WM Store Supplemental Terms

Last updated October 30, 2023

These Terms have been superseded by the Weedmaps Commercial Terms of Use, including, as applicable, the Supplemental Product Terms.

.

.

.

.

By using the WM Store Feature (as defined below), you agree to (I) the following terms (including the Addenda provided or referenced herein, the “WM Store Supplemental Terms”) and (II) the Weedmaps Commercial Terms available at https://weedmaps.com/legal/commercial-terms (or at such other URL as Weedmaps may provide) (including any other terms or policies referenced therein, the “Commercial Terms”, and collectively with the WM Store Supplemental Terms, the “WM Store Applicable Terms”). Capitalized terms used but not defined herein have the meaning set forth in the Commercial Terms.

Conflicts Regarding Personal Information

In the event of any inconsistency between the provisions of these WM Store Supplemental Terms and any other provision of the WM Store Applicable Terms with respect to WM Store User Personal Information, the terms of the Data Processing Addendum attached hereto as Addendum 1 (“Data Processing Addendum”) will control.

Retailer Eligibility; Weedmaps’ Role

Weedmaps provides a feature (the “WM Store Feature”) for licensed operators of cannabis brick-and-mortar storefront locations or cannabis delivery services (collectively, “Retailers”) and licensed cannabis cultivators, processors, manufacturers or other brands (collectively, “Brands”, and together with Retailers, “WM Store Website Operators”) whereby a WM Store Website Operator can (1) create a new website white-labeled with such WM Store Website Operator’s branding (a “White Label Site”), and/or (2) embed an iframe into such WM Store Website Operator’s existing website (together with any White Label Site, a “WM Store Site”), and, in each case of (1) and (2) utilize WM Store functionality to offer embedded Retailer locator functionality, embedded product locator functionality, embedded menu functionality, embedded order functionality (such order functionality, the “WM Store Orders Feature”), and other functionality that may be made available from time to time. When a WM Store Site is controlled by a Brand, it is referred to herein as a “Brand-Owned Site”, and when a WM Store Site is controlled by a Retailer, it is referred to herein as a “Retailer-Owned Site.”

Retailers may use the WM Store Feature to enable Users (as defined below) to find information on Products (as defined below), and Brands may use the WM Store Feature to enable Users to find information on the Brand’s Product availability and identify Retailers that carry such Brand’s Products.

WM Store Website Operators may use the WM Store Orders Feature to enable (i) consumers, patients, or caregivers (“Users”) to place orders for cannabis products, cannabis-related products or other products (“Products”) for delivery (“Delivery”) by Retailers to the User’s location or for on-premises pickup (“Pickup”) by Users, (ii) Retailers to manage WM Store Orders and delivery logistics via a back-end software dashboard, (iii) Retailers to track their delivery drivers in the course of Delivery, (iv) Retailers to retain Users who have previously ordered from them via their Retailer-Owned Site via promotional features and strategies (for the avoidance of doubt, these features are not available for Retailers to use with respect to Orders placed via a Brand-Owned Site), and allow (v) Brands to retain Users who have previously ordered such Brand’s Products from a Retailer via their Brand-Owned Site via promotional features and strategies (for the avoidance of doubt, these features are not available for Brands to use with respect to Orders placed via a Retailer-Owned Site). A “WM Store Order” is defined as a User ordering Products for Delivery or Pickup, as applicable, using the WM Store Orders Feature.

Weedmaps also provides a separate feature (the “WM Orders Feature”) for Retailers whereby (i) Retailers can enable Users to place orders for Products via weedmaps.com or the Weedmaps’ official iOS or Android applications (collectively, “WDC Orders”, and together with WM Store Orders, “WM-Powered Orders”), (ii) Retailers can manage WDC Orders and delivery logistics via a back-end software dashboard, and (iii) Retailers can track their delivery drivers in the course of Delivery. For the avoidance of doubt, the use of the WM Orders Feature is subject to the WM Orders Supplemental Terms available at https://weedmaps.com/legal/orders-terms (the “WM Orders Supplemental Terms”) and any Personal Information (as defined below) collected in connection with WDC Orders shall be subject to the WM Orders Supplemental Terms and not these WM Store Supplemental Terms.

