Effective Date: March 13, 2026
KushNation is committed to protecting your personal information and respecting your privacy rights. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Protection of Personal Information Act (POPIA), 2013 and other applicable South African data protection laws.
KushNation ("we," "our," or "the Company") operates the KushNation Cannabis Social Club Platform ("the Platform"). We take your privacy seriously and are committed to being transparent about how we handle your personal information.
This Privacy Policy applies to all users of the Platform, including:
By using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.
This Privacy Policy is designed to comply with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013), which establishes minimum requirements for the processing of personal information by public and private bodies.
We adhere to the eight conditions for lawful processing of personal information as outlined in POPIA:
Information Regulator Contact:
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
P.O Box 31533, Braamfontein, Johannesburg, 2017
Email: enquiries@inforeg.org.za
Website: https://inforegulator.org.za/
We collect the following types of personal information:
Under POPIA, certain categories of personal information require additional protection. We collect the following special personal information with your explicit consent:
We do not collect or store:
We collect information through various methods:
We process your personal information for the following purposes:
We process your personal information based on the following legal grounds:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and management | Contractual necessity / Consent |
| Age and identity verification | Legal obligation |
| Transaction processing | Contractual necessity |
| Medical information (medical members) | Explicit consent |
| Compliance record keeping | Legal obligation |
| Fraud prevention | Legitimate interest |
| Platform improvement | Legitimate interest |
We may share your personal information in the following circumstances:
Your information is shared with the cannabis social club(s) you are a member of, including:
We work with trusted third-party service providers who assist in Platform operations:
All service providers are bound by confidentiality agreements and must comply with POPIA.
We may disclose information when required by law:
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.
We do not:
As a data subject under POPIA, you have the following rights:
Request confirmation of what personal information we hold about you and obtain a copy of your data.
Request correction of inaccurate or incomplete personal information.
Request deletion of your personal information (subject to legal retention requirements).
Object to processing of your personal information for direct marketing or legitimate interests.
Request restriction of processing in certain circumstances.
Receive your personal information in a structured, commonly used format.
Withdraw consent for processing at any time (where consent is the legal basis).
Lodge a complaint with the Information Regulator if you believe your rights have been violated.
To exercise any of these rights, please contact us:
send requests via e-mail to:
Email: info@KushNation.co.za
We will respond to your request within 30 days as required by POPIA.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
| Information Type | Retention Period | Reason |
|---|---|---|
| Account information | Duration of membership + 1 year | Service provision |
| Transaction records | 5 years after transaction | Legal compliance / Tax requirements |
| ID verification documents | 5 years after membership ends | Regulatory requirements |
| Medical authorizations | 5 years after expiry | Healthcare regulations |
| System logs | 12 months | Security and troubleshooting |
When retention periods expire, we securely delete or anonymise your personal information using industry-standard methods to prevent unauthorised recovery.
We implement comprehensive security measures to protect your personal information. For detailed information about our security practices, please see our Information Security Statement.
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:
Your personal information is primarily stored and processed within the Republic of South Africa. If we transfer information outside South Africa, we ensure:
We do not routinely transfer data internationally except to trusted cloud service providers with appropriate security measures.
Cookies are small text files stored on your device that help us provide and improve our services.
You can control cookies through your browser settings. Note that disabling essential cookies may affect Platform functionality.
The Platform is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from minors.
If we discover that we have inadvertently collected information from a person under 18, we will:
If you believe a minor has provided information to us, please contact us immediately at privacy@KushNation.co.za.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make changes, we will:
Continued use of the Platform after changes take effect constitutes acceptance of the updated Privacy Policy.
For any privacy-related questions, concerns, or requests, please contact us:
KushNation
Email: info@KushNation.co.za
Website: www.KushNation.co.za
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with:
The Information Regulator (South Africa)
JD House, 27 Stiemens Street
Braamfontein, Johannesburg, 2001
P.O Box 31533
Braamfontein, Johannesburg, 2017
Email: enquiries@inforegulator.org.za
Website: www.justice.gov.za/inforeg
Complaint Portal: https://inforegulator.org.za/