Privacy Policy

Effective Date: 29.06.2026 Last Updated: 30.06.2026

This Privacy Policy describes how Greenworld SL ("we," "us," "our," "Prime Strains") collects, uses, discloses, and safeguards personal information when you visit or make a purchase from www.primestrains.com (the "Site"), and explains the choices and rights available to you.

By using the Site, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use the Site.

1. Who We Are

PrimeStrains is operated by:

Greenworld SL 59 Cami Dels Alguers Alfaz del Pi, Alicante, 03580 Spain

Email: info@primestrains.com

We sell cannabis seeds as souvenir/collector items. Nothing on the Site constitutes an invitation to germinate, cultivate, or grow cannabis where prohibited by local law. Customers are solely responsible for confirming the legal status of cannabis seeds in their jurisdiction before purchase.

2. Personal Information We Collect

2.1 Information You Provide Directly

• Order Information: name, billing and shipping address, email address, phone number, payment details (see Section 5 on payment processing).
• Account Information: username, password (hashed), order history, wishlist, saved addresses, marketing preferences.
• Communications: any information you provide when contacting customer support, leaving product reviews, or submitting inquiries.
• Age Verification: date of birth or age confirmation, where required by law in your jurisdiction.

2.2 Information Collected Automatically ("Device Information")

• IP address, browser type and version, device identifiers, operating system, time zone, and referring/exit pages.
• Pages and products viewed, search terms used on-Site, and clickstream/interaction data.
• Data collected via cookies, log files, web beacons, tags, and pixels (see Section 6, Cookies).

2.3 Information From Third Parties

• Fraud-prevention and risk-screening signals from payment processors.
• Analytics data from providers such as Google Analytics.
• Information from cryptocurrency payment gateways or bank transfer confirmations (transaction metadata, not full financial credentials).

Throughout this policy, "Personal Information" refers collectively to Order Information, Account Information, and Device Information.

3. How We Use Your Personal Information

We use Personal Information to:

1. Process, fulfill, and ship orders, including generating invoices and order confirmations.
2. Verify age and legal eligibility to purchase, where applicable.
3. Screen orders for fraud, payment risk, and abuse of promotional offers.
4. Communicate with you about your order, account, or inquiries.
5. Improve, secure, and optimize the Site, including diagnosing technical issues.
6. Analyze browsing and purchase behavior to improve product offerings and content (e.g., strain pages, growing guides).
7. Send marketing communications, where you have opted in, and provide targeted advertising consistent with your preferences.
8. Comply with legal obligations, tax reporting, customs/export documentation, and law enforcement requests.

We do not use Personal Information for automated decision-making that produces legal or similarly significant effects without human review.

4. Legal Bases for Processing (EEA/UK Residents)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

PurposeLegal BasisOrder fulfillmentPerformance of a contractFraud/risk screeningLegitimate interestSite analytics and improvementLegitimate interestMarketing communicationsConsent (opt-in)Legal/tax/customs complianceLegal obligation

You may withdraw consent for marketing at any time (see Section 9).

5. Payment Information

We accept multiple payment methods and handle each as follows:

• Card payments: processed by our third-party payment processor(s). We do not store full card numbers on our servers; processors are responsible for PCI-DSS compliant handling.
• Bank transfer: payments are reconciled against your order reference; banking details you provide are used solely for payment matching and are retained per our data retention schedule (Section 8).
• Cryptocurrency payments: transactions are processed via blockchain and/or a crypto payment gateway. Please note that blockchain transactions are, by their nature, recorded on a public distributed ledger outside our control; we only retain the wallet address and transaction ID needed to confirm payment.
• Cash by mail: where offered, we retain only the minimum information (order reference, tracking confirmation if applicable) necessary to match payment to order.

We never sell payment information to third parties.