By using the WM Store Feature, you represent that (i) you are a WM Store Website Operator that is licensed by all applicable federal, provincial, state and local licensing authorit(y/ies), (ii) if you implement the WM Store Orders Feature, that you desire to sell Products, or enable sale of your Products by Retailers, to Users by way of Delivery by you (or the applicable Retailer) or Pickup by User using the WM Store Orders Feature, in each case solely to the extent permitted by your license(s), and (iii) you will comply with the Code of Conduct attached hereto as Addendum 2 (the “Code of Conduct”). If you are requesting access to the WM Store Orders Feature, a Weedmaps representative will reach out to you to obtain the details of your applicable License(s) (see Section 4(g) of the Commercial Terms).

For the avoidance of doubt, Weedmaps is solely a software service provider and not a cannabis licensee, and Weedmaps disclaims any obligation to obtain any cannabis license. Weedmaps does not sell, transport, distribute, dispense, or deliver Products. Weedmaps is not a party to any contract for sale of Products between Users and Retailers, including the contract for sale for Products requested via the WM Store Orders Feature and WM Orders Feature, and Weedmaps is not otherwise involved in the fulfillment of orders for sale of such Products (other than by providing access to Weedmaps’ proprietary technology for use in connection with WM-Powered Orders) or processing of payments for sale of such Products. To the extent any fees or amounts are charged by Weedmaps with respect to the WM Store Orders Feature or WM Orders Feature, such fees and/or amounts are solely with respect to the provision of technology services and the associated fees, expenses, hosting charges and labor associated with providing such technology services.

Conditions of Access to the WM Store Feature

Subject to your compliance with the terms and conditions of the WM Store Applicable Terms, Weedmaps hereby grants you a non-exclusive, non-transferable, revocable, limited right to access the WM Store Feature, solely for your internal use in connection with WM Store Orders placed with you (or, if you are a Brand, placed with a Retailer carrying your Brand’s Products) and to manage Off Platform Orders as authorized by Weedmaps, and solely in the jurisdiction(s) and to the extent permitted under the terms of your License(s).

Termination

Weedmaps may modify, suspend or terminate access to, or discontinue the availability of, the WM Store Feature at any time, including without limitation upon any breach by you of the WM Store Applicable Terms.

If you delete your account or we terminate your access to the WM Store Feature, these WM Store Supplemental Terms shall terminate as an agreement between you and us, but the following provisions of these WM Store Supplemental Terms will remain in place: Termination, Dispute Resolution; Arbitration; Class Waiver, Personal Information, and the Data Processing Addendum.

Upon termination of our agreement for services or termination of your access to the WM Store Feature (I) Weedmaps may deactivate your account(s), (II) Weedmaps may permanently delete your data, (III) you shall be responsible for payment of any applicable fees relating to WM Store Orders placed with you through the termination date, and (IV) you will (a) deliver to Weedmaps all Weedmaps Data (other than WM Store User Personal Information collected via your Retailer-Owned Site if you are a Retailer or Brand-Owned Site if you are a Brand, and not, for the avoidance of doubt, any information collected via a Brand-Owned Site if you are a Retailer fulfilling Orders placed via such site) in your possession or reasonable control, and (b) permanently delete in a manner that makes it non-readable and non-retrievable (i.e., pursuant to NIST 800-88, DoD 5220-22-M) all copies of Weedmaps Data (other than WM Store User Personal Information collected via your Retailer-Owned Site if you are a Retailer or Brand-Owned Site if you are a Brand, and not, for the avoidance of doubt, any information collected via a Brand-Owned Site if you are a Retailer fulfilling Orders placed via such site) in your possession or reasonable control, except, in each case of (a) and (b), to the extent you are required to retain such information under any Applicable Law or otherwise are permitted to retain any transaction-related information in connection with potential consumer or regulatory disputes or complaints or as evidence of compliance with age verification requirements in accordance with Applicable Law. For the avoidance of doubt, Applicable Law includes, without limitation, the CCPA and Canadian Privacy Laws to the extent they apply to Weedmaps, you, and/or any Subprocessor (as defined in Addendum 1). “Canadian Privacy Laws” means the Personal Information Protection and Electronic Documents Act (Canadian Federal), Personal Information Protection Act (British Columbia), Personal Information Protection Act (Alberta), Act Respecting the Protection of Personal Information in the Private Sector (Quebec), and such other laws, regulations and government guidelines regulating the collect, use, disclosure, safeguarding and other processing of Personal Information on Canadians, as each of the foregoing may be amended and replaced from time to time.

