Happy Valley Genetics

Privacy Policy

Happy Valley Genetics Rewards Mobile Application

Effective: June 1, 2026

This section supplements the Happy Valley Genetics Privacy Policy above and describes how HVV Genetics, LLC ("we", "our", "us") collects, uses, and shares personal information through the Happy Valley Genetics Rewards mobile and web application (the "Rewards App"). Where this section and the Privacy Policy address the same topic, this section controls for data collected through the Rewards App.

The Rewards App is restricted to users 21 years of age or older.

1. What the Rewards App Collects

1.1 Account information

When you create a Rewards App account, we collect:

  • Email address. Provided by you. We store it in a normalised form so we can match it reliably, and we email you a verification link that you must use before the account can be signed in to.
  • Display name. Optional, provided by you.
  • Account password. Stored only as a one-way scrypt hash. We never see or store your plaintext password.
  • Account timestamps. When the account was created, when you verified your email address, and when you last signed in.

Accounts are email and password only. We do not offer sign-in through Google, Apple, or any other third-party identity provider, and we do not receive any information about you from one.

1.2 Loyalty program data

While you use the Rewards App, we maintain on your behalf:

  • Your current points balance
  • An append-only history of every change to that balance — a starting balance carried over from the retired Happy Valley Genetics Rewards mobile app, points earned on eligible RKS orders, staff corrections, and redemptions — each recorded with the number of points, the date, and a short note
  • Per-redemption records (point cost, discount value, the discount code issued, status, date)
  • For points earned on a purchase, a reference to the RKS order that earned them — the order number, the order's internal RKS identifier, and the date it was placed. We do not store what the order contained or what it cost.

To award points for purchases, we retrieve a limited record of eligible orders from redkeyseeds.com ("RKS") once a day — the checkout email address, the order number and internal identifier, the order status, the date it was placed, and the amount eligible to earn points — and match it to your account by email address. An order earns points only if its email matches a Rewards account whose email address has been verified, and only if the order was placed after that account was created. There is no tier or membership level, and we do not store a running total of what you have spent.

1.3 What the Rewards App does NOT collect

For transparency, the Rewards App does not collect:

  • Phone number
  • Date of birth
  • Physical address (any shipping/billing address you provide at RKS checkout is governed by RKS’s own data handling)
  • Medical marijuana card details
  • Location data (no GPS, no IP-based geolocation tracking)
  • Device identifiers used for advertising or cross-app tracking
  • Behavioral analytics or in-app interaction telemetry
  • Browsing history

The Rewards App does not embed any advertising networks, third-party analytics platforms, or behavioral tracking tools.

2. How We Use the Data

We use the information described in Section 1 to:

  • Authenticate you and provide access to your account
  • Calculate, award, and adjust your points balance
  • Award points for eligible purchases on RKS
  • Issue and validate redemption discount codes
  • Provide customer support
  • Detect and prevent abuse (e.g., attempts to claim another person’s points balance)
  • Comply with legal obligations (tax records, lawful requests)

We do not use Rewards App data for advertising, marketing personalization, or sale to third parties.

3. Who Processes Your Data

We use the following third-party service providers ("processors") to operate the Rewards App. These processors act on our behalf under contractual confidentiality and data-protection obligations.

Provider

Role

What they receive

Microsoft Corporation — Azure App Service and Azure Database for PostgreSQL

Application hosting, database hosting, and operational logs (US, Central US region)

All account, points, and redemption records described in Section 1

Microsoft Corporation — Microsoft Graph

Transactional email delivery

Your email address and the contents of the account emails we send you (email verification, password reset, redemption confirmation)

RedKeySeeds.com (operated by HVV Genetics, LLC)

Source of eligible-order data; discount-code issuance

Your email address and the value of the discount, sent only when you redeem points, so that the code can be issued to you. No other Rewards App data is sent to RKS. Section 4 describes what we receive from RKS in return.

Microsoft services are operated under Microsoft’s Data Protection Addendum. Rewards App data is stored in United States data centers.

4. Sharing Between the Rewards App and RedKeySeeds

The Rewards App and RedKeySeeds.com are both operated by HVV Genetics, LLC. The two systems exchange data as follows:

  • From the Rewards App into RKS: When you redeem points, we send your email address and the value of the discount to RKS so that a single-use discount code can be issued to you there. We do not send your password, your points balance, or your redemption history.
  • From RKS into the Rewards App: Once a day we retrieve a limited record of the orders that are eligible to earn points — the checkout email address, the order number and internal identifier, the order status, the date it was placed, and the amount eligible to earn. We use it to award points and to match the order to your account. We do not receive what you ordered, your shipping or billing address, or your payment details.

