Privacy Policy
CRUSH DISPENSARY
PRIVACY POLICY
Effective Date: May 1, 2026
www.crushdispensary.com
1. Introduction
Crush Dispensary ("Crush," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.crushdispensary.com (the "Site") or interact with us in connection with our licensed cannabis retail operations.
By using the Site or purchasing from us, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site or provide us with your personal information.
We operate in full compliance with applicable state and local cannabis laws and regulations. We do not sell, rent, or share your personal information with third parties except as described in this Policy.
2. Age Verification & Eligibility
Our products are strictly for adults aged 21 and older. By accessing our Site or placing an order, you represent and warrant that you are of legal age to purchase cannabis in your jurisdiction. We reserve the right to verify age at any time and to decline service to anyone who cannot confirm legal age eligibility.
Age verification information (including date of birth and government-issued ID details) may be collected and retained as required by applicable state cannabis regulations. This information is used solely for compliance purposes.
3. Information We Collect
3.1 Information You Provide Directly
• Full legal name and date of birth
• Government-issued ID information (for age and identity verification)
• Contact information: email address, phone number, and mailing address • Account credentials (username and password) if you create an account
• Purchase history and order information
• Medical cannabis patient registry number (if applicable)
• Payment information (processed securely through third-party payment processors; we do not store full card numbers)
• Communications you send us (e.g., support requests, feedback)
Page 1 of 5
Crush Dispensary | Privacy Policy www.crushdispensary.com
3.2 Information Collected Automatically
When you visit our Site, we and our service providers may automatically collect: • IP address and approximate geographic location
• Browser type and operating system
• Pages visited, time spent, and referring URLs
• Device identifiers and cookie data
• Click-stream and interaction data
3.3 Information from Third Parties
We may receive information about you from:
• Our point-of-sale platform (SWEED) for transaction and loyalty program records • State-mandated cannabis tracking systems (e.g., Metrc) as required by law • Analytics and marketing partners, subject to their own privacy policies
4. How We Use Your Information
We use the information we collect to:
• Verify your age and identity as required by cannabis regulations
• Process and fulfill your orders and manage your account
• Comply with state and local cannabis licensing and reporting requirements • Communicate with you about orders, promotions, and updates (with your consent) • Operate our loyalty and rewards program
• Improve our Site, services, and product offerings
• Prevent fraud, abuse, and unauthorized access
• Respond to law enforcement requests and legal obligations
• Send you marketing communications (you may opt out at any time)
5. How We Share Your Information
We do not sell your personal information. We may share your information in the following limited circumstances:
5.1 State & Regulatory Authorities
We are required by law to report certain transaction and customer data to state cannabis regulatory agencies and seed-to-sale tracking systems (such as Metrc). This data sharing is mandatory and non-negotiable under our operating license.
5.2 Service Providers
We work with trusted third-party vendors who assist us in operating our business, including: • SWEED (point-of-sale and e-commerce platform)
• Payment processors and banking partners
Page 2 of 5
Crush Dispensary | Privacy Policy www.crushdispensary.com
• Age and identity verification services
• Marketing, email, and SMS communication platforms
• Website hosting and analytics providers
These service providers are contractually obligated to use your data only to perform services on our behalf and to protect it in accordance with applicable law.
5.3 Legal Requirements
We may disclose your information if required to do so by law, court order, subpoena, or if we believe such disclosure is necessary to protect the safety of any person, to address fraud or security issues, or to protect our legal rights.
5.4 Business Transfers
If Crush Dispensary is acquired, merged, or undergoes a change of control, your information may be transferred as part of that transaction, subject to the same privacy protections described in this Policy.
6. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Site. Cookies are small data files placed on your device that help us:
• Remember your preferences and settings
• Maintain your session and shopping cart
• Understand how visitors use our Site
• Deliver relevant advertising (where permitted)
You can control cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of our Site. We do not currently respond to "Do Not Track" browser signals; however, we will update this Policy if our practices change.
7. Data Security
We implement industry-standard administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (SSL/TLS), access controls, and secure data storage practices.
While we take data security seriously, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you provide your information at your own risk. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.
Page 3 of 5
Crush Dispensary | Privacy Policy www.crushdispensary.com
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, to comply with our legal obligations (including mandatory cannabis record-keeping requirements), resolve disputes, and enforce our agreements. Specific retention periods may be required by state cannabis regulations and may extend for several years after your last transaction.
When your information is no longer needed, we will securely delete or anonymize it.
9. Your Rights & Choices
Depending on your state of residence, you may have certain rights regarding your personal information, including:
• Access: The right to request a copy of the personal information we hold about you • Correction: The right to request correction of inaccurate or incomplete information • Deletion: The right to request deletion of your information, subject to our legal obligations • Opt-Out: The right to opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly
• Portability: The right to receive a portable copy of your data in certain circumstances • Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise any of these rights, please contact us using the information provided in Section 12. Note that some information may be required by law and cannot be deleted upon request.
10. Third-Party Links
Our Site may contain links to third-party websites, including our social media pages and delivery or ordering partners. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Children's Privacy
Our Site and services are not directed to individuals under the age of 21 (or 18+ for medical patients where applicable). We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will take steps to delete it promptly. If you believe we have collected information from a minor, please contact us immediately.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Effective Date" at the top of this Policy and, where appropriate, notify you by email or through a prominent notice on our
Page 4 of 5
Crush Dispensary | Privacy Policy www.crushdispensary.com
Site. Your continued use of our Site after such changes constitutes your acceptance of the updated Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Crush Dispensary
Website: www.crushdispensary.com
Email: [privacy@crushdispensary.com]
Address: [45 Grove Avenue, Albany, NY 12208]
Phone: [518-545-6299]
We will respond to all privacy-related inquiries within 30 days.