Dispute Resolution; Arbitration; Class Action Waiver

For the avoidance of doubt, the dispute resolution and arbitration provisions of the Commercial Terms apply to these WM Store Supplemental Terms. BY SUBMITTING AN APPLICATION TO USE THE WM STORE FEATURE OR BY USING THE WM STORE FEATURE, YOU (I) AGREE TO MANDATORY INDIVIDUAL ARBITRATION REGARDING DISPUTES, (II) WAIVE ANY RIGHT TO TRIAL BY JURY, AND (III) WAIVE ANY RIGHT TO PARTICIPATE AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS ACTION LAWSUIT, CLASS-WIDE ARBITRATION, COLLECTIVE ACTION, PRIVATE ATTORNEY GENERAL ACTION, OR ANY OTHER REPRESENTATIVE PROCEEDING AS TO ALL DISPUTES, IN EACH CASE TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW. The right to seek and obtain emergency injunctive relief under the Commercial Terms includes injunctive relief for any threatened or continued breach of the obligations under the Data Processing Addendum related to Weedmaps Data (as defined therein).

Personal Information

Definitions:

Affiliate” means any entity directly or indirectly controlling, controlled by, or under common control with, Weedmaps, or where Weedmaps owns at least 50% or more of the equity interest or voting stock, or equivalent, in such entity.

Business Personal Data” means any Personal Information provided by you in connection with Off Platform Orders, any WM Store Website Operator Employee Data you provide to Weedmaps or otherwise enter using the WM Store Orders Feature, and any personal data of your principals to the extent required in connection with the contractual relationship between you and Weedmaps.

CCPA” means the California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et seq., and its implementing regulations.

Personal Information” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, including without limitation by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Off Platform Order” means an order of Products placed by a User from you (or, if you are a Brand, from a Retailer selling your Products) directly, without using the WM Store Orders Feature or the WM Orders Feature.

WM Store Website Operator Employee Data” means Personal Information of a Retailer’s Personnel (as defined in the Commercial Terms) that will be involved in accepting or fulfilling WM-Powered Orders for Delivery, or any other Personal Information of a WM Store Website Operator’s Personnel to the extent you must share it with us in connection with the WM Store Feature.

Subprocessors” means third parties authorized under the WM Store Applicable Terms to access and Process Weedmaps Data (as defined in the Data Processing Addendum).

WM Store Privacy Policy” means the custom privacy policy linked to from the WM Store Site when a User places a WM Store Order with you (or, if you are a Brand, from a Retailer selling your Products) using the WM Store Feature.

WM Store Terms of Use” means the custom terms of use linked to from the WM Store Site when a User places a WM Store Order with you (or, if you are a Brand, from a Retailer selling your Products) using the WM Store Feature.

WM Store User Personal Information” means Personal Information provided by Users who place WM Store Orders with you (e.g., name, address, email address, telephone number) (or, if you are a Brand, from a Retailer selling your Products).