Because both systems are operated by the same legal entity, this exchange is for legitimate business purposes (operating the loyalty program) and does not constitute a "sale" or "share" of personal information under the California Consumer Privacy Act.

5. Retention

Data category

Retention

Account information (email, display name)

While your account is active. Deleted, or replaced with a non-identifying placeholder, within 30 days of an erasure request.

Points records

While your account is active. After an erasure request, retained in pseudonymised form — with no name or email address attached — for accounting purposes. Points earned on a purchase keep the reference to the RKS order that earned them.

Redemption history

While your account is active. After an erasure request, retained in pseudonymised form — with no name or email address attached — so that any discount code already issued to you can be reconciled.

Issued coupons inside RKS WooCommerce

Governed by RKS’s coupon retention policy; coupons remain valid per their stated terms

Operational logs (Azure)

Retained by the Azure platform for a short operational window for security and troubleshooting, then automatically discarded

Backups

Purged within 90 days of an erasure request

When we action an erasure request (see Section 6.1), we delete or scrub your account record immediately. Backups are purged on the schedule above.

We may retain a minimal record of issued coupons for tax, accounting, and anti-abuse purposes for as long as required by law.

6. Your Rights

6.1 All users

You may:

  • Access your account information at any time by signing in at happyvalleygenetics.com/account.
  • Request permanent deletion of your account by emailing support@happyvalleygenetics.com from the email address on your account. We action erasure requests within 30 days. Erasure is irreversible: your points balance is forfeited and cannot be restored, so use any discount code already issued to you before you ask us to delete the account.
  • Sign out at any time without deleting your account.
  • Contact us at support@happyvalleygenetics.com to request corrections, exports, or to ask privacy-related questions.

6.2 European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights:

  • Access — request a copy of the personal data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion by emailing support@happyvalleygenetics.com from the email address on your account. Once we have confirmed the request comes from the account holder, we delete or de-identify your account record within 30 days. Where we must keep a record for accounting purposes, we retain it only in the pseudonymised form described in Section 5.
  • Restriction — ask us to limit how we process your data
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interest
  • Lodge a complaint with your local data protection authority

Our legal basis for processing is performance of a contract (operating the loyalty program), legitimate interest (fraud prevention, security), and consent where applicable.

The data controller is HVV Genetics, LLC. We do not currently have an EU representative. Contact support@happyvalleygenetics.com to assert your rights.

6.3 California (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, and share
  • Delete your personal information
  • Correct inaccurate personal information
  • Limit the use of sensitive personal information. (We do not collect sensitive personal information through the Rewards App as defined by CPRA.)
  • Opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by CCPA/CPRA. The Rewards App does not engage in cross-context behavioral advertising.
  • Non-discrimination — we will not discriminate against you for exercising any of these rights.

Exercise these rights by emailing support@happyvalleygenetics.com. We may need to verify your identity before fulfilling certain requests. You may authorize an agent to make a request on your behalf; we will require written authorization.

6.4 Other US states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other US states with comprehensive privacy laws have rights similar to those above. Contact support@happyvalleygenetics.com to exercise them.

7. Children’s Privacy

The Rewards App is restricted to users 21 years of age or older. We do not knowingly collect personal information from anyone under 21. If you believe a user under 21 has provided us with personal information, contact support@happyvalleygenetics.com and we will delete it.

8. Security

We use industry-standard security controls including:

  • TLS encryption for data in transit
  • AES-256 encryption for data at rest (Azure platform default)
  • A minimum password length for account passwords
  • Server-side enforcement of all points calculations and redemption operations (your browser cannot modify these directly)
  • Access controls that restrict each customer’s data to their own authenticated session

No system can be guaranteed 100% secure. If we become aware of a breach affecting your data, we will notify you as required by applicable law.

9. Changes to This Section

We may update this section from time to time. The current version will always be posted at happyvalleygenetics.com/privacy-policy with an updated "Effective" date.

10. Contact

For privacy-related questions or to exercise your rights: Email: support@happyvalleygenetics.com or Mail: HVV Genetics, LLC, 38 Blackburn Center, Gloucester, MA 01930

Privacy Policy

This additional Privacy Policy (this “Privacy Policy”) is for HVV Genetics, LLC and its related companies (collectively, “Happy Valley”) applies to all visitors and users of our website accessible at www.happyvalleygenetics.com (the “Happy Valley Genetics Website”) and to Happy Valley Genetics customers using the Pheno Hunter app. Your privacy, trust and patronage is very important to us. This Privacy Policy is intended to demonstrate Happy Valley’s commitment to privacy so that visitors and users of the Happy Valley Website, and customers using the Happy Valley Genetics Pheno Hunter App, understand how data is collected and used by Happy Valley and their choices with respect to the collection and use of such data.

