
Other legally permitted transfer safeguards.

You may contact us for further information about the safeguards used for international transfers.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, tax, security, and dispute-resolution requirements.

Retention periods may vary depending on the type of information and the reason it was collected.

For example:

Account information may be retained while your account remains active.
Booking information may be retained for customer-support, fraud-prevention, accounting, and legal purposes.
Payment and transaction records may be retained for the period required by tax and financial regulations.
Marketing information may be retained until you unsubscribe or withdraw consent.
Security records and technical logs may be retained for a limited period to protect the Site.
Content you publish may remain available until it is removed by you or us, subject to legal and operational requirements.

When personal information is no longer required, we will delete it, anonymise it, or securely restrict its use.

You may request deletion of your account or personal information, although certain information may need to be retained where required by law or for legitimate legal purposes.

9. Your Data Protection Rights

Depending on your location and the circumstances, you may have the right to:

Request access to the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information.
Request restriction of processing.
Object to processing based on legitimate interests.
Object to direct marketing at any time.
Request the transfer of certain information to you or another provider.
Withdraw consent where processing is based on consent.
Request information about international data-transfer safeguards.
Submit a complaint to an appropriate data protection authority.
Request that you are not subject to a decision based solely on automated processing where that decision has significant legal or similar effects.

These rights are subject to legal limitations and may not apply in every circumstance.

To exercise your rights, contact us at admin@weedtenerife.com. We may need to verify your identity before processing your request.

We will normally respond within the period required by applicable data protection law.

10. Marketing Communications

We may send you marketing or promotional communications where:

You have provided consent.
The communication is otherwise permitted by law.
You have not opted out.

You can unsubscribe at any time by using the unsubscribe link in the relevant email or by contacting us.

You may continue to receive essential service communications, such as booking confirmations, security notices, account updates, and information relating to transactions.

11. Security Measures

We use appropriate technical and organisational safeguards intended to protect personal information from accidental or unlawful destruction, loss, alteration, disclosure, misuse, or unauthorised access.

These safeguards may include:

Secure Socket Layer encryption.
Secure hosting and system configuration.
Account authentication and access controls.
Software updates and security monitoring.
Data backups.
Restricted staff and service-provider access.
Fraud and abuse-prevention measures.

No website, database, or transmission method can be guaranteed to be completely secure. You are responsible for keeping your account password confidential and should contact us promptly if you believe your account has been compromised.

12. Data Breaches

Where a personal data breach occurs, we will assess the nature and potential consequences of the incident.

Where required by law, we will notify the relevant supervisory authority and affected individuals within the applicable legal time limits.

13. Age Restrictions

The Site is intended only for users aged 18 or over.

We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a minor, we will take appropriate steps to delete it.

Please contact us immediately if you believe that a person under 18 has submitted personal information through the Site.

Individual clubs may impose a higher minimum age or additional eligibility requirements.

14. Third-Party Websites and Services

The Site may contain links to clubs, social media platforms, maps, payment services, event organisers, employers, or other third-party websites and services.

We do not control the privacy, security, content, or data-handling practices of independent third parties.

We encourage you to review the privacy policy of each third-party website or service before submitting personal information.

15. User-Generated and Public Content

Information included in public club listings, events, job advertisements, reviews, comments, or other publicly visible areas of the Site may be viewed, copied, or used by others.

Do not publish private, confidential, or sensitive personal information in a public area of the Site.

We may moderate or remove public content in accordance with our Terms and Conditions, but we cannot control how other people use information that has already been made public.

16. Automated Decision-Making

We do not normally make decisions producing legal or similarly significant effects based solely on automated processing.

We may use automated tools to identify spam, suspicious logins, fraud, abuse, or potential breaches of our rules. Where appropriate, these findings may be reviewed by a person before significant action is taken.

17. Complaints

Please contact us first if you have concerns about how we use your personal information so that we have an opportunity to investigate and resolve the matter.

You may also have the right to complain to the data protection authority responsible for your location or the location of the relevant processing activity.

Making a complaint does not affect any other legal rights or remedies available to you.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technologies, business practices, or legal obligations.

Any revised version will be published on this page with an updated effective date.

Where a change materially affects how we process personal information, we may provide additional notice through the Site, by email, or through your account.

19. Contact Us

For questions, concerns, complaints, or requests relating to this Privacy Policy or your personal information, please contact:

Data Controller: Cloud9beyond
Email: admin@weedtenerife.com
Website: https://weedtenerife.com
Registered in: England and Wales