Effective March 3, 2022
Changes to this policy
Cana reserves the right to modify or replace this Policy at any time at our sole discretion. We will reflect any such modifications to this Policy in our Website and will indicate at the top of this page the date this Policy was last amended. Any changes to this Policy will become effective upon posting. Your continued access to and/or use of the Services after any such changes constitutes your acceptance of, and agreement to be legally bound by, this Policy as revised. Please periodically review this Policy so that you know, among other things, what information we collect, how we use it, and with whom we may share it. If you have any questions, comments, or requests specific to this Policy, please contact us as outlined in Contact Us section below.
We, or our service providers, may collect information from or about you that you provide to us directly or that we receive automatically from your use of the Services.
Information We Collect From You Directly
When you create an account, place a reservation for a future purchase, make a purchase, subscribe to marketing communications from us, submit inquiries to us, contact us through the information provided in the Contact Information section below, or otherwise use our Services, we or one of our third-party service providers may collect certain personal information from you. If you are placing a reservation for a future purchase or making a purchase, you will be asked to provide payment information (e.g., credit card information) and order fulfillment information (e.g., billing and delivery addresses). Payment information is collected by our third-party payment processor. We do collect, access, store, and process order fulfillment information at this time for non-alcoholic products (e.g., the Appliance). This would include, for example, your name, product information, and delivery address at the time of pre-order.
We may ask if you would like to receive communications from us about special offers from us when you create an account and at other times. If you would like to opt-out of such communications, see appropriate section below (“Your Choices; Opt-Out; Do-Not-Track Requests; and Third-Party Tracking”).
Information We Receive from Your Use of Our Services
Usage Information. When you access or use our Services, we or our service providers automatically collect and receive usage information (e.g., when you view or search the Website). We also collect data about the devices you use to access the Services (e.g., IP addresses, device type, mobile network information, unique device identifier, operating system, browser type, application version, pages visited, and referring web pages). This information is sometimes called “log data” and helps us improve and customize the Services. This information is generally non-identifying, but if we associate it with you as an identifiable person, we will treat it as personal information.
Technologies We Use to Collect Information. Technologies we use to collect log data, directly or through our service providers, may include cookies (data files placed on your mobile device used to access the Services), analytics software, and pixel tags (transparent graphic image, sometimes called a web beacon or tracking beacon, placed on a web page or in an email, which indicates that a page or email has been viewed). A pixel tag may tell your browser to get content from another server. We, or our service providers, may place cookies or similar files on your device used to access the Services for security purposes, to facilitate navigation, and to personalize your experience while using the Services. It may be possible to refuse to accept cookies by activating the appropriate setting on your device. However, if you select this setting, you may be unable to access all or parts of our Services, and some of our features and services on the Services may not operate as intended.
We also collect anonymized and aggregated information that does not identify you as a specific natural person (“Anonymized Data”) for purposes that include testing our systems, research, data analysis, determining how to best market and promote our Services, improving the Services, and developing new features and functionality within the Services. Please see Use of Information section below.
Third-Party Information Collection and Cross-Device Collection
When you use the Services, certain third parties may use automatic information collection technologies to collect information about you or your device. These third parties may include your mobile service provider, your mobile device manufacturer, and third parties engaged by us to host or store information, including information obtained through the Services, or provide certain services for us, including advertising, marketing, analytics providers (“Ad Partners”). These third parties may use tracking technologies to collect information from you when you use the Services. The information they collect may be associated with your information or they may collect information, including personal information, about your online activities over time and across different websites, apps, or other online services websites. For instance, we work with Ad partners, such as Google Analytics, to provide analytics services that use the cookies set on your device to measure the performance of advertising and track traffic to our Website generally. Our Ad Partners may also use such technologies to deliver advertisements to determine whether you've already been shown an advertisement or how it performed, or provide us with information about how you interacted with an ad. We have also implemented certain Ad Partner services, which may categorize Cookie information so that we and third-party service providers can better deliver advertisements that are relevant and useful to you on the Services and various websites across the internet. We may combine the information Ad Partners collect from you with information we collect through our Services. For example, if you authenticate with your Service account via a single sign-on method, such as SAML, we will have access to information that authentication provider sends, such as your email address. We may also allow Ad Partners to serve advertisements on our behalf across the Internet and in third party applications. We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
Use of Information
We may use your information for the following:
Communicating with you: This includes to respond to your questions or inquiries; to supply you with requested information; and to provide you with informational or promotional communications about our products and services we think might interest you.
Providing and improving the Services: This includes to facilitate a purchase and payment you choose to make using the Services; to conduct market research and surveys; to conduct promotional activities, including contests, in association with the Services; and to improve our Services and other products.
Identifying product and service preferences.
Preventing harm: This includes to validate credentials, authenticate customers and prevent fraudulent transactions.
Other purposes permitted or required by law.
When we collect any Anonymized Data, we are permitted to use and disclose this information for any purpose, notwithstanding anything to the contrary in this Policy, except where we are required to do otherwise by applicable law. Examples of Anonymized Data include: physical location information, demographic information, including gender, dates of birth, ZIP codes, etc., or any personal information that has been anonymized, aggregated or de-identified. If we combine any Anonymized Data with your personal information (such as combining your location with your name), we will use and disclose such combined information as personal information in accordance with this Policy. Similarly, if applicable law requires that we treat certain Anonymized Data as personal information, we will only use and disclose such information as personal information in accordance with this Policy.
