1. Introduction
This Privacy Policy describes how Rustik 471 LLC collects, uses, and protects your personal information in our New York dispensary and on our website. We are committed to protecting your privacy and complying with all applicable New York State laws and regulations concerning cannabis, as well as federal laws such as HIPAA where applicable.
2. Information we collect
We collect various types of information from our customers, including both “Personal Information” and “Non-Personal Information.”
Personal Information
- In-store:
- Identification data: Name, address, date of birth, and government-issued ID number to verify age and identity in accordance with New York regulations.
- Medical cannabis information (if applicable): Patient registration details and purchase history related to your medical condition, which is treated as Protected Health Information (PHI) under HIPAA.
- Transaction data: Purchase history, payment information, and transaction details.
- Online/Website:
- Contact information: Name, email address, phone number, and mailing address for orders and communication.
- Account information: Username and password if you create an online account.
- Device data: IP address, browser type, and operating system collected via standard web analytics tools.
Non-Personal Information
- Usage data: Information on how our services are accessed and used.
- Cookies and tracking data: Details gathered via cookies and similar technologies to improve your website experience.
3. How we use your information
We use your information for the following purposes:
- To process and fulfill your orders and transactions.
- To verify your age and identity to ensure compliance with New York law.
- To maintain records required by the New York Office of Cannabis Management (OCM), including the BioTrack seed-to-sale tracking system.
- To provide customer support and respond to your inquiries.
- To improve our services, website, and product offerings.
- To communicate with you about promotions, new products, and services, only with your explicit consent.
4. How we share your information
We do not sell your personal information. We may share your information in the following circumstances:
- Regulatory compliance: We must share information with the New York OCM and other government authorities as required by law, particularly through the mandatory seed-to-sale tracking system.
- With your consent: We will share your information with third parties only when we have your explicit permission to do so, such as for marketing purposes.
- Service providers: We may share data with trusted third-party service providers who assist us with payment processing, website hosting, and delivery services. These providers are bound by confidentiality agreements.
- Legal requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.
5. Data retention and security
- We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. This includes complying with the OCM’s record retention rules, which can be up to five years for certain records.
- We implement robust security measures to protect your information, both in-store and online, from unauthorized access, loss, or misuse. However, please be aware that no method of transmission over the internet or electronic storage is 100% secure.
6. Your rights and choices
- Consent: You have the right to withdraw your consent to our collection and use of your personal information at any time, subject to legal or contractual restrictions.
- Access and correction: You may have the right to request access to and correction of the personal information we hold about you.
- Marketing communications: You can opt out of marketing communications at any time by following the unsubscribe link in our emails or contacting us directly.
7. Children’s privacy
Our services are not directed to anyone under the age of 21. We do not knowingly collect personal information from individuals under 21. If you believe we have collected information from someone under 21, please contact us immediately.
8. Changes to this privacy policy
We reserve the right to update this policy at any time. We will notify you of any changes by posting the new Privacy Policy on this page. Your continued use of our services after any modification constitutes your acknowledgment of the changes.