In connection with the WM Store Feature, Weedmaps and you may share two types of Personal Information with each other: WM Store User Personal Information and Business Personal Data (which includes WM Store Website Operator Employee Data and Personal Information in connection with Off Platform Orders). You hereby agree that you will not provide any Personal Information to Weedmaps other than the contact information (name, email, phone number and physical address) collected in connection with Off Platform Orders, the WM Store Website Operator Employee Data, and any personal data of your principals to the extent required in connection with the contractual relationship between you and Weedmaps. In the event we share WM Store User Personal Information with you, or you share permitted Business Personal Data with Weedmaps, the below chart summarizes our respective obligations (as set forth in more detail in the Data Processing Addendum):

(1) Type of Personal Information (2) Rights To Use Personal Information (3) How WM Store Website Operators Can Share Personal Information (4) Required Disclosures and Consent Mechanics Regarding Use of Personal Information (5) How WM Store Website Operators Must Protect Personal Information
WM Store User Personal Information May be used by (1) both Weedmaps and Retailers to fulfill such User’s WM Store Orders placed with such Retailer, whether via a Brand-Owned Site or Retailer-Owned Site, and (2) by Weedmaps and Retailers (for Retailer-Owned Sites) or Brands (for Brand-Owned Sites), as applicable, for our respective commercial purposes solely to the extent disclosed to and authorized by such User at the point of collection (see more detail in Column 4 of this table) For the avoidance of doubt, WM Store User Personal Information may not be “sold” (as defined under the CCPA and other Applicable Law) by you under any circumstances. You may not share with a third party, distribute to a third party or otherwise provide a third party with access to WM Store User Personal Information (except (i) sharing with/access by distribution to your service providers (it being understood that any such service provider with which WM Store User Personal Information is provided will be a Subprocessor under the Data Processing Addendum) to the extent disclosed to and authorized by such User at point of collection or (ii) pursuant to separate consent you collect from such User). Weedmaps Consent: Weedmaps will ask Users to agree to your WM Store Terms of Use and your WM Store Privacy Policy when submitting a WM Store Order via your Brand-Owned Site or Retailer-Owned Site, as applicable. Your WM Store Terms of Use and WM Store Privacy Policy will link to Weedmaps’ privacy policy located at https://weedmaps.com/legal/privacy to disclose Weedmaps’ privacy practices, and Weedmaps’ terms of use located at https://weedmaps.com/legal/terms to disclose Weedmaps’ terms of service, respectively.

Retailer Consent: For Retailer-Owned Sites, at the point of collection, Weedmaps will ask each User to consent to your use of their WM Store User Personal Information for your marketing purposes. You are required to make available your privacy policy upon User request, and you must comply with your privacy policy and your terms of use. You must consult your legal counsel to confirm the consent Weedmaps collects at point of collection is sufficient for your use of the applicable WM Store User Personal Information. For example, we may not collect permission for you to use phone numbers for text message marketing, and you must seek separate consent prior to using a User’s phone number for such purpose. For the avoidance of doubt, Retailers may not use WM Store User Personal Information collected via Brand-Owned Sites for marketing purposes, except to the extent such Retailer collects separate consent from such User.

Brand Consent: For Brand-Owned Sites, at the point of collection, Weedmaps will ask each User to consent to your use of their WM Store User Personal Information for your marketing purposes. You are required to make available your privacy policy upon User request, and you must comply with your privacy policy and your terms of use. You must consult your legal counsel to confirm the consent Weedmaps collects at point of collection is sufficient for your use of the applicable WM Store User Personal Information. For example, we do not collect permission for you to use phone numbers for text message marketing, and you must seek separate consent prior to using a User’s phone number for such purpose.
Protection: You must ensure your collection, storage, use, transfer, disclosure or security practices with respect to WM Store User Personal Information is consistent with applicable data privacy laws and best practices (including as detailed in the Data Processing Addendum).
Business Personal Data Proprietary to you You hereby grant Weedmaps a worldwide, non-exclusive, sublicensable license to use Business Personal Data (I) in connection with providing the WM Store Feature, (II) in connection with creating data sets or any other derivative works for the use of Weedmaps or any of its Affiliates or partners, and (III) in connection with Weedmaps’ promotional or advertising efforts. Consult your legal counsel. Consent: You are solely responsible for obtaining all consents required under Applicable Law required to enable Weedmaps to collect, store, use, transfer, disclose or secure such Business Personal Data as contemplated by the WM Store Applicable Terms, and you hereby represent and warrant that you have and shall obtain all such consents. Protection: You covenant to take no less than the degree of care with respect to Business Personal Data than the degree of care Weedmaps and you are obligated to take with respect to WM Store User Personal Information under the Data Processing Addendum.

