Privacy Policy

Last updated: June 2026

1. Who is responsible for this website?

The controller responsible for the processing of personal data on this website is Waffles Global, reachable through the contact details provided on wafflesglobal.com.

For privacy requests, newsletter questions, correction requests, deletion requests or general data protection questions, contact us at info@wafflesglobal.com.

Newsletter administration is handled through newsletter@wafflesglobal.com. You may also use the general contact email above for any privacy-related request.

2. Scope of this policy

This policy applies to the public website wafflesglobal.com, including the Home, About, Newsletter and Privacy pages, the newsletter form, email links, cookie/privacy choices, self-hosted videos, image files and ordinary technical website delivery.

This policy does not apply to external websites or platforms that we link to, such as Instagram or future partner, retail, campaign or event pages. Those providers are responsible for their own privacy practices.

3. Personal data we may process

Depending on how you use the website, we may process the following categories of personal data:

• Technical access data: IP address, date and time of access, requested pages or files, browser type, operating system, referrer URL, transferred data volume and server response codes.
• Newsletter data: email address, optional name, signup date and consent information.
• Contact data: email address, name if provided, message content, attachments if sent, and the time of communication.
• Cookie or privacy choice data: your selected privacy banner preference, stored only so the banner does not need to appear again on every visit.
• Security and abuse-prevention data: limited technical information used to protect the website and newsletter form from spam, misuse, automated attacks and unauthorized access attempts.

4. Why we process personal data

We process personal data only for specific purposes:

• to provide, display and technically deliver the website;
• to load self-hosted images and videos smoothly on desktop and mobile devices;
• to operate the newsletter signup form and maintain a subscriber list;
• to send internal signup notifications and administer newsletter requests;
• to respond to emails and business inquiries;
• to remember cookie/privacy choices;
• to protect the website against spam, misuse, technical errors and attacks;
• to comply with legal obligations and preserve legitimate legal interests where necessary.

5. Legal bases for processing

Where the General Data Protection Regulation applies, we rely on the following legal bases:

• Consent: for newsletter signups and for any optional processing that legally requires consent.
• Legitimate interests: for secure website operation, technical delivery, fraud and spam prevention, contact handling, basic business communication and website improvement.
• Contract or pre-contractual steps: where you contact us about cooperation, partnerships, services, retail opportunities or other business matters.
• Legal obligations: where we must retain or disclose information because of applicable law, accounting duties, lawful requests or legal claims.

6. Newsletter

If you sign up for the newsletter, we use your email address and optional name to send Waffles Global updates. These may include brand news, visual content, product category updates, drops, collaborations, media releases, partnerships, retail concepts, events or similar announcements.

The newsletter is based on your consent. You can withdraw that consent at any time by contacting info@wafflesglobal.com or, where available, by using an unsubscribe option in a newsletter email. Withdrawal does not affect processing that took place before the withdrawal.

We do not sell newsletter email addresses to advertisers, data brokers or unrelated third parties.

7. Newsletter storage and notifications

Newsletter signups are stored in protected server-side storage. The data is used to maintain the subscriber list, document consent, handle deletion or unsubscribe requests and prevent duplicate or abusive submissions.

When a new signup is submitted, we may receive an internal notification at newsletter@wafflesglobal.com. This notification is used for newsletter administration and operational awareness only.

8. Email contact

If you contact us by email, we process the information contained in your message so we can answer your request. Depending on the content, this may include your name, email address, company, project details, partnership ideas, attachments or other information you choose to send.

Please do not send unnecessary sensitive personal data through email. If your inquiry requires special confidentiality, mention this clearly in your message.

9. Cookies and local browser storage

The website is designed to be lean and privacy-friendly. We do not use advertising cookies, behavioral retargeting cookies, hidden marketing pixels or external analytics tracking in the current setup.

The cookie/privacy banner may store a small preference in your browser to remember whether you selected OK, No or Only needed. This preference is used only to avoid showing the banner repeatedly. You can delete this preference at any time by clearing your browser data.

If future features such as analytics, embedded third-party media, shop tools or advertising tools are added, this policy and the cookie notice should be updated before those tools are activated.

10. Self-hosted videos and images

The website uses self-hosted videos and image files as central visual elements. These files are loaded directly from wafflesglobal.com and are not embedded from external video platforms in the current setup.

When media files are loaded, the hosting server may process ordinary technical access data, such as the requested file, time of request, IP address, browser information and response status. This is part of normal website delivery.

11. External links and Instagram

The website may link to Instagram and other external destinations. If you click an external link, you leave wafflesglobal.com. The external provider may then process your personal data according to its own privacy policy.

We do not control how external platforms process data after you leave our website.

12. Recipients and service providers

Personal data may be processed by technical service providers required to operate the website, such as hosting providers, email infrastructure providers, server administrators, security tools or maintenance providers.

These providers may process data only to the extent needed for their technical, contractual or legal tasks. We do not intentionally share newsletter lists with advertisers, data brokers or unrelated third parties.

13. International data transfers

Depending on hosting, email routing, service providers and your location, personal data may be processed outside your country or outside the European Economic Area. Where legally required, appropriate safeguards should be used, such as adequacy decisions, standard contractual clauses or equivalent contractual and technical protections.

14. How long we keep data

We keep personal data only as long as necessary for the purposes described in this policy:

• Newsletter data is kept until you unsubscribe, withdraw consent, request deletion, or the newsletter list is discontinued.
• Email communication may be kept for as long as needed to answer your request, manage follow-up communication, preserve business records or handle legal obligations.
• Technical access data and security-related information are kept only as long as needed for website operation, troubleshooting, abuse prevention or legal protection.
• Cookie/privacy choices remain in your browser until they expire or you delete them.

15. Security

We use practical technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. These measures include limited data collection, protected server-side storage, access restrictions, validation of form submissions, spam prevention and reduced use of external scripts.

No website or online storage system can be guaranteed absolutely secure. The goal of our security measures is to reduce risk, avoid unnecessary data exposure and protect newsletter and contact data appropriately for the type of website and processing involved.

16. Cannabis-related content and age relevance

Waffles Global is a cannabis lifestyle brand. The website and newsletter are not directed at children. Visitors should use the website only where it is lawful and age-appropriate in their jurisdiction.

The current newsletter form does not request age, identity documents or health information. The website content is brand, lifestyle and business communication and is not medical, legal or regulatory advice.

17. Your rights

Depending on applicable law, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability and objection to certain processing. Where processing is based on consent, you may withdraw consent at any time.

To exercise your rights, contact info@wafflesglobal.com. We may need enough information to identify the relevant record, for example the email address used for newsletter signup.

18. Right to complain

If you believe that your personal data is being processed unlawfully, you may have the right to lodge a complaint with a competent data protection supervisory authority. You may also contact us first so we can review and address your concern directly.

19. Changes to this Privacy Policy

We may update this Privacy Policy if the website, newsletter setup, service providers, legal requirements, business operations, cookie choices or data processing practices change. The current version is published on this page.

20. Contact summary

Privacy and general contact: info@wafflesglobal.com.

Newsletter administration: newsletter@wafflesglobal.com.