Privacy Policy
Your privacy is our priority - Learn how we protect your data
Last Updated: June 27, 2025 | Effective Date: June 27, 2025
Data Protection
Industry-standard encryption and security measures
No Data Selling
We never sell your personal information to third parties
Your Control
Manage your data preferences and privacy settings
Legal Compliance
Full compliance with privacy laws and regulations
1. Information We Collect
Personal Information:
- Account Information: Name, email address, phone number, date of birth
- Billing Information: Billing address, payment method details (encrypted)
- Shipping Information: Delivery addresses and preferences
- Age Verification: Government-issued ID documents and verification data
Automatically Collected Information:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, click patterns, search queries
- Location Data: General geographic location (state/city level for legal compliance)
- Cookies & Tracking: Session data, preferences, analytics information
Transaction Information:
- Order History: Products purchased, quantities, dates, shipping details
- Payment Data: Transaction IDs, payment method (card type/last 4 digits only)
- Loyalty Program: Points earned, rewards redeemed, tier status
- Customer Service: Support interactions, chat logs, feedback
Communication Data:
- Email Communications: Newsletter subscriptions, promotional preferences
- Text Messages: SMS opt-ins for order updates and notifications
- Customer Reviews: Product reviews and ratings you provide
- Social Media: Interactions with our social media content
2. How We Use Your Information
Service Provision:
- Process and fulfill your orders
- Verify your age and identity for legal compliance
- Provide customer support and resolve issues
- Manage your account and loyalty program benefits
Legal Compliance:
- Ensure compliance with cannabis laws and regulations
- Verify shipping eligibility to your location
- Maintain records required by law
- Respond to legal requests and law enforcement
Business Operations:
- Improve our website and user experience
- Analyze usage patterns and preferences
- Prevent fraud and enhance security
- Develop new products and services
Communications:
- Send order confirmations and shipping updates
- Notify you about account changes or security issues
- Provide promotional offers (with your consent)
- Share important policy or legal updates
Legal Basis: We process your data based on contract performance, legal obligations, legitimate business interests, and your consent where required.
3. How We Share Your Information
We Never Sell Your Data
Mr. Weedzy does not sell, rent, or trade your personal information to third parties for marketing purposes.
Service Providers:
- Payment Processors: Secure payment handling and fraud prevention
- Shipping Partners: Order fulfillment and delivery services
- Age Verification: Third-party ID verification services
- Cloud Services: Secure data storage and backup providers
Legal Requirements:
- Comply with court orders, subpoenas, or legal processes
- Respond to law enforcement requests
- Protect our rights, property, or safety
- Investigate fraud or security breaches
Business Transfers:
- In case of merger, acquisition, or sale of assets
- During business restructuring or bankruptcy
- With successor entities (with same privacy protections)
With Your Consent:
- When you explicitly authorize information sharing
- For promotional partnerships you opt into
- Social media integrations you approve
- Third-party services you connect to your account
4. Data Security & Protection
Technical Safeguards:
- Encryption: All data transmitted and stored using industry-standard encryption
- Secure Servers: Protected servers with firewalls and intrusion detection
- Access Controls: Limited access to personal data on need-to-know basis
- Regular Updates: Security patches and software updates maintained
Administrative Safeguards:
- Employee Training: Regular privacy and security training for all staff
- Background Checks: Screening for employees with data access
- Confidentiality Agreements: Legal obligations for data protection
- Incident Response: Procedures for handling security breaches
Physical Safeguards:
- Secure Facilities: Physical access controls to data centers
- Equipment Security: Locked servers and secure disposal
- Environmental Controls: Protection against natural disasters
- Monitoring: 24/7 surveillance of critical infrastructure
Ongoing Security:
- Regular security audits and penetration testing
- Vulnerability assessments and remediation
- Compliance with industry security standards
- Continuous monitoring for threats and breaches
Breach Notification: In the unlikely event of a data breach, we will notify affected users and authorities as required by law within 72 hours of discovery.