Addendum 1 - DATA PROCESSING ADDENDUM

By using the WM Store Orders Feature, you agree as follows:

  1. Privacy and Security of Weedmaps Data. You covenant and agree to comply with your obligations under Applicable Law relating to any Weedmaps Data you Process in connection with the WM Store Feature. Without prejudice to the foregoing, you will not Process Weedmaps Data in a manner that will, or is likely to, result in Weedmaps breaching its obligations under Applicable Law. You further covenant and agree to implement and maintain all appropriate technical, administrative, physical, and organizational measures (including, at a minimum, the data privacy, protection, and security requirements detailed in this Data Processing Addendum and the requirements and obligations set forth in EXHIBIT A, Data Security Requirements, attached hereto) sufficient to (i) ensure a level of confidentiality and security appropriate to the risks represented by the processing and the nature of Weedmaps Data; and (ii) prevent unauthorized or unlawful processing of Weedmaps Data, and accidental loss, disclosure or destruction of, or damage to, Weedmaps Data. “Process” means any operation or set of operations performed upon Personal Information or sets of Personal Information, whether or not by automated means, such as collection, recording, organization, structuring, storage, safeguarding, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, accessing, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. “Weedmaps Data” means data and information (a) that is disclosed to you or to which you have access in connection with the WM Store Feature; and (b) that is processed, prepared, accessed, used, aggregated, or generated in connection with the WM Store Feature, including WM Store User Personal Information, regardless of whether any such data or information is commingled or aggregated with other data or information.
  2. Processing of Weedmaps Data. You will only Process Weedmaps Data in accordance with the WM Store Applicable Terms.
  3. Processing of Personal Information. You will only collect, use, retain or disclose Weedmaps Personal Data in accordance with the terms of the WM Store Applicable Terms. You agree to make publicly available and adhere to a privacy policy describing your privacy practices with respect to Personal Information. You will not Process, sell, or otherwise make Weedmaps Personal Data available for your own commercial purposes; provided, that you may Process WM Store User Personal Information solely to the extent disclosed to and authorized by the User at the point of collection. “Weedmaps Personal Data” means any and all Personal Information collected or controlled by Weedmaps or an Affiliate of Weedmaps and Processed by you in connection with use of the WM Store Feature, including WM Store User Personal Information.
    1. Applicable Law Compliance. You warrant and certify that you understand the WM Store Applicable Terms’ and Applicable Law’s regulations, restrictions and prohibitions on Processing and selling of Personal Information and Processing Weedmaps Personal Data other than as specifically permitted by the WM Store Applicable Terms, and that you will comply with such restrictions and prohibitions. You also warrant that you have no reason to believe any Applicable Law requirements or restrictions prevent you from performing under the WM Store Applicable Terms. You must promptly notify Weedmaps of any changes to Applicable Law’s requirements that may adversely affect your performance under the WM Store Applicable Terms.
    2. Subprocessing. You may use Subprocessors in connection with Weedmaps Data you gain access to in connection with the WM Store Feature only if (i) each such Subprocessor qualifies as a service provider under Applicable Law; (ii) each such Subprocessor agrees to comply with the terms set forth herein as applicable to you to the extent Subprocessor processes Weedmaps Personal Data; and (iii) you do not make any disclosures to the Subprocessor that Applicable Law would treat as a sale or disclosure.
  4. Commingling or Aggregation of WM Store User Personal Information. Where reasonably feasible, you agree not to commingle or aggregate Weedmaps Data with other data that is not Weedmaps Data without Weedmaps’ prior written consent. You and Weedmaps agree that it is not reasonably feasible to segregate WM Store User Personal Information from other data or information that is not WM Store User Personal Information, and you and Weedmaps each acknowledge that the obligations with respect to WM Store User Personal Information under the WM Store Applicable Terms will still apply even though such data will be commingled with other data or information.
  5. Hashed or Encrypted Weedmaps Data. If you Process or otherwise have access to Weedmaps Data in hashed, encrypted or otherwise obfuscated format, you will: (i) not attempt to reverse engineer or otherwise try to re-identify the hashed or obfuscated Weedmaps Data unless Weedmaps instructs you to do so; and (ii) only share such Weedmaps Data with your Subprocessors in the format you received it from Weedmaps.
