Privacy Policy
Last updated: April 28, 2026 | Effective Date: January 1, 2026
1. Introduction and Scope
Medcannova Inc. ("Company," "we," "us," "our," or "Medcannova") is committed to protecting your privacy and ensuring transparency in how we collect, use, disclose, and safeguard your personal information. This Privacy Policy ("Policy") explains our data practices when you visit our website, use our services, products, or applications, or interact with us through other channels.
Medcannova operates as a global medical cannabis research, development, and pharmaceutical company. We comply with applicable privacy laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other international privacy regulations. This Policy applies to all personal information we collect regardless of how it is collected.
Important: Please read this Privacy Policy carefully. If you do not agree with our policies and practices, you should not use our website or services. Your continued use of our website, services, or products following the posting of revisions to this Privacy Policy constitutes your acceptance of those changes.
2. Information We Collect
We collect personal information through various methods to provide you with quality services, conduct research, and improve our operations.
2.1 Information You Provide Directly
Contact and Registration Information
Full name, email address, phone number, mailing address, company name, job title, and professional credentials when you contact us, subscribe to communications, request information, or register for services.
Communication Data
Content of emails, messages, support tickets, and any other communications you send us. We retain these communications to provide customer service and maintain business records.
Research and Partnership Information
Information provided in research participation forms, clinical trial inquiries, partnership proposals, regulatory submissions, and business collaboration requests.
Payment Information
Payment details, billing address, and transaction history. Payment information is processed through secure third-party payment processors and is not stored on our servers.
2.2 Information Collected Automatically
Device Information
Device type, operating system, browser type, device identifiers, mobile network information, and device settings.
Usage Data
Pages visited, time spent on each page, links clicked, search queries, referring URLs, exit pages, and navigation patterns through our website.
Cookies and Tracking Technologies
We use cookies, web beacons, pixels, and similar technologies to track user behavior, remember preferences, and understand website usage patterns.
Analytics Data
Aggregated and anonymized data about website performance, user interactions, and traffic patterns collected through analytics services.
3. Legal Basis for Processing
Under applicable privacy laws, particularly GDPR and CCPA, we process your personal information based on the following legal grounds:
Consent
Where you have explicitly consented to the processing of your personal data for specific purposes.
Contract Performance
Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
Legal Obligation
Where we are required by law, regulation, or court order to process your data.
Legitimate Interests
Where processing is necessary for our legitimate business interests, including research, product development, marketing, fraud prevention, and service improvement.
Regulatory Compliance
Where processing is required to comply with pharmaceutical, medical cannabis, and healthcare regulations in jurisdictions where we operate.
4. Use of Your Information
We use the personal information we collect for the following purposes:
- To respond to your inquiries and provide customer support and technical assistance
- To send periodic emails regarding your inquiry, products, services, updates, and newsletters
- To improve our website, products, and services based on user feedback and behavior analysis
- To conduct research, clinical trials, and develop new pharmaceutical solutions
- To facilitate partnerships, business collaborations, and regulatory interactions
- To comply with legal and regulatory requirements in all jurisdictions
- To protect against fraudulent transactions, unauthorized access, and security threats
- To send marketing communications (with your consent where required by law)
- To analyze website traffic, user engagement patterns, and optimize user experience
- To personalize your experience and provide relevant content recommendations
- To enforce our terms of service and other agreements
5. Disclosure and Sharing of Information
We may share your personal information with third parties only in the following circumstances:
Service Providers
Third-party vendors who assist us in operating our website, conducting our business, and providing services. We maintain Data Processing Agreements with all service providers.
Business Partners
Companies with whom we collaborate on research, development, distribution, or commercialization of medical cannabis products and pharmaceutical solutions.
Regulatory Authorities
When required by law or regulation, we disclose information to government agencies, regulatory bodies, and law enforcement authorities.
Legal Requirements
When disclosure is necessary to comply with court orders, subpoenas, legal processes, or to protect our legal rights and interests.
Important: We do not sell, trade, or rent your personal information to third parties for their independent marketing purposes.
6. Data Security and Protection
We implement comprehensive administrative, technical, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.
Encryption
All sensitive data is encrypted in transit using SSL/TLS 1.2+ protocols and at rest using AES-256 encryption or equivalent industry-standard encryption methods.
Access Controls
Access to personal information is restricted to authorized personnel who have signed confidentiality agreements and received appropriate training.
Security Audits
We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address security vulnerabilities.
Data Minimization
We collect only the personal information necessary for our stated purposes and do not retain data longer than necessary.
7. Your Privacy Rights and Choices
Depending on your location and applicable laws, you may have the following rights regarding your personal information:
Right to Access
You have the right to request access to the personal information we hold about you and to receive a copy in a portable format.
Right to Correction
You have the right to request correction of inaccurate, incomplete, or outdated personal information.
Right to Deletion
You have the right to request deletion of your personal information, subject to legal retention requirements and legitimate business interests.
Right to Portability
You have the right to request your personal information in a structured, commonly used, and machine-readable format for transfer to another service provider.
Right to Withdraw Consent
You have the right to withdraw your consent at any time. This does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at privacy@medcannova.com with your request and proof of identity. We will respond to your request within 30 days or as required by applicable law.
8. International Data Transfers
Medcannova operates globally across multiple jurisdictions including Germany, Thailand, Czech Republic, Poland, Uruguay, Malta, Spain, Brazil, USA, Canada, Netherlands, UK, South Africa, Botswana, and others. Your personal information may be transferred to, stored in, and processed in countries other than your country of residence.
These countries may have data protection laws that differ from your home country. By using our website and services, you consent to the transfer of your information to countries outside your country of residence, which may include countries that do not have the same data protection laws as your home country.
We implement appropriate safeguards to protect your information during international transfers, including Standard Contractual Clauses, Binding Corporate Rules, and adequacy decisions where applicable. We comply with GDPR Chapter V requirements for international data transfers.
9. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Email: privacy@medcannova.com
Website: www.medcannova.com