To access or use the Services you must be 13 years of age or older and, if under 18 or the age of majority in your jurisdiction, your use of the Services must be under the supervision of a parent or guardian or other responsible adult. If you become aware that a child has provided us with personal information without parental consent, please contact us at the information provided below in the Contact Information section. If we become aware that a child under 13 has provided us with personal information without parental consent, we remove such information and, if applicable, terminate the child’s account.
When you provide information to us during your use of the Services, that information may be shared with our service providers and other partners that provide business, professional, or technical support functions for us. Our service providers include website host provider, data warehouser, analytics provider, third-party payment processor, order fulfillment provider, customer management provider, customer support provider, and Ad Partners. These service providers are authorized to use your personal information only as necessary to provide these services to us. We may share information with our parent company. We reserve the right to transfer any information we have about you in connection with a sale, merger, consolidation, change in control, transfer of assets, reorganization or liquidation of our business. We may also share your information when you authorize us to share your information with others. We may also use, or disclose your information to third parties if we have reason to believe that using or disclosing such information is necessary to (i) investigate possible unlawful activity or security breaches; (ii) identify, contact, or bring legal action against someone who may be violating one of our agreements; (iii) cooperate with lawful requests from law enforcement or other government authorities, such as valid subpoenas or court orders; or (iv) protect our rights, safety or property.
We protect your information by maintaining physical, administrative and technological safeguards intended to help protect against unauthorized use, disclosure or access. Information may only be accessed by persons within Cana, or our affiliates, or our third party service providers, who require such access to carry out the purposes indicated above. We retain information that we collect for as long as reasonably necessary to fulfill the purposes for which it was collected or to meet any legal requirements. Although we have taken commercially reasonable measures to help protect our Services, computer systems, and any information that we have collected against unauthorized use, access, disclosure, misuse, alteration, or destruction, there are no security measures that can provide absolute protection. We cannot ensure or warrant the security of any information you provide to us. We are headquartered in the United States. Information may be accessed or used by us or transferred to us in the United States or to our affiliates, business partners, or service providers elsewhere in the world. If you are located outside the United States, be advised that any information you provide to us will be transferred to and stored in the United States and that, by submitting information to us, you explicitly authorize its transfer and storage within the United States. We will treat the information subject to this Policy according to this Policy regardless of where it is processed or stored. Information may be subject to access requests from governments, courts, or law enforcement in jurisdictions outside the United States according to laws in those jurisdictions. Subject to applicable laws in such other jurisdictions, we will use reasonable efforts to ensure that appropriate protections are in place to require the data processor in that country to maintain protections on the information.
Your choices; Opt-out; Do not track disclosures; Third-party tracking
If you have submitted information to Cana and would like to have it updated, corrected, or removed, please contact us using the contact information provided below. We will use reasonable efforts to comply with your request. However, we may not be able to allow you to update, correct or remove certain information in certain circumstances, for example if it contains information of other persons, or for legal reasons. In such cases, we will provide you with a reasonable explanation of why it is not possible.
Opt-Out: If you receive any promotional email communication from us, you will be given the option to “unsubscribe” from receiving further email communications from us at any time. Your option not to receive promotional and marketing material from us will not preclude us from corresponding with you, by email or otherwise, regarding existing or past business relationships with us, and will not preclude us from accessing and viewing your information in the course of maintaining and improving the Services.
Do-Not-Track: You can also manage how your mobile device, browser, computer, and other platforms and software share information by adjusting your privacy, security, WiFi and related settings. For example, some browsers and devices have a Do Not Track feature that sends a signal to website, analytics companies, ad networks, plug-in providers and other web services to stop tracking your activity. Unless your browser or device settings are configured to make your activities invisible to usage analytics tools, we do not presently have the capability to omit you from usage analytics to the extent your browser only sends a “do not track” message and does not otherwise screen you from tracking without any action on our part.
Third-Party Tracking: Third parties, other than our service providers, do not have authorization from us to track which websites, apps, or other online services you visit prior to and after visiting the App or the Website. Please note, however, that we cannot control third-party tracking and there may be some third-party tracking that occurs without our consent or knowledge.
Your California privacy rights
California residents have additional rights afforded to them under the California Consumer Privacy Act of 2018 (California Civil Code Sec.1798.100 et seq.) (“CCPA”). We do not “sell” personal information to third parties as defined under the CCPA. California residents have the right to (subject to certain limitations):
California residents may make such request by contacting us at firstname.lastname@example.org.
In addition, pursuant to California’s “Shine the Light” statute, Section 1798.83 of the California Civil Code California residents have the right to request from a business with whom the California resident has an established business relationship: (1) what types of personal information, if any, of the California resident the business shares with third parties for direct marketing purposes of those third parties; and (2) the identities of the third parties with whom the business has shared such information in the immediately preceding calendar year. We do not currently share any personal information with third parties for their direct marketing purposes.