  6. Data Inquiry Handling. You will, unless prohibited by the Applicable Law, inform Weedmaps promptly, and in any event within forty-eight (48) hours, of any inquiry, legal process, or complaint received from a Consumer or supervisory, judicial, legal or government authority relating to Weedmaps Data (“Data Inquiry”) and will not respond to such communication unless required by Applicable Law or expressly authorized by Weedmaps; provided, that with respect to Data Inquiries from a Consumer concerning such Consumer’s WM Store User Personal Information, in addition to informing Weedmaps of such Data Inquiry, you must respond to such communication promptly in accordance with your obligations under Applicable Law. If Weedmaps is unable to or does not receive a protective order or other remedy for any such Data Inquiry, you may disclose only that portion of Weedmaps Data that you are legally required to disclose and will use reasonable efforts to ensure the disclosed data is handled in accordance with the WM Store Applicable Terms and accorded confidential treatment. “Consumer” means either “consumer” as defined in the CCPA or a data subject as defined by Applicable Law.
  7. Data Inquiry Cooperation. You will, at no additional cost to Weedmaps, provide reasonable cooperation and assistance to Weedmaps as Weedmaps may reasonably require to allow Weedmaps to respond to, object to, or challenge any Data Inquiry and to comply with its obligations under Applicable Law, including in relation to data security, data breach notification, data protection impact assessments, prior consultation with supervisory authorities, the fulfillment of Consumers’ rights, and any inquiry, notice or investigation by a supervisory authority.
  8. Personal Information Breach.
    1. Notification. In accordance with Applicable Law, you will notify Weedmaps without undue delay and, where feasible, no more than 24 hours after becoming aware of a Data Breach. You will also provide Weedmaps with a description of the Data Breach, the type of data that was the subject of the Data Breach, and (to the extent known to you) the categories of Consumers affected, as soon as such information can be collected or otherwise becomes available, and you will cooperate with any reasonable request made by Weedmaps relating to the Data Breach. “Data Breach” means the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Weedmaps Data on systems used, managed or controlled by you or your subcontractors (including Subprocessors).
    2. Investigation. You agree to immediately take action to investigate the Data Breach, to identify, prevent, and mitigate the effects of any such Data Breach, and with Weedmaps’s prior agreement, to carry out any recovery or other action necessary to remedy the Data Breach. You shall cooperate in good faith with Weedmaps in Weedmaps’ handling of any Data Breach, including without limitation any investigation, reporting, the timing and manner of any notifications to any individuals, regulators or other third parties (“Notifications”), and other obligations required by Applicable Law, or as otherwise required by Weedmaps to respond to and mitigate any damages caused by the Data Breach. You agree to indemnify and hold Weedmaps harmless for any costs, expenses, claims and losses incurred in connection with a Data Breach including, without limitation, the cost of reconstructing data and data forensics (including any security audits or reviews of your systems reasonably requested by Weedmaps), the cost of Notifications and providing credit monitoring and identity theft protection and restoration services to affected parties, and any counsel fees incurred by Weedmaps related to such Data Breach.
    3. Communication. You may not issue, publish, or make available to any third party any press release or other communication concerning a Data Breach without Weedmaps’ prior approval.
    4. Further Cooperation. You must provide to Weedmaps timely and ongoing updates on a Data Breach, and shall provide to Weedmaps all information as requested by Weedmaps on the Data Breach, including as reasonably necessary to undertake or respond to internal or external investigation and provide and respond to notification to individuals, government authorities and third parties, until such time as your assistance is not reasonably required as determined by Weedmaps. You must ensure that all terms with Subprocessors are compliant with these WM Store Applicable Terms, impose obligations on such Subprocessors to ensure Subprocessors will respond and report directly to Weedmaps in the event of a Data Breach, support you in responding and reporting to Weedmaps, and impose such other obligations on Subprocessor that allow you to respond and report to Weedmaps in a manner contemplated by the WM Store Applicable Terms.
  9. Audit. You shall provide Weedmaps (or its representatives) with access to the records, facilities and premises of your business for the purposes of auditing, inspecting, examining and otherwise verifying your compliance with its obligations under this Addendum, and in the event that any such audit, inspection or examination reveals that you are non-compliant with your obligations under the foregoing provisions, to promptly bring yourself into compliance and pay the reasonable costs associated with the audit, inspection or examination.

