Notice at Collection

California Consumer Privacy Act (CCPA) Disclosure

Effective: January 1, 2026

California Compliant

This Notice at Collection is provided pursuant to the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). It describes the categories of personal information we collect about California residents and the purposes for which we use this information.

Categories of Personal Information Collected

We collect the following categories of personal information:

Identifiers

Examples: Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.

Purpose: To create and manage your account, process orders, communicate with you, and prevent fraud.

Customer Records

Examples: Name, address, telephone number, payment card information (for order processing).

Purpose: To process and fulfill orders, process payments, and provide customer support.

Protected Classifications

Examples: Age (21+ verification required for cannabis products).

Purpose: Legal compliance for age-restricted products.

Commercial Information

Examples: Records of products purchased, obtained, or considered, or other purchasing or consuming histories.

Purpose: Order fulfillment, personalized recommendations, and loyalty rewards.

Internet or Network Activity

Examples: Browsing history, search history, and information regarding your interaction with our website.

Purpose: Analytics, website optimization, and personalization.

Geolocation Data

Examples: Physical location or movements (approximate location from IP, precise location if permitted).

Purpose: Find nearby dispensaries, delivery services, and local deals.

Sensory Data

Examples: Profile photos, product photos in reviews.

Purpose: User-generated content for reviews and profiles.

Inferences

Examples: Preferences, characteristics, psychological trends, predispositions, behavior, attitudes based on personal information collected.

Purpose: Personalized recommendations and marketing.

Sensitive Personal Information

Examples: Account login credentials, precise geolocation (if enabled), medical card information (if voluntarily provided).

Purpose: Account security, delivery services, medical user verification.

Purposes for Collection

We collect and use personal information for the following business purposes:

  • Providing and improving our services
  • Processing and fulfilling orders
  • Account creation and management
  • Customer service and support
  • Security and fraud prevention
  • Marketing and advertising
  • Legal compliance
  • Research and analytics

Retention Period

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data type:

  • Account Information: Until account deletion, plus 30-day recovery period
  • Order/Transaction Data: 7 years for legal and tax compliance
  • Analytics Data: 26 months
  • Marketing Preferences: Until you opt out

Sale or Sharing of Personal Information

We may share personal information with third parties for advertising purposes, which may constitute a "sale" or "sharing" under CCPA. You have the right to opt out of this.

Opt Out: Do Not Sell or Share My Personal Information

Your Rights Under CCPA

As a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, and sell
  • Delete your personal information (with certain exceptions)
  • Correct inaccurate personal information
  • Opt-out of the sale or sharing of your personal information
  • Limit use of sensitive personal information
  • Non-discrimination for exercising your rights

How to Exercise Your Rights

You can exercise your CCPA rights by:

Contact Information

For questions about this notice or our privacy practices:

JointCommerce, Inc.

Attn: Privacy Team

Email: privacy@jointcommerce.com