No products in the cart.
YOUR INFORMATION, HANDLED WITH CARE
Privacy Policy
Last updated: 27 October 2026
Your relationship with Drakensberg Cannabis is personal. This policy explains what information we collect through drakensbergcannabis.com, our club memberships, product orders, The Monthly Berg Picnic Basket and communications with our team; why we use it; and how you can exercise your privacy rights.
1. Who is responsible for your information?
Drakensberg Cannabis (Pty) Ltd operates this website and club in the Central Drakensberg, KwaZulu-Natal, South Africa. In this policy, “we”, “us” and “our” refer to Drakensberg Cannabis (Pty) Ltd, the responsible party for the personal information described here.
For privacy enquiries, access or correction requests, or requests to close an account, email high@drakensbergcannabisclub.com. You can also contact us on WhatsApp: +27 66 454 0732. Please use “Privacy request” as your subject or opening message so we can direct it appropriately.
2. What we collect and why
Most information comes directly from you when you register, order, save basket preferences, arrange a visit or contact us. Payment providers and couriers may also send us payment confirmations, delivery updates or information needed to resolve a transaction.
- Club accounts: your name, email address, username, securely hashed password and any contact, billing or delivery details you add. We use these to create and maintain your account, sign you in, recover access and provide member access to the Bud collection.
- Memberships: your selected Free, Premium or Elite tier, membership status, start and renewal dates, and relevant payment or cancellation records. We use these to administer access, recurring billing where available, and the benefits attached to your membership.
- Orders: the products and quantities ordered, prices, billing and delivery details, contact number, order notes, transaction references, payment status and delivery or refund correspondence. We use these to process, fulfil and support your order and keep appropriate business records.
- Monthly baskets: your choice of “Surprise Me!” or “Pick my favourites”, saved products and quantities, changes to those preferences, basket allowance, monthly basket contents and dispatch status. We use these to prepare and deliver The Monthly Berg Picnic Basket included with an eligible paid membership.
- Club visits: your membership reference, visiting arrangements, pass usage, visit dates and number of guests. We use these to manage bookings, check the benefits available and maintain visit records. If you share a guest’s personal details, let them know about this policy and provide only what is needed for the visit.
- Messages and support: the name, email address, phone number and message you provide through our contact form, email or WhatsApp, together with relevant follow-up correspondence.
- Website operation: technical information such as IP address, browser or device details, requested pages, timestamps and security events may be recorded by the website, hosting and security services to deliver pages, maintain sessions, troubleshoot problems and protect against abuse.
You can browse public information without creating an account. Registration is required for member-only access, including the Bud collection. Information needed to open an account, process a payment, deliver an order or arrange a visit is necessary for that service; if you do not supply it, we may be unable to provide that service. Optional preferences and unrelated personal details are voluntary.
Member journals: if you use the Grow Planner, we store the journal name, indoor or outdoor setting, milestone dates and environmental observations you save against your signed-in club account. This lets you recover and continue your journal on another device. Journals are not public and are not shared with other members. Website administrators may access records for account support and technical administration. Please do not include medical histories or other sensitive personal information in your notes. You can edit or remove individual observations, download your journal, or contact us to request access to or erasure of your stored journal. Journal records remain with your account until removed through account administration or an applicable erasure request; ending a paid membership does not by itself delete them. Backup retention is described below.
\n
Personal Wellness Journal: this optional member tool can contain sensitive health information, including products and quantities you record, dates and times, symptoms, sleep and mood ratings, unwanted effects and personal notes. Before the first save, we ask for your consent to store this information against your club account for your private journal and charts. It is not public or shared with other members, and it is not automatically submitted to an AI service. Authorised website administrators and technical support may access stored records for account support and administration. The journal is not monitored for care and does not provide medical recommendations. You can edit or remove entries and download a copy. Contact high@drakensbergcannabisclub.com to withdraw consent or request erasure of the journal and its consent record. Records remain with your account until removed or erased; backup retention is described below.
\n
3. Membership and basket preferences
Free registration provides a club account. Premium and Elite membership benefits depend on your membership being active. We use membership and transaction records to check eligibility, calculate the applicable basket allowance and track visit passes.
Saved basket preferences repeat until you change them. “Surprise Me!” allows the basket service to select a combination of eligible products within your allowance. We retain each prepared month’s selection and fulfilment status so staff can handle stock checks, delivery and enquiries. These choices personalise your basket; they are not a medical assessment.
You can review account and delivery details in My Account and manage eligible basket preferences on the Monthly Basket page. Closing a membership does not automatically remove records of earlier payments, orders, visits or basket dispatches.
4. Payments, recurring billing and delivery
When online payment is available, the payment provider identified at checkout processes your payment information under its own privacy policy. We receive the transaction references and status information needed to reconcile payments, confirm orders, handle refunds and administer membership. Where recurring billing is offered, the provider may retain a payment authorisation or token to process the renewals you authorise. Availability of a payment method is shown at checkout; this policy does not mean every payment method or paid signup is currently enabled.
Full card details entered with a payment provider are not stored as part of your club profile. Please do not send card numbers, security codes, passwords or banking login details through our contact form, email or WhatsApp.
For deliveries, we share the recipient name, phone number, delivery address or chosen collection point, and necessary parcel or tracking information with The Courier Guy/PUDO or the courier used for your order. Discreet packaging does not make delivery anonymous: the courier still needs information to route the parcel and contact its recipient.