EXHIBIT A TO ADDENDUM 1 - DATA SECURITY REQUIREMENTS

  • ⁣1. Minimum Security Requirements. The appropriate technical, administrative, physical, and organizational measures required under Section 1 of the Data Processing Addendum include:
  • 1.1.    Implementation of and compliance with a written information security program consistent with Applicable Law and software industry standards including administrative, technical, and physical safeguards appropriate to the nature of the Weedmaps Data that are designed to protect such information from: unauthorized access or Processing and any anticipated threats or hazards to the security or integrity of such information.
  • 1.2.    Adopting and implementing reasonable policies and standards, at all times in accordance with Applicable Law, related to security and privacy.
  • 1.3.    Assigning responsibility for information security management in accordance with Applicable Law.
  • 1.4.    Devoting adequate personnel resources to information security.
  • 1.5.    Carrying out verification checks on employees or contractors who will have access to the Weedmaps Data.
  • 1.6.    Conducting appropriate background checks and requiring employees, vendors, and others with access to the Weedmaps Data to enter into written confidentiality agreements.
  • 1.7.    Conducting training to make employees and others with access to the Weedmaps Data aware of information security risks, your obligations under the WM Store Applicable Terms, and to enhance compliance with your policies and standards related to data protection.
  • 1.8.    Preventing unauthorized access to the Weedmaps Data through the use, as appropriate and no less than as required by Applicable Law, of physical and logical (passwords) entry controls, secure areas for data processing, procedures for monitoring the use of data processing facilities, built-in system audit trails, use of secure passwords, network intrusion detection technology, encryption and authentication technology, secure log-on procedures, and virus protection, monitoring compliance with your policies and standards related to data protection on an ongoing basis. In particular, you have implemented and comply with, as appropriate and without limitation:
  • 1.8.1.    Physical access control measures to prevent unauthorized access to data processing systems (e.g., access ID cards, card readers, desk officers, alarm systems, motion detectors, burglar alarms, video surveillance, and exterior security);
  • 1.8.2.    Denial-of-use control measures to prevent unauthorized use of data protection systems (e.g., automatically enforced password complexity and change requirements and firewalls);
  • 1.8.3.    Requirements-driven authorization scheme and access rights, and monitoring and logging of system access to ensure that persons entitled to use a data processing system have access only to the data to which they have a right of access, and that the Weedmaps Data cannot be read, copied, modified, or removed without authorization;
  • 1.8.4.    Data transmission control measures to ensure that the Weedmaps Data cannot be read, copied, modified, or removed without authorization during electronic transmission, transport, or storage on data media, and transfer and receipt of records. In particular, your information security program will be designed:
  • 1.8.4.1.        To encrypt in storage any data sets in your possession, including sensitive personal data; and
  • 1.8.4.2.        To ensure that any sensitive personal data transmitted electronically (other than by facsimile) to a person outside your information technology system or transmitted over a public network is encrypted to protect the security of the transmission;
  • 1.8.5.    Data entry control measures to ensure you can check and establish whether and by whom the Weedmaps Data has been input into data processing systems, modified, or removed; and
  • 1.8.6.    Subprocessor supervision measures to ensure that, if you are permitted to use Subprocessors, the Weedmaps Data is processed strictly in accordance with Weedmaps’s instructions including, as appropriate:
  • 1.8.6.1.        Measures to ensure that the Weedmaps Data is protected from accidental destruction or loss including, as appropriate and without limitation, data backup, retention and secure destruction policies; secure offsite storage of data sufficient for disaster recovery; uninterrupted power supply, and disaster recovery programs; and
  • 1.8.6.2.        Measures to ensure that data collected for different purposes can be processed separately including, as appropriate, physical or adequate logical separation of Weedmaps Data.
  • 1.8.6.3.        Measures to maintain an up-to-date list of: (i) all Subprocessors involved in processing Weedmaps Data; (ii) the purposes for which the Subprocessors process Weedmaps Data; and (iii) the location of each Subprocessor.
  • 1.8.7.    At least once per month, performing internal system, endpoint systems, and application vulnerability assessments and external web (and other, if applicable) application and infrastructure vulnerability assessments on all facilities, information systems (including mobile computing devices, servers, networking equipment, storage media, and host software systems) storing, processing or transmitting Weedmaps Data and remediate any identified vulnerabilities promptly.
  • 1.8.8.    Taking such other steps as may be appropriate under the circumstances.

