Privacy Policy

1. Who this policy covers

This policy covers the Dope Dodo website and the Glasshouse. For POPIA purposes, Dope Dodo is the "responsible party" for the personal information described below, and the responsible person is Y. Sebbag. Reach us at dopedodobrand@gmail.com for anything to do with your information.

Our Information Officer for matters to do with this website is Shannon McMurtrie. For everything else, the Information Officer is Y. Sebbag. Both can be reached at the email address above.

2. What we collect

Membership application: your full name and email address, which we keep to create and manage your account. The application also asks for a phone number, ID number, region, and your cannabis experience. These are used only to complete the application itself and aren't retained afterward.

Account & login: your email address, used to send you a secure sign-in link and to keep you logged in.

Event tickets & gifts: the ticket you buy, the gift package and the strains and flavours you choose, and the date of your order.

Payments: you donate by EFT (bank transfer) or by USDT, a cryptocurrency. We never ask for your card details. For EFT we see what appears on our bank statement: the amount, your payment reference and the name on the paying account. For USDT we see the amount, the network used and your wallet address, which are recorded on a public blockchain, and you may send us the transaction ID. We keep the amount, the method, the reference and when we confirmed the donation.

Delivery details: the name of the person receiving the order, a mobile number, the delivery address, any delivery notes you add, and your confirmation that someone 18 or older will be there to receive it.

Delivery records: who packed, checked, dispatched and delivered your order and when, the name of the person who received it, and a note that their ID was checked to confirm they are 18 or older. We note that the check was done. We do not record ID numbers.

WhatsApp: if you chat or order with us on WhatsApp, that conversation happens inside WhatsApp itself, governed by WhatsApp's own privacy policy, not this one.

Technical data: standard information our hosting provider collects automatically to keep the site running securely, like IP address and browser type, the same as almost any website.

3. Why we collect it

To confirm you're eligible for membership (18 or older), to create and manage your account, to process your event ticket and confirm your payment, to deliver your gift and keep a record that it was delivered to an adult, to respond when you get in touch, to meet our record-keeping duties, and to keep the Glasshouse secure and limited to approved members.

4. How long we keep it

Only for as long as we need it for the purposes above. Account information is kept while your membership is active, and deleted or anonymised within a reasonable time after you ask us to close it.

Order, payment, delivery and dispatch records are kept for 5 years, because we need them for our business, tax and accounting records and to deal with any query or dispute about an order. After that they are deleted or anonymised.

5. Who we share it with

Only what's needed to do the job in front of us:

Banks and blockchain networks: EFT donations pass through the banks involved, under their own privacy policies. USDT donations are recorded on a public blockchain network (Tron, Solana or Ethereum), which we don't control. Anyone can see a transaction and its wallet addresses there, and it can't be edited or erased.

Analytics (only if you accept): Google Analytics, which receives the anonymous usage information described in the cookies section below, under Google's own privacy policy.

Hosting and database providers: Vercel (which runs the website) and Supabase (which stores the site's data). They act on our behalf and only for that purpose.

Delivery: the person delivering your order is given your name, mobile number, delivery address and any notes you added, so they can reach you and find you.

WhatsApp: if you choose to chat with us that way, WhatsApp carries that conversation.

We don't sell your information, and we don't share it with anyone else, except where the law requires us to.

6. Information stored outside South Africa

Our database is hosted in Western Europe and our website runs on servers that can be in Europe or the United States. That means your information may be processed outside South Africa. We only use providers that have security safeguards in place, and we use them only to run the site for us, in line with POPIA's rules on sending personal information across borders.

7. Keeping it safe

We use reasonable technical and organisational measures to protect your information against loss, misuse, or unauthorised access, the same baseline expected of any site handling accounts and orders. Only approved staff can see delivery details and order records.

8. Your rights under POPIA

As a data subject under South Africa's Protection of Personal Information Act, you can ask us what information we hold about you, ask us to correct or delete it, and object to how we're using it. Email us and we'll action it. Some records, such as order and payment records, we have to keep for the period in section 4, so we may not be able to delete those straight away. If you're not satisfied with how we've handled your information, you can also lodge a complaint with South Africa's Information Regulator at inforegulator.org.za.

9. Cookies

The site uses two small things stored on your device, and both are needed for the site to work:

Sign-in: a secure session cookie that keeps you logged in after you use your sign-in link.

Age confirmation: a cookie and a matching entry in your browser's storage that remember you confirmed you are 18 or older, so we don't ask you again on every visit. It lasts for one year.

Analytics (only if you accept): the first time you visit the public pages, we ask whether you agree to Google Analytics. If you click Accept, Google Analytics sets cookies and tells us, in aggregate, which pages are visited, roughly where visitors are from, and how they found the site. We have switched off Google's advertising features, and analytics never runs on the Glasshouse, your tickets or the staff pages. If you click “No thanks”, nothing is loaded from Google. You can change your mind at any time with “Cookie settings” in the footer. Your choice is remembered in your browser's storage.

We don't use cookies for advertising.

10. Changes to this policy

We may update this policy from time to time. The version posted here is always the current one.

11. Contact

Questions about this policy or your information? Reach us at dopedodobrand@gmail.com.