Privacy Policy

We collect only the information necessary to operate the directory:

• Account & identity data — name, business email, and authentication metadata.
• Firm profile data — firm name, location, specialties, licensure, and public-facing biography content submitted by the listing owner.
• Billing details — subscription status, billing cycle, and last-four card digits returned to us by our payment processor. We do not store or transmit raw payment card data on our servers.
• Usage data — pages visited, search filters used, and basic device telemetry used to improve the platform.

Collected data is used exclusively for:

• Matching operators with relevant directory listings.
• Verifying listing eligibility (licensure, conflicts, engagement history).
• Maintaining account security and preventing fraud.
• Improving site reliability, UX, and search relevance.

We use first-party cookies and equivalent local-storage tokens strictly for authentication, session persistence, and remembering user preferences. We do not use third-party advertising trackers. You may disable cookies in your browser, but authenticated features will not function without them.

We do not sell user data. Limited data is shared only with infrastructure subprocessors strictly necessary to operate the Platform:

• Payment processor — receives a tokenized reference to your payment method. Raw card numbers, CVV, and expiry are captured directly by the processor’s hosted fields and never traverse our origin.
• Cloud hosting & database — encrypted-at-rest storage of account and listing data.
• Email delivery — used to send transactional notifications (e.g., billing receipts, account alerts).

We do not store or transmit raw payment card data on our servers.

Residents of California and the European Economic Area have the right to: (a) request access to the personal data we hold about them; (b) request correction or deletion; (c) request data portability; (d) opt out of any sale of personal information (we do not sell personal information); and (e) lodge a complaint with their local data-protection authority. To exercise these rights, email hempholdingshub@gmail.com. We will respond within 30 days.

Account and listing data is retained for the life of your account and for 24 months after cancellation for tax, audit, and dispute-resolution purposes, after which it is permanently deleted or anonymized.

Questions about this policy may be sent to hempholdingshub@gmail.com or mailed to HempHoldingsHub, Sacramento, California, USA.