Addendum 2 - CODE OF CONDUCT

  1. You agree that you will (a) maintain valid and active Licenses and provide updated License information to Weedmaps as needed; (b) if you are using the WM Store Orders Feature, to the extent required by Applicable Law, review any account documentation and originals thereof intended to facilitate verification of such User’s eligibility to purchase Products (any such documentation, the “User Documentation”); (c) not defame, harass, abuse, threaten or defraud Users, or collect, or attempt to collect, Personal Information about Users or third parties without their consent; (d) not solicit or encourage any User to cease to use or reduce use of Weedmaps’s services or products, or to otherwise negatively modify such User’s relationship with Weedmaps; and (e) determine whether any sales, goods and services, use, consumption, excise or any other taxes, levies or duties (“Taxes”) apply to any WM Store Order placed with you or applicable fees, including any such Taxes associated with User’s purchase and receipt of Products (“Order Taxes”) and any such Taxes associated with any applicable fees payable to Weedmaps, other than Taxes on Weedmaps’ income (“WM Service Taxes”), and collect, report, and remit the correct Order Taxes and WM Service Taxes to the appropriate tax authority.
  2. You agree that you will use commercially reasonable efforts to (a) ensure all Products listed using the WM Store Feature or sold by you through the WM Store Orders Feature (i) comply with all Applicable Law, including with respect to Product labeling requirements and prohibited health claims, and (ii) are authentic and the actual Products and brand that they purport to be and not be counterfeits; (b) provide to Weedmaps accurate tax rates and calculations applicable to Products you list using the WM Store Feature and, use any functionality provided by Weedmaps to display such information using the WM Store Feature; (c) display to Users accurate levels for Products that you list using the WM Store Feature and sell Products at the price advertised using the WM Store Orders Feature; (d) receive and process WM Store Orders placed with you and Deliver and prepare Products for Pickup in a timely manner, and use functionality provided by Weedmaps to keep Users apprised on a real-time basis of the status of each such WM Store Order (including completion); and (e) not transmit any “back door,” “time bomb,” “Trojan Horse,” “worm,” “drop dead device,” “virus,” “spyware,” or “malware;” or any computer code or software routine, which permits unauthorized access to, disables, damages, erases, disrupts, or impairs the normal operation of, or use of the Site (as defined in the Commercial Terms) or the WM Store Feature, or any component thereof.
  3. On ten (10) days’ notice, during the term of your use of the WM Store Orders Feature and within one year after the termination of your use of the WM Store Orders Feature, Weedmaps may audit your files to confirm your compliance with your obligations under the WM Store Applicable Terms, in each case without unreasonable disruption to your business operations. Weedmaps may conduct any audit under this Clause 3 at any time during regular business hours and no more frequently than semi-annually. Such audit will be at Weedmaps’ cost, unless it reveals a material noncompliance by you, in which case you will reimburse the costs of such audit.