Privacy Policy

Last Updated: [September 12, 2025]

This Privacy Policy explains how Next Door Cannabis (“Next Door Cannabis,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards your information when you visit nextdoorkc.com (the “Site”) or interact with our services, including online ordering, in‑store pickup or delivery, promotions, and loyalty programs. By using the Site, you agree to the practices described in this Policy.

Information We Collect

We collect information from or about you in connection with your use of the Site and our services.

- Device and usage information: browser type, IP address, time zone, device identifiers, cookie identifiers, pages viewed, referring/exit pages, on-site actions, and general location derived from IP.
- Order and account information: name, email address, phone number, billing and shipping addresses, items ordered, purchase history, and communication preferences.
- Payment information: payment method details processed by our payment partners. We do not store full payment card numbers.
- Age and identity verification: date of birth, government-issued ID data, and verification outcomes where required by law and to prevent fraud.
- Communications: messages, customer support inquiries, survey responses, and marketing preferences (email/SMS).
- Location data: approximate location from IP; if you grant permission, we may collect precise location for delivery or store finder features.
- In‑store and security data: CCTV footage and access logs for loss prevention and safety.
- Social and referral data: information you share via social media integrations or referral programs.
- Job applicant data: if you apply for a role, we collect application and résumé information.

We treat any medical or health information you choose to share with us as personal information under this Policy; it is not managed as protected health information under HIPAA.

How We Collect Information

- Directly from you when you create an account, place an order, verify your age/ID, contact support, or opt into marketing.
- Automatically via cookies, pixels, beacons, SDKs, and similar technologies when you browse the Site.
- From service providers and partners, such as analytics, advertising, payment, fulfillment/delivery, point‑of‑sale, age verification, and loyalty program providers.

Cookies and Tracking

We use cookies and similar technologies to operate the Site, remember your preferences, perform analytics, and deliver relevant advertising. You can manage cookies through your browser settings and, where available, through our on‑site privacy choices or cookie banner. Disabling cookies may affect site functionality.

How We Use Information

We use personal information to:

- Provide and improve the Site, products, and services.
- Process and fulfill orders, including payment, age/ID checks, pickup, and delivery.
- Communicate with you about orders, support requests, updates, and service notices.
- Personalize your experience and offers based on your interactions with us.
- Conduct analytics, measure performance, and improve our marketing.
- Send marketing communications (email/SMS) in line with your preferences and applicable law; you can opt out at any time.
- Detect, prevent, and investigate fraud, illegal activity, and security incidents.
- Comply with legal obligations and enforce our terms.
- Support corporate transactions (e.g., mergers, acquisitions, or asset transfers).

How We Share Information

We may share personal information with:

- Service providers and processors who perform services on our behalf (ecommerce/ordering, payment processing, delivery/courier, age/ID verification, analytics, advertising, POS, customer support, loyalty).
- Advertising and analytics partners to help us measure performance and provide relