Box of Jane Privacy Policy
INTRODUCTION

Welcome to Box of Jane.  This “Privacy Policy,” governs your access and use of www.boxofjane.com and any other Box of Jane owned or operated website mobile site, mobile application, interactive feature, widget, and/or other online services (hereinafter referred to as the “Service”), regardless of how you access or use the Service, whether via personal computers, mobile devices or otherwise. By accessing or using the Service, you expressly accept and agree to this privacy policy and enter into a legally binding contract with Box of Jane. In addition to reviewing this Privacy Policy, please review our Terms and Conditions of Service which govern the use of the Service. By using our Service, you consent to our Privacy Policy and Terms and Conditions of Service and our collection, use and sharing of your information and data, and other activities, as described below. Do not access or use the Service if you are unwilling or unable to be bound by the Terms and Conditions of Service. If you do not agree to abide by all Terms and Conditions of Service, you are prohibited from using Box of Jane. If you agree to abide by the Terms and Conditions of Service User Agreement and subsequently violate the terms of the Agreement, your use of the Service will be terminated.

INFORMATION COLLECTED

Registering with the Service, requires certain information such as: (1) personally identifiable information, which is information that identifies you personally, including but not limited to your first and last name, email address, home address, date of birth and phone number ("Personal Information"); (2) demographic information, such as information about your location, age, gender, and spending habits ("Demographic Information"); (3) medical information regarding your medical marijuana recommendation, including the name and license number of your recommending physician, the contact information of the physician, the method to verify the  authenticity of said recommendation, the expiration date of that recommendation, the recommendation verification number itself, and the details of any orders placed through the Service (“Medical Information”).

We may collect this information through various forms and in various places on the Service, including if you register for an account, through "contact us" forms, or when you otherwise interact with the Service in any way. We may collect information regarding your usage of our Service, including but not limited to your IP address or other unique identifier, your Device functionality (including browser, operating system, hardware, mobile network information), the URL that referred you to our Service, the areas within our Service that you visit and your activities there (including remembering you and your preferences), your Device location, your Device characteristics; and certain other Device data, including the time of day, among other information (“Usage Information”). We may use your Personal Information, Medical Information, Demographic Information or Usage Information for various purposes, such as: (1) to process transactions; (2) send you electronic newsletters; (3) provide you with special offers or promotional and marketing materials on behalf of us or third parties; (4) to enable you to participate in a variety of the Service's features such as to enable you to participate in online entry sweepstakes, contests or other promotions; (5) to contact you regarding your use of the Service; (6) to contact you to inform you of an changes to the Service and/or Service's policies; (7) to provide customer support; (8) for internal business purposes; and (9) for purposes disclosed at the time you provide your information or as otherwise set forth in this Privacy Policy.

If we combine Demographic Information with the Personal Information we collect directly from you on the Service, we will treat the combined data as Personal Information under this Privacy Policy. All Personal Information collected by Box of Jane is proprietary information, and is the property of Box of Jane.

TRACKING TECHNOLOGIES AND LOCATION-BASED INFORMATION

Box of Jane may use several and any methods and technologies to store or collect Usage Information ("Tracking Technologies"). Tracking Technologies may set, change, alter or modify settings or configurations on your Device. A few of the Tracking Technologies, without limitation, include the following (and subsequent technology and methods to be developed): cookies, web beacons, embedded scripts, browser fingerprinting, e-tags, and/or entity tags. Our Service may use location-based services in order to verify your location, deliver you relevant content based on your location, and share your location with the pre-registered delivery and dispensary service providers as part of the location-based services we offer. Please note that we will only directly provide third parties we work with access to your exact location information and only after you give us permission to do so. You should consider the risks involved in disclosing your location information to other people anytime and in any fashion on the internet or social media. Our use of Tracking Technologies may occur for a variety of purposes, but not limited to: (1) to grant you permission to use and access our Service, including cookies required to prevent fraudulent activity, improve security or allow you to make use of Service functionality; (2) to assess the performance of the Service, including as part of our analytic practices or otherwise to improve the content, products or services offered through the Service; (3) to offer you enhanced functionality when accessing the Service, including identifying you when you visit our Service or keeping track of our specified preferences, including in terms of the presentation of content on our Service; and to deliver content, including ads, relevant to your interests in and on our Service and third-party sites based on how you interact with our content and ads.

There may be other Tracking Technologies now and later devised and used by us in connection with the Service. Further, third parties may use Tracking Technologies in connection with our Service, which may include the collection of information about your online activities over time and across third-party web sites or online services. We may not control those Tracking Technologies and we are not responsible for them. However, you consent to potentially encountering third-party Tracking Technologies in connection with use of our Service and accept that our statements under this Privacy Policy do not apply to the Tracking Technologies or practices of such third parties. Also, various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer's online activities over time and across third-party web sites or online services (e.g., browser do not track signals). Currently, we do not monitor or take any action with respect to these signals or other mechanisms.

INFORMATION THIRD PARTIES PROVIDE ABOUT YOU

We may receive information about you from our affiliates, from any other users of the Service, or from any other third parties that may provide us information we deem relevant to your use of the Service. Box of Jane may at its sole discretion collect and use this information as Personal Information.

INTERACTIONS WITH THIRD PARTY SITES

The Service may include functionality that allows certain kinds of interactions between the Service and your account on a third-party web site or application; for example interaction with a state licensed cannabis dispensary, medical cannabis cooperative, collective, or delivery service’s website. The use of this functionality may involve the third-party operator providing certain information, including Personal Information, to us. For example, we may provide third-party sites' interfaces or links on the Service to facilitate your sending a communication from the Service. Box of Jane may at its sole discretion collect and use this information as Personal Information.

A. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) Compliance

The HIPAA Privacy Rule establishes standards to protect users of the Service individuals’ medical records and other personal health information. The Service has appropriate safeguards to protect the privacy of personal health information, and sets limits and conditions on the uses and disclosures that may be made of such information without patient authorization.

However, we may use your Personal Information, Demographic Information or Usage Information at Box of Jane’s sole discretion for various purposes, including but not limited to: (1) processing of transactions; (2) providing special offers catered to users’ needs; (3) enabling users to participate in the Service’s features; (4) providing users with a customized experience; (5) providing customer support; (6) contacting user regarding any updates or changes to this policy or Terms and Conditions; and (7) for other purposes disclosed at the time you provide your information or as otherwise set forth in this Privacy Policy.

B. Security

Box of Jane incorporates commercially reasonable safeguards to help protect and secure your Personal Information. However, no data transmission over the Internet, mobile networks, wireless transmission or electronic storage of information can be guaranteed to be 100% secure. Please note that we cannot ensure the security of any information you transmit to us, and you use our Service and provide us with your information at your own risk.

C. How and When Do We Disclose Information to Third Parties?

Box of Jane may share non-Personal Information, such as aggregated user statistics, with third parties. We do not share the Personal Information that we collect with third parties for those third parties' direct marketing purposes. We may share the information we have collected about you, including Personal Information, as disclosed at the time you provide your information and as described below or otherwise in this Privacy Policy. The Service may disclose your information as follows:

1. When You Provide Information to Third Parties. You may be presented with an option on our Service to receive certain information and/or marketing offers directly from third parties. If you choose to do so, your Personal Information and other information may be disclosed to such third parties and all information you disclose will be subject to the third party privacy policies and practices of such third parties. We are not responsible for the privacy policies and practices of such third parties and, therefore, you should review such third party privacy policies and practices of such third parties prior to requesting information from or otherwise interacting with them.

2. Administrative and Legal Reasons. We may disclose Personal and Usage Information when subpoenaed by law enforcement; to protect the Service; and to detect or prevent misuse, fraud, security, or technical issues or where otherwise required to do so by law.

3. Third Parties Providing Services on Our Behalf. We may use third-party vendors to perform certain services on behalf of us or the Service, such as: (1) to assist us in Service operations; (2) to manage a database of customer information; (3) hosting the Service; (4) designing and/or operating the Service's features; (5) tracking the Service's activities and analytics; (6) enabling us to send you special offers or perform other administrative services; and (7) other services designed to assist us in maximizing our business potential. We may provide vendors with access to your information to carry out the services they are performing for you or for us. Third-party analytics and other service providers may set parameters and access their own technologies on your Device and they may otherwise collect or have access to information about you. We are not responsible for those third-party technologies or activities arising out of them. However, some third-parties may offer you certain choices regarding their practices. We are not responsible for the effectiveness of or compliance with any third parties' opt-out options.

4. Affiliates and Business Transfer. We may share your information, including your Device Identifiers and Personal Information, Demographic Information and Usage Information with our parent, subsidiaries and affiliates. We also reserve the right to disclose and transfer all such information: (1) to a subsequent owner, co-owner or operator of the Service or applicable database; or (2) in connection with a merger, consolidation, restructuring, the sale of substantially all of our interests and/or assets or other corporate change, including, during the course of any due diligence process.

5. Co-branded Areas. Certain areas of the Service may be provided to you in association with third parties ("Co-Branded Areas") such as promotional partners, and may require you to disclose Personal Information to them. Such Co-Branded Areas will identify the third party and indicate if they have a privacy policy that applies to their collection and use of you information. If you elect to register for products and/or services, communicate with such third parties or download their content or applications, at Co-Branded Areas, you may be providing your information to both us and the third party. Further, if you sign-in to a Co-Branded Area with a username and password obtained on the Service, your Personal Information may be disclosed to the identified third parties for that Co-Branded Area. Box of Jane is not responsible for such third party's data collection or practices and you should look to such third party privacy policies for more information.

6. Sweepstakes, Contests and Promotions. Box of Jane may offer sweepstakes, contests, and other promotions (any, a "Promotion") through the Service that may require registration. By participating in a Promotion, you are agreeing to official rules that govern that Promotion, which may contain specific requirements of you, including, allowing the sponsor of the Promotion to use your name, voice and/or likeness in advertising or marketing associated with the Promotion. If you choose to enter a Promotion, Personal Information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, in connection with winner selection, prize fulfillment, and as required by law or permitted by the Promotion's official rules, such as on a winner’s list.

INFORMATION USER DISCLOSES

The Service may contain a community forum and message board where users are able to create user profiles, writings, photographs, ideas, videos, audio recordings, computer graphics, pictures, data, or other content, including Personal Information (collectively, "User Content"). All User Content once posted immediately becomes the property of Box of Jane. The Service may display, reproduce, publish, distribute or otherwise use User Content online or offline in any media or format (currently existing or hereafter developed) and may or may not attribute it to you. Others may have access to this User Content and may have the ability to share it. Please think cautiously prior to posting any Personal Information in a public forum. Our Privacy Policy does not apply to any information that you disclose publicly through our Service. We are not responsible for the accuracy, use or misuse of any User Content that you disclose or receive from third parties through the Service.

Please note that all user generated content is subject to the Digital Millennium Copyright Act Policy set forth in the Terms and Conditions of Service.

USER INFORMATON AND COMMUNICATIONS

The user is responsible for maintaining the truthfulness and accuracy of the information you submit to us, such as the user’s contact information and doctor recommendation information provided as part of registration. The Service will disable a user’s account if the information provided is determined to be false or no longer current. 

CHANGED TO THE PRIVACY POLICY

The Service has the authority to alter the Privacy Policy at any time without notice to you. However, the Service will not change this Privacy Policy in a manner that materially alters the use of the user’s Personal Information as promised at the time it was collected unless required to do so by law.