5. Cookies & Tracking Technologies
Types of Cookies:
| Cookie Type | Purpose | Duration | Control |
|---|---|---|---|
| Essential | Site functionality, security, authentication | Session | Required |
| Analytics | Usage statistics, performance monitoring | 1-2 years | Optional |
| Marketing | Personalized ads, campaign tracking | 6-12 months | Optional |
| Functional | Preferences, language, customization | 1 year | Optional |
Third-Party Tracking:
- Google Analytics: Website usage and performance analysis
- Payment Processors: Fraud detection and transaction security
- Social Media Pixels: Social media advertising and retargeting
- Customer Support: Chat and support system functionality
Managing Cookies:
- Use our cookie preference center to customize settings
- Configure your browser to block or delete cookies
- Opt out of targeted advertising through industry tools
- Note: Disabling essential cookies may affect site functionality
6. Your Privacy Rights & Choices
Data Access Rights:
- View Your Data: Request a copy of all personal information we have about you
- Data Portability: Receive your data in a machine-readable format
- Account Dashboard: View and manage your information through your account
- Order History: Access complete transaction and purchase records
Data Control Rights:
- Update Information: Correct or update your personal information
- Delete Data: Request deletion of your personal information (subject to legal requirements)
- Restrict Processing: Limit how we use your personal information
- Object to Processing: Opt out of certain data processing activities
Communication Preferences:
- Email Unsubscribe: Opt out of promotional emails (one-click unsubscribe)
- SMS Opt-out: Stop text message notifications by replying STOP
- Marketing Preferences: Customize what types of communications you receive
- Essential Communications: Legal and transactional emails cannot be disabled
State-Specific Rights:
California (CCPA/CPRA)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt out of sale (we don't sell data)
- Right to non-discrimination
Virginia (VCDPA)
- Right to access and portability
- Right to correct inaccurate data
- Right to delete personal data
- Right to opt out of targeted advertising
7. Age Verification & Compliance Data
Legal Requirement
Age verification is required by federal law for cannabis purchases. We must collect and retain this information for compliance purposes.
Information Collected:
- ID Documents: Scanned copies of government-issued photo ID
- Verification Data: Name, date of birth, address from ID verification
- Verification Status: Pass/fail status and verification timestamps
- Delivery Verification: Adult signature confirmation at delivery
Security Measures:
- ID documents encrypted and stored in secure, isolated systems
- Access limited to authorized compliance personnel only
- Regular security audits of verification systems
- Secure deletion procedures for expired verification data
Data Retention:
- Active Verification: Retained while account is active
- Legal Compliance: May be retained up to 7 years as required by law
- Account Closure: Verification data may be retained for legal purposes
- Audit Requirements: Available for regulatory inspection when required
Third-Party Verification:
- We use certified age verification service providers
- Verification partners bound by strict confidentiality agreements
- Data processed only for verification purposes
- No sharing of verification data beyond legal requirements
8. Third-Party Services & Integrations
Payment Processors:
- Stripe: Credit card processing and fraud prevention
- PayPal: Alternative payment method option
- Data Shared: Transaction amount, billing information (encrypted)
- Privacy Policy: Governed by their respective privacy policies
Shipping Partners:
- USPS, FedEx, UPS: Package delivery and tracking
- Data Shared: Name, shipping address, package details
- Tracking: Delivery confirmation and signature collection
- Retention: Shipping data retained per carrier policies
Analytics & Marketing:
- Google Analytics: Website usage and performance metrics
- Social Media Platforms: Advertising and retargeting pixels
- Email Services: Newsletter and promotional email delivery
- Customer Support: Live chat and support ticket systems
Cloud Services:
- AWS/Azure: Secure cloud hosting and data storage
- CDN Services: Fast content delivery and website performance
- Backup Services: Data backup and disaster recovery
- Security: All cloud services comply with SOC 2 and other security standards
Due Diligence: We carefully vet all third-party services and require them to maintain appropriate security and privacy safeguards for your data.
9. Data Retention & Deletion
Retention Periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | While account is active + 3 years | Customer service, legal compliance |
| Age Verification | 7 years after last purchase | Legal compliance, audit requirements |
| Transaction Records | 7 years | Tax, accounting, legal requirements |
| Website Analytics | 26 months | Business analysis, improvement |
| Marketing Data | Until consent withdrawn | Promotional communications |
| Support Interactions | 3 years | Quality assurance, training |
Deletion Procedures:
- Automated Deletion: Data automatically deleted when retention period expires
- Secure Deletion: Data overwritten multiple times to prevent recovery
- Backup Purging: Backups systematically purged according to schedule
- Third-Party Deletion: Requests sent to service providers to delete shared data
Legal Holds:
- Data may be retained longer if subject to legal proceedings
- Regulatory investigations may require extended retention
- Tax audits may necessitate maintaining financial records
- Users will be notified when legal holds prevent deletion
Account Deletion:
- Request account deletion through privacy contact
- Personal data deleted within 30 days (subject to legal requirements)
- Transaction records may be retained for legal compliance
- Age verification data retained as required by law
Privacy Questions or Concerns?
Our privacy team is here to help with any questions about your data protection and privacy rights.
Mailing Address
Privacy Officer
Mr. Weedzy LLC
1420 Cannabis Way
Denver, CO 80202
Policy Updates
We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of material changes via email or prominent notice on our website at least 30 days before they take effect.
Current Version: 1.0 | Effective Date: June 27, 2025 | Last Updated: June 27, 2025