Privacy Policy
1UP Health & Wellness
Last updated: 4 December 2025
Introduction
At 1UP Health & Wellness ("we," "our," or "us"), we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, including our compliance with South Africa's Protection of Personal Information Act (POPIA) and Google's privacy requirements.
By using our website and services, you consent to the data practices described in this Privacy Policy.
Information We Collect
Personal Information
- Name, email address, and phone number
- South African ID number (for age verification)
- Delivery address and location information
- Payment information (processed securely by third-party providers)
- Medical cannabis prescription details (where applicable)
Google Maps Data
We use Google Maps API to provide address autocomplete and location services. When you use these features:
- We collect address information you type or select from Google's suggestions
- We store your delivery address for order fulfillment
- We calculate distances between your location and our stores
- We do not store or access your precise location coordinates
- We do not track your movements or location history
Usage Information
- Website usage patterns and preferences
- Device information and browser type
- IP address and general location (city/region)
- Cookies and similar tracking technologies
- Order history and purchase preferences
How We Use Your Information
Service Delivery
- Process and fulfill your orders
- Verify your age and identity
- Provide customer support
- Calculate delivery fees and times
- Send order confirmations and updates
Business Operations
- Improve our website and services
- Analyze usage patterns
- Prevent fraud and ensure security
- Comply with legal requirements
- Send marketing communications (with consent)
Google Data Usage and Storage
Our use of Google Maps API is limited to providing address autocomplete and location-based services. We comply with Google's Limited Use Requirements and your data is handled as follows:
Google Maps Data Handling:
- Access: We access Google Maps API to provide address suggestions and geocoding
- Use: Address data is used solely for order delivery and location services
- Storage: We store your selected delivery address in our secure database
- Sharing: Address data is shared only with delivery partners for order fulfillment
- Retention: Address data is retained for order history and legal compliance
We do not use Google user data for advertising purposes or share it with third parties except as necessary for service delivery and legal compliance.
Data Sharing and Disclosure
We may share your personal information in the following circumstances:
Service Providers
Payment processors, delivery partners, and technology providers
Legal Requirements
When required by law or to protect our rights and safety
Business Transfers
In connection with mergers, acquisitions, or asset sales
Consent
When you have given explicit consent for specific purposes
POPIA Compliance
Lawful Basis for Processing
Under POPIA, we process your personal information based on the following lawful grounds:
- Consent: When you provide explicit consent for specific processing activities
- Contract: To perform our contract with you for cannabis delivery services
- Legal Obligation: To comply with cannabis regulations and age verification requirements
- Legitimate Interest: To improve our services and prevent fraud
Your Rights Under POPIA
Data Security
We implement appropriate technical and organizational measures to protect your personal information:
Technical Measures
- SSL encryption for data transmission
- Secure database storage
- Regular security updates
- Access controls and authentication
Organizational Measures
- Staff training on data protection
- Data processing agreements
- Incident response procedures
- Regular security audits
Data Retention
We retain your personal information for the following periods:
Cookies and Tracking
We use cookies and similar technologies to enhance your experience:
Essential Cookies
Required for website functionality and security
Analytics Cookies
Help us understand website usage and improve performance
Preference Cookies
Remember your settings and preferences
International Data Transfers
Some of our service providers may be located outside South Africa. When we transfer your personal information internationally, we ensure adequate protection through:
- Standard Contractual Clauses approved by the Information Regulator
- Adequacy decisions for countries with equivalent data protection
- Your explicit consent for specific transfers
- Certification schemes and codes of conduct
Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Note: Medical cannabis services require age verification and may require additional parental consent for individuals between 18-21 years old in certain circumstances.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.
Contact Information
Information Officer
1UP Health & Wellness
Address:
40 Hennie Alberts
Alberton, Johannesburg
1448, South Africa
Data Protection Queries
For questions about this Privacy Policy, your personal information, or to exercise your rights under POPIA, please contact our Information Officer using the details above.
Complaints
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Regulator of South Africa:
Information Regulator of South Africa
Website: https://www.justice.gov.za/inforeg/
Email: [email protected]
Phone: +27 (0) 12 406 4818
This Privacy Policy is effective as of 4 December 2025 and complies with South Africa's Protection of Personal Information Act (POPIA) and Google's privacy requirements.