How We Protect Your Privacy

on nacani-cbd.ch and when you use our services

nacani-cbd.ch is an e-commerce site offering NACANI products for sale. As part of the operation of these services, we collect data about you and your business. This data is not only essential to the functioning of our services but also to the security of our services and all our users. 

This policy explains what information is collected, why it is collected, and how we use it.

The Information We Collect

Most of the personal data we collect is directly provided by our users when they register and use our services. Other data is collected by recording interactions with our services.

Account Data & Contact Information: When you register on our website to browse or order products or fill out one of our contact forms, you voluntarily provide us with certain information. This typically includes your name, company name, email address, and sometimes your phone number, postal address (when billing or delivery is required), industry, and a personal password.

We never record or store our customers’ credit card information, and we always rely on trusted third-party PCI-DSS compliant payment processors to handle credit card processing, including recurring payments.

Browser Data: When you visit our website and access our online services, we detect and store your browser’s language and geolocation to customize your experience based on your country and preferred language. Our servers also passively log a summary of information sent by your browser for statistical, security, and legal purposes: your IP address, the date and time of your visit, the page or resource you are attempting to access, your browser version and platform, and the web page that referred you to our website.

Your browser may also be used to store and retrieve data for your current session using a session cookie (see also the Cookies section for more details). Cookies

Form Protection: Some forms on our website may be protected by Google reCAPTCHA. This technology relies on heuristics based on technical characteristics of your browser and device and may also use specific Google cookies. See also Google’s Privacy Policy and Terms of Use in the Third Party Service Providers below.


How We Use This Information

Account Data & Contact Information: We use your contact information to provide our services, respond to your inquiries, and for billing and account management purposes. We may also use this information for marketing and communication purposes (our marketing messages always include an option to unsubscribe at any time). We also use this data in aggregated/anonymous form to analyze service trends.

If you have registered for an event published on our website, we may share your name, email address, phone number, and company name with our local organizer and the event sponsors for direct marketing purposes and to facilitate event arrangements and bookings.

Browser Data:  Automatically recorded data is analyzed anonymously to maintain and improve our services. Google reCAPTCHA may also be used for security purposes to prevent misuse of our services. In such cases, we only process the anonymous score that reCAPTCHA assigns based on your browser and device.


Accessing, Updating, or Deleting Your Personal Data

Account Data & Contact Information: You have the right to access and update the personal data you have previously provided. You can do this at any time by logging into your personal account on Odoo.com. If you wish to permanently delete your account or personal data for legitimate reasons, please contact our Support to submit a request. We will take all reasonable steps to permanently delete your personal data unless we are required to retain it for legal reasons (typically for administration, billing, and tax reporting purposes).Assistance


Security

We understand the importance and sensitivity of your personal data and implement multiple measures to ensure that this data is processed, stored, and protected securely against data loss and unauthorized access. Our technical, administrative, and organizational security measures are described in detail in our Security Policy.Politique de sécurité


Third-Party Service Providers / Subprocessors

We work with several service providers to support our operations. They assist us with various services such as payment processing, web traffic analysis, cloud hosting, marketing and communications, etc.

Whenever we share data with these providers, we ensure they use it in accordance with personal data protection laws and that the processing they perform for us is limited to our specific purpose and is covered by a specific data processing agreement.

Below is a list of the service providers we currently use, why we use them, and what type of data we share with them.

A. Subprocessors

These third-party service providers process data for which Odoo is the controller or processor, on behalf of nacani-cbd.ch.


SubprocessorPurposeShared data
Odoo S.A
Confidentiality & Security
Website hosting and customer databaseInfrastructure and hosting of nacani-cbd.ch. Currently hosted by Odoo.com: production data of nacani-cbd.ch and its affiliated services, including customer databases.
Google Ireland Limited (EU)
Confidentiality & Security
Tools and website integrationsGoogle reCAPTCHA
Google Maps

B. Data Controllers and Third-Party Subprocessors

These third-party service providers process data for which Odoo is the controller, as subprocessors, on behalf of Odoo, or they receive such data as data controllers, for the specific purpose of performing the services for which they were engaged.

