Privacy policy

Through waxhouse420.com, Wax House 420 provides information about cannabis clubs and a pre-request form for anyone who wants to contact one of them.

We don't sell memberships or guarantee admission to any club. A request sent through the website is only a pre-request: each club decides on admission, which is completed in person under its own rules (ID check, minimum age, signing the membership terms, etc.).

For safety and under the rules that apply to associations, we don't publish the clubs' exact addresses. The map shows an approximate area; the information to continue the process is sent by email once we receive your pre-request.

Wax House 420 · email: [email protected]

Only what you give us in the access pre-request form:

• first and last name;
• email and, if you add it, WhatsApp;
• country of residence;
• chosen club, planned visit date and number of visitors;
• any notes you add;
• technical data of the submission: page language, source page, date and time.

We don't ask for health or consumption data, and we ask you not to include it in the notes.

• recording and handling your pre-request;
• emailing you the information needed to continue the process with the chosen club;
• passing the pre-request to the club you chose, when needed;
• answering your questions;
• complying with applicable legal obligations.

Sending a pre-request is not buying a membership, hiring a service or being accepted as a member.

Your consent, given by ticking the box in the form (art. 6.1.a GDPR), and taking the preliminary steps you ask for (art. 6.1.b GDPR). You can withdraw consent at any time by writing to us; this doesn't affect processing carried out before.

We don't sell or hand over your data for commercial purposes. Only these have access:

• the club you choose, to handle your pre-request;
• our technical providers, as processors bound by confidentiality: web hosting (Raiola Networks, in Spain), Cloudflare (security and attack protection) and Google (the spreadsheet and email we use to manage requests);
• authorities, when required by law.

Cloudflare and Google may process data outside the European Economic Area; they do so with GDPR safeguards (European Commission standard contractual clauses or the EU-US Data Privacy Framework).

Once you register in person at a club, the data the club collects from then on is that association's responsibility and is governed by its own privacy policy.

As long as needed to handle your pre-request and related communications. Afterwards, only for the periods required by law; then it is deleted or anonymised. You can ask for deletion earlier at any time.

We apply technical and organisational measures to protect your data: encrypted connection (HTTPS) across the site, Cloudflare protection against bots and attacks, filters against automated submissions, and access limited to those who need it for the purposes above.

We don't use advertising or analytics cookies.

• Necessary: Cloudflare may use technical cookies to tell real visitors from bots and protect the site.
• Functionality: we store in your browser (local storage) that you confirmed the minimum age and your chosen language, so we don't ask again on every visit.

If we use analytics cookies in the future, they won't be enabled until you consent.

Club photos are for information only. We try to make sure they don't reveal the clubs' exact location.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to:

• [email protected] — subject: "PRIVACY POLICY"

If we have reasonable doubts about your identity, we may ask for the minimum information needed to confirm it. If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Data a club collects directly after you register in person is handled with that club.

Write to [email protected] with the subject "CANCEL REQUEST". If you have already registered in person as a club member, cancel your membership directly with that club under its rules: Wax House 420 can't do it on the club's behalf.

This site and its forms are for adults only (18 or 21, depending on the club). We don't knowingly process data from minors.

The site links to third-party sites, such as the clubs' official websites. We don't control their content or privacy policies, which are governed by their own owners.

We may update this policy to reflect changes to the site or the law. The date of the latest version is shown below.