Happy Valley respects your privacy and information you provide to Happy Valley will only be used as described in this Privacy Policy or otherwise with your consent. Please read our Privacy Policy carefully.

By accessing or using the Happy Valley Genetics Website or the Happy Valley Genetics Pheno Hunter App, and providing user information through the Happy Valley Genetics Website or Happy Valley Genetics Pheno Hunter App, you agree to the terms of this Privacy Policy. If you do not agree with this Privacy Policy, please do not access, use, or authorize another on your behalf to use, the Happy Valley Website or Happy Valley Genetics Pheno Hunter App. Questions and concerns regarding our Privacy Policy should be directed to support at happyvalleygenetics dot com.

INFORMATION COLLECTION AND USE

1. Data Collected

Data collected from visitors and users of the Happy Valley Genetics Website and customers using Happy Valley Pheno Hunter App, by or on behalf of Happy Valley Genetics includes:

Log Data. Log Data is collected from your browser and may include information such as your computer’s Internet Protocol (“IP”) address, browser version, information about your use of the Happy Valley Genetics Website and Happy Valley Pheno Hunter App, pages of our site you visit, time and date of your visit, navigation paths, the time spent on such pages, details about the number of times you use our Website, other technology on the devices you use to access the Happy Valley Website and other statistics.

Cookies. Cookies are files with small amounts of data sent to your browser from the website you visit and are stored on your device hard drive. You can control the use of cookies through your browser settings. If you choose to disable cookies, you may not be able to access some portions of the Happy Valley Website.

Customer Data. Customer Data includes but may not be limited to data relating to the Happy Valley ordering process using the Happy Valley Website or data relating to the use of the Happy Valley Apps. Data collected may include your name, email address, phone number, contact details, purchase details, medical marijuana card details and product evaluations and product evaluations.

2. How Data is Used

Happy Valley Genetics uses data collected for the following purposes:
Log Data is used by Happy Valley Genetics to analyze the use of the Happy Valley Website by visitors, users and customers, and to operate, administer and protect the Happy Valley Genetics business, the Happy Valley Genetics Website and Happy Valley Genetics Pheno Hunter App.

Happy Valley uses Cookies to collect, store and track information to improve the products and services provided by Happy Valley including the Happy Valley Genetics Website.

Customer Data is used to process your Happy Valley Genetics orders, to provide records of purchases and manage each customer’s account. This information is not shared with third parties except as described below in Section 3–Non-Disclosure of Data, unless specifically stated otherwise or in special circumstances.

Happy Valley Genetics also uses data collected for Happy Valley Genetics promotions targeted for its customers.

3. Non Disclosure of Data

Happy Valley Genetics does not use or share data collected from visitors, users or customers using the Happy Valley Genetics Website or Happy Valley Rewards App, except as set forth in this Privacy Policy.

Happy Valley Genetics may employ third party providers and subcontractors to do to the following on behalf of Happy Valley:

  • Maintain, administer and secure the Happy Valley Genetics Website, Happy Valley Apps and data collected and stored;
  • Process on-line ordering by Happy Valley Genetics customers; and
  • Analyze and improve the Happy Valley Genetics Website, Happy Valley Apps and business offerings.

These third party providers and subcontractors may have access to data provided to Happy Valley by visitors, users and customers using the Happy Valley Website and Happy Valley Apps but Happy Valley uses diligent efforts to restrict use of this data by these third parties to the purpose of providing the specific services for which they have been contacted on behalf of Happy Valley.

Additionally, data provided to Happy Valley Genetics by visitors, users and customers using the Happy Valley Genetics Website and Happy Valley Genetics Apps may be shared among subsidiaries and affiliates of HVV Genetics, LLC.

Happy Valley Genetics does not use or share data provided to Happy Valley Genetics by visitors, users and customers using the Happy Valley Genetics Website and Happy Valley Genetics Apps in ways unrelated to the ones described above without providing the visitor, user or customer with the opportunity to opt out or reject such unrelated uses.

Notwithstanding the above described policies regarding the non-disclosure of data, Happy Valley Genetics expressly reserves the right to disclose data provided to Happy Valley Genetics by visitors, users and customers using the Happy Valley Website and Happy Valley Apps, for any reason if, in the sole discretion of Happy Valley Genetics, Happy Valley Genetics believes that it is reasonable to do so, including without limitation, upon the request of law enforcement (with or without a subpoena), to satisfy laws, such as the Electronic Communications Privacy Act and the Child Online Privacy Act, for the enforcement of contracts or user policies by Happy Valley or to otherwise protect Happy Valley as it may deem to be reasonably prudent or necessary.