SubprocessorsPurposeShared data
Stripe
PCI • Confidentiality & Security
Payment management on nacani-cbd.ch.Shared with Stripe : Order details (amount, description, reference), customer name and email. Credit card details are only stored by Stripe.

Data Retention

Account Data & Contact Information: We only retain this data for as long as necessary to fulfill the purpose for which it was collected, as outlined in this policy, including any legally required retention period or the time needed to conduct a legitimate and reasonable promotion of our products and services.

Browser Data:  We may retain this data for up to 12 months unless we need to retain it for a legitimate security or performance concern related to our services or unless required by law. All server-side session data is deleted no later than 7 days after it stops being actively used.

Server Logs & Security Logs:  We retain these logs for a maximum of 12 months, unless we need to keep them for a legitimate security or service execution concern, or if required by law.

Cookie Policy

Cookies are small bits of text sent by our servers to your computer or device when you access our services. They are stored in your browser and later sent back to our servers so that we can provide contextual content. Without cookies, using the web would be a much more frustrating experience. We use them to support your activities on our website. For example, your session (so you don't have to login again) or your shopping cart.
Cookies are also used to help us understand your preferences based on previous or current activity on our website (the pages you have visited), your language and country, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

Here is an overview of the cookies that may be stored on your device when you visit our website:

Category of Cookie Purpose Examples

Session & Security
(essential)

Authenticate users, protect user data and allow the website to deliver the services users expects, such as maintaining the content of their cart, or allowing file uploads.

The website will not work properly if you reject or discard those cookies.

session_id (Odoo)

Preferences
(essential)

Remember information about the preferred look or behavior of the website, such as your preferred language or region.

Your experience may be degraded if you discard those cookies, but the website will still work.

frontend_lang (Odoo)
Interaction History
(optional)

Used to collect information about your interactions with the website, the pages you've seen, and any specific marketing campaign that brought you to the website.

We may not be able to provide the best service to you if you reject those cookies, but the website will work.

im_livechat_previous_operator_pid (Odoo)
utm_campaign (Odoo)
utm_source (Odoo)
utm_medium (Odoo)

Advertising & Marketing
(optional)

Used to make advertising more engaging to users and more valuable to publishers and advertisers, such as providing more relevant ads when you visit other websites that display ads or to improve reporting on ad campaign performance.

Note that some third-party services may install additional cookies on your browser in order to identify you.

You may opt-out of a third-party's use of cookies by visiting the Network Advertising Initiative opt-out page. The website will still work if you reject or discard those cookies.

__gads (Google)
__gac (Google)

Analytics
(optional)

Understand how visitors engage with our website, via Google Analytics. Learn more about Analytics cookies and privacy information.

The website will still work if you reject or discard those cookies.

_ga (Google)
_gat (Google)
_gid (Google)
_gac_* (Google)

You can set your computer to alert you each time a cookie is being sent, or you can choose to disable all cookies. Each browser is slightly different, so check your browser's Help menu to learn the correct way to modify your cookie settings or refer to the following links.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. Each browser is a little different, so look at your browser's Help menu to learn the correct way to modify your cookies.

We do not currently support Do Not Track signals, as there is no industry standard for compliance.


Updated to our privacy policy

We may update this privacy policy to clarify it, reflect any changes to our website, or comply with legal obligations. The "Last updated" notice at the top of the policy indicates the most recent revision, which also serves as the effective date of those changes. We provide access to all archived versions of this policy so that you can review the changes.

Contact us

If you have any questions regarding this Privacy Policy or your personal data, please feel free to contact us by email at info@nacani-cbd.ch or by postal service:

Happy Pets World sàrl

Rue Marterey 5,

1005 Lausanne

Suisse