6. Cookies and Tracking Technologies

6.1 What We Use

• Strictly necessary cookies — required for cart, checkout, and account login functionality.
• Analytics cookies — e.g., Google Analytics, to understand aggregate Site usage.
• Marketing/advertising cookies — used for retargeting and measuring ad performance, only where permitted by your consent choices.
• Preference cookies — remember currency, language, or display settings.

6.2 Your Choices

Where required by law (e.g., UK/EU visitors), we display a cookie consent banner allowing you to accept or reject non-essential cookies before they are set. You can also manage or disable cookies via your browser settings; disabling essential cookies may affect Site functionality such as checkout.

6.3 Do Not Track

Because there is no accepted industry standard for responding to browser "Do Not Track" signals, we currently do not alter our data collection practices upon detecting such a signal.

7. How We Share Your Personal Information

We share Personal Information only as necessary, with:

• Service providers: payment processors, shipping/logistics carriers, email/SMS marketing platforms, hosting providers, and analytics providers (e.g., Google Analytics), each bound by contractual confidentiality and data protection obligations.
• Legal and safety purposes: to comply with subpoenas, court orders, or other lawful requests; to enforce our Terms of Service; or to protect the rights, property, or safety of Prime Strains, our customers, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We do not sell Personal Information to third parties for their own independent marketing purposes, and we do not share Personal Information with advertisers in exchange for payment.

8. Data Retention

We retain:

• Order Information: for as long as necessary to fulfill legal, tax, accounting, and customs obligations (typically a minimum of [X years] per applicable law), or until you request deletion, whichever is longer where a legal retention obligation applies.
• Account Information: for as long as your account remains active, plus a reasonable period thereafter, or until deletion is requested.
• Device Information/analytics data: typically retained for [X months/years], in line with our analytics provider's default retention settings.

Where we are not legally required to retain information, we will delete or anonymize it upon your verified request.

9. Your Privacy Rights

9.1 European Economic Area / UK Residents

Under the GDPR/UK GDPR, you have the right to:

• Access the Personal Information we hold about you
• Request correction of inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to certain processing
• Request data portability
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with your local data protection authority

Your information may be transferred to and processed in countries outside the EEA/UK, including Spain (our base of operations) and potentially other countries where our service providers operate (e.g., the United States, Canada). Where such transfers occur, we rely on appropriate safeguards such as Standard Contractual Clauses.

9.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information is collected, used, shared, or sold
• Request deletion of personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information (we do not sell personal information)
• Limit use of sensitive personal information
• Non-discrimination for exercising your rights

9.3 Exercising Your Rights

To exercise any of these rights, contact us at info@primestrains.com. We may need to verify your identity before fulfilling a request. We will respond within the timeframe required by applicable law (typically 30 days under GDPR, 45 days under CCPA).

10. Age Restrictions

The Site is not intended for, and we do not knowingly collect Personal Information from, individuals under the age of 18 (or the legal age of majority in your jurisdiction, if higher). Where required, we implement age verification at checkout. If we become aware that we have inadvertently collected information from a minor, we will take steps to delete it promptly.

11. Data Security

We implement reasonable technical and organizational measures to protect Personal Information, including encrypted transmission (HTTPS/TLS), restricted internal access, and secure hosting. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. International Shipping and Customs

If you place an order for international shipping, your Order Information (name, address) may be shared with customs authorities and shipping carriers as required to process cross-border delivery, in compliance with applicable customs and import/export regulations. You are responsible for ensuring products may be lawfully imported into your destination country.

13. Third-Party Links

The Site may contain links to third-party websites (e.g., breeder brand pages, payment gateways). We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies independently.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other operational reasons. The "Last Updated" date at the top of this page indicates when changes were last made. Material changes will be highlighted on the Site or communicated via email where appropriate.

15. Contact Us

For questions, requests, or complaints regarding this Privacy Policy or our data practices, contact:

Greenworld SL 59 Cami Dels Alguers Alfaz del Pi, Alicante, 03580 Spain Email: info@primestrains.com