Confidentiality policy

---

At Canayuda, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or participate in our programs.

We may collect the following types of information:

• Name and contact details (email, phone number, address)
• Date of birth and identification information
• Emergency contact information
• Passport or ID details (for retreat participants)

• Medical history and current health conditions
• Current medications and treatments
• Allergies and dietary restrictions
• Mental health information relevant to program participation
• Treatment outcomes and progress notes

• IP address and browser type
• Device information
• Website usage data and analytics
• Cookies and similar tracking technologies

We use your information for the following purposes:

• To assess your eligibility for our programs
• To provide medical cannabis treatment and supportive care
• To communicate with you about your participation
• To comply with legal and regulatory requirements
• To improve our services and programs
• To ensure your safety and well-being during retreats
• For research purposes (with your consent and anonymized)

We may share your information with:

• Licensed medical professionals involved in your care
• Thai health authorities as required by law
• Emergency services in case of medical emergencies
• Service providers who assist in our operations (under strict confidentiality agreements)
• Legal authorities when required by law or court order

We will never sell your personal information to third parties.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of sensitive data in transit and at rest
• Secure servers and databases
• Limited access to personal information on a need-to-know basis
• Regular security assessments and updates
• Staff training on data protection and confidentiality

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes. Medical records are retained in accordance with Colombian healthcare regulations.

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion of your information (subject to legal requirements)
• Restrict or object to certain processing
• Receive a copy of your data in a portable format
• Withdraw consent where processing is based on consent