Canadian Cannabis Dispensary Privacy Policy

1. Introduction

Chronic Cannabis Co. ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or make purchases from our dispensary.

This policy applies to all customers, including both recreational and medical cannabis patients. For medical patients, additional protections under HIPAA and state medical privacy laws may apply.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Contact Information: Name, email address, phone number, mailing address
• Identification Information: Government-issued ID details for age verification
• Medical Information: Medical cannabis card details, physician recommendations (for medical patients only)
• Purchase History: Products purchased, transaction amounts, payment methods
• Account Information: Username, password, account preferences

2.2 Automatically Collected Information

We automatically collect certain information when you visit our website:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, click-through rates, search queries
• Location Data: General location based on IP address (not precise GPS)
• Cookies and Tracking: Information collected through cookies and similar technologies

3. How We Use Your Information

3.1 Primary Purposes

• Age Verification: To ensure compliance with legal age requirements (21+ for recreational, 18+ for medical)
• Transaction Processing: To process purchases, handle payments, and fulfill orders
• Customer Service: To respond to inquiries, provide product recommendations, and offer support
• Legal Compliance: To comply with state and federal cannabis regulations
• Account Management: To create and manage customer accounts

3.2 Secondary Purposes

• Personalization: To customize your experience and provide relevant product recommendations
• Marketing: To send promotional offers and educational content (with your consent)
• Website Improvement: To analyze usage patterns and improve our services
• Security: To detect and prevent fraud, unauthorized access, and other security threats

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Information

We do not sell, rent, or lease your personal information to third parties for marketing purposes. Your trust and privacy are paramount to our business.

4.2 Permitted Disclosures

We may share your information only in the following limited circumstances:

• Service Providers: With trusted third-party service providers who help us operate our business (payment processors, delivery services, IT providers)
• Legal Requirements: When required by law, court order, or government regulation
• Business Protection: To protect our rights, property, or safety, or that of our customers
• Medical Compliance: With healthcare providers or regulatory bodies as required for medical cannabis programs

4.3 Medical Information Protections

For medical cannabis patients, your medical information receives additional protections under HIPAA and state medical privacy laws. This information is only shared with your healthcare providers, regulatory authorities, or as required by law.

5. Data Security

5.1 Security Measures

We implement comprehensive security measures to protect your information:

• Encryption: All data transmission and storage uses industry-standard encryption
• Access Controls: Strict access controls and employee training on data protection
• Regular Audits: Regular security audits and vulnerability assessments
• Secure Facilities: Physical security measures for paper records and medical information

5.2 Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy, or as required by law. Purchase records and identification information are typically retained for 7 years as required by cannabis regulations.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used for targeted advertising (with your consent)

6.2 Managing Cookies

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality. We respect Do Not Track signals and similar privacy mechanisms.

7. Your Rights and Choices

7.1 Access and Correction

You have the right to:

• Access your personal information we hold
• Request corrections to inaccurate information
• Request deletion of your information (subject to legal requirements)
• Opt out of marketing communications

7.2 Data Portability

You can request a copy of your data in a portable format. For medical patients, this includes your medical records as required by HIPAA.

7.3 Marketing Opt-Out

You can unsubscribe from marketing emails at any time using the unsubscribe link in our emails or by contacting us directly.

8. Children's Privacy

Our services are not intended for individuals under the legal age for cannabis consumption in their jurisdiction (21 for recreational, 18 for medical). We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will take steps to delete such information immediately.

9. Third-Party Links and Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. International Data Transfers

Our services are primarily intended for residents of [State]. If you are accessing our services from outside [State], please be aware that your information may be transferred to, processed, and stored in [State] or other jurisdictions where our service providers are located.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

13. State-Specific Rights

Depending on your state of residence, you may have additional privacy rights under state law, including the right to know what personal information we collect about you, the right to delete your personal information, and protection against discrimination for exercising your privacy rights.