How Data is Stored

Happy Valley Genetics values your patronage, your visits to the Happy ValleyGenetics Website and your use of the Happy Valley Pheno Hunter App. Happy Valley Genetics has taken, and has in place, organizational, technical and other security measures reasonably intended to protect data collected from visitors, users or customers using the Happy Valley Genetics Website or Happy Valley Genetics Pheno Hunter App. While no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, Happy Valley Genetics makes diligent efforts and uses commercial acceptable means to protect data collected.

Happy Valley Genetics strives to protect data collected from visitors, users or customers using the Happy Valley Genetics Website or Happy Valley Genetics Pheno Hunter App and we also encourage all such visitors, users and customers to take reasonable steps to keep their own data secure. Specifically, log in information and passwords should be protected and not disclosed to anyone else. Sensitive, personally identifiable information should not be posted, uploaded, provided, or stored using the Happy Valley Genetics Website or Happy Valley Pheno Hunter App. Happy Valley Genetics is not responsible for any use of data if you treat your sensitive, personally identifiable information in this manner, or for the use or distribution of any of such information or data stored if it is obtained through the use of your log in information or password by a third person.

Third Party Sites

The Happy Valley Genetics Website and Happy Valley Genetics Pheno Hunter App may contain links to other websites. If you click on a third party link, you will be directed to that site. Note that these external sites are not operated by Happy Valley. Therefore, Happy Valley Genetics strongly advises you to review the privacy policies for sites accessible through these links. Happy Valley Genetics has no control over, and assumes no responsibility for the content, privacy policies or practices of any third party sites or services.

How to Correct or Delete Data

If data you have provided to Happy Valley Genetics changes, or if you no longer wish to use the Happy Valley Website or Happy Valley Genetics Apps, you may update, correct or request deletion of such information by emailing support at happyvalleygenetics dot com. Happy Valley Genetics will use reasonable efforts to delete your data from our systems to the extent possible.

Your Privacy Rights

For the purposes of applicable data protection law, including the EU General Data Protection Regulation (“GDPR”), the data controller of personal data collected through the Happy Valley Genetics Website is HVV Genetics, LLC, 38 Blackburn Center, Gloucester, MA 01930, reachable at support@happyvalleygenetics.com.

Depending on where you live, you may have some or all of the following rights with respect to your personal data: the right to access the personal data we hold about you; the right to have inaccurate personal data corrected; the right to request that your personal data be deleted; the right to receive a copy of your personal data in a portable format; the right to restrict or object to certain processing of your personal data; and the right to withdraw consent where processing is based on consent.

If you are a California resident, the California Consumer Privacy Act (“CCPA”) provides you with the right to know what personal information we collect, use, and disclose; the right to request deletion of your personal information; the right to opt out of the sale of personal information; and the right not to be discriminated against for exercising any of these rights. Happy Valley Genetics does not sell your personal information.

Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, Virginia, and other states may also have additional rights under their state’s privacy law. To exercise any right afforded to you under the law applicable to you, please contact us at support@happyvalleygenetics.com.

Modifications; Limitation of Liability

Happy Valley Genetics reserves the right to modify this Privacy Policy at any time. Happy Valley Genetics will provide you with notice of material changes to this Privacy Policy by posting a notice on the Happy Valley Genetics Website home page and/or Happy Valley App screen. All modifications to this Privacy Policy will be binding on visitors, users or customers using the Happy Valley Website or Happy Valley Genetics Apps immediately.

The Happy Valley Genetics Website and Happy Valley Genetics Pheno Hunter are not intended for use by persons under the age of 21. If it is discovered that a person under the age of 21 is accessing the Happy Valley Genetics Website or using a Happy Valley Genetics Pheno Hunter App, please contact us at the email address provided above so that Happy Valley may take necessary and appropriate action.

USE OF THE HAPPY VALLEY GENETICS WEBSITE AND HAPPY VALLEY PHENO HUNTER APP IS AT YOUR SOLE RISK AND HAPPY VALLEY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, IN CONNECTION WITH THE USE OF THE HAPPY VALLEY WEBSITE AND HAPPY VALLEY PHENO HUNTER APP. HAPPY VALLEY SHALL NOT BE RESPONSIBLE FOR ANY DAMAGES OF ANY NATURE WHATSOEVER RESULTING FROM THE USE OF THE HAPPY VALLEY GENETICS WEBSITE OR HAPPY VALLEY PHENO HUNTER APP.