5. How we are entitled to use information
Depending on the purpose, we process information to enter into or carry out your requested membership, order or other service; comply with legal obligations; pursue legitimate interests such as account security, fraud prevention and resolving disputes; or act on your consent where consent is required. We do not treat simply browsing the website as consent to unrelated marketing or optional tracking.
Our website, club memberships and visits are intended for people aged 18 or older. Please do not register or submit personal information for a child. If you believe a child has supplied information, contact us so we can investigate and take appropriate action.
6. Health information and private enquiries
You do not need to supply a diagnosis, prescription or medical history to browse the site, register an ordinary club account or choose standard products. Please keep public comments and general contact messages free of unnecessary health details.
If an enquiry about individual needs requires sensitive health information, contact us first to agree what is necessary and how to provide it. We will only use such information for an identified purpose and on an appropriate lawful basis, including explicit consent where required. Product preferences and purchase history may themselves be sensitive; they are not a basis for publishing a testimonial or sharing your health story. We would seek separate permission before doing that.
7. Who may receive information
Authorised staff can access information needed for account administration, member support, basket preparation, visits and fulfilment. Website administrators and technical support providers may access information to maintain, secure, back up or troubleshoot the service.
Other recipients can include our hosting and email service providers, payment processors, delivery partners and professional advisers where needed for the purposes in this policy. Information may also be disclosed where required by law or reasonably necessary to address fraud, protect rights or respond to a lawful request. We do not sell your club account, order history or basket preferences.
Links to WhatsApp, social networks, payment services and other external websites take you to services governed by their own privacy terms. Contacting us on WhatsApp also involves WhatsApp/Meta’s handling of your phone number and related service information.
8. Cookies, external content and website services
The site uses cookies or similar browser storage for functions such as signing in, remembering a session or age confirmation, maintaining a cart and saving website preferences. Blocking these in your browser may prevent login, checkout or other features from working. You can clear stored website data and change cookie permissions through your browser.
Technical logs are separate from optional audience analytics. Any optional analytics or advertising tracking introduced to the site should be explained when offered, with consent requested where required. This policy does not substitute for that choice.
Some resources, including Google Fonts, are loaded from external services, which receive technical request information such as your IP address. Embedded videos or social content, where present, can also communicate with the provider when loaded. Those providers may use their own cookies or recognise you if you are signed in to their services.
Where comments or reviews are enabled, the information you choose to post and your display name may become public after approval. The site may record IP and browser information to help prevent abuse. If an avatar is displayed through Gravatar, an email-derived identifier is sent to that service; see Automattic’s privacy policy. Do not post private contact, payment or health information in a public comment or review.
9. Communications and marketing
We use your contact details for messages needed to manage your account, membership, orders, basket delivery, visits, security and support requests. These service messages are separate from promotional messages.
Promotional communications must have an appropriate lawful basis. You can object to direct marketing or withdraw marketing consent by using an unsubscribe option, where provided, or contacting our privacy email. Opting out of promotions does not prevent necessary service messages about an account or transaction you still have with us.
10. Storage, retention and security
Information is held in the website’s account, commerce and membership records and, where relevant, in our email, messaging, fulfilment and service-provider systems. Some providers operate outside South Africa, so information may be processed in other countries. Any transfer we arrange must have a lawful basis under POPIA, such as adequate protection under applicable law or binding safeguards, consent, or another permitted ground. Contact us for information about a particular service or transfer.
We retain information for the purposes for which it was collected and for applicable legal, accounting, tax, dispute or security requirements. Account details and saved preferences support your ongoing account; order, payment, visit and dispatch records may need to remain after membership ends. The shop currently has no automatic expiry configured for completed order records. You can request a review of information that is no longer needed rather than assuming cancellation will erase it.
Where retention is no longer justified, information should be deleted, de-identified or restricted as appropriate. Backup copies may remain separately until replaced or removed and should not be used to restore information to ordinary use without a valid reason.
We use safeguards appropriate to the service, including HTTPS connections and account permissions. Access is limited according to operational roles. No online service can guarantee absolute security; use a unique password, keep your login details private and tell us promptly if you suspect unauthorised access. We will handle security compromises and any required notifications in accordance with applicable law.
11. Your privacy rights and requests
Subject to POPIA and applicable exceptions, you can ask whether we hold personal information about you, request access to it, ask for inaccurate information to be corrected, request deletion or restriction where we are no longer entitled to keep or use it, object to processing on grounds provided by law, and withdraw consent for future consent-based processing. Withdrawal does not undo processing that was already lawful.
Email high@drakensbergcannabisclub.com, preferably from the address associated with your account. Describe your request and include an account or order reference if relevant. We may need proportionate proof of identity before releasing or changing information. We will explain any information we must retain, any applicable procedure or lawful fee, and the effect a request may have on an ongoing service. Cancelling recurring billing is a separate action from requesting data deletion; contact us if you need both.
You may also lodge a complaint with South Africa’s Information Regulator. Its official contact and complaints page lists current channels, including POPIAComplaints@inforegulator.org.za and telephone 010 023 5200. Relevant request forms are available on the Regulator’s POPIA information page.
12. Changes to this policy
We will update this page when our services or information practices change and revise the date above. Where a change requires fresh consent or a separate notice, we will address that rather than relying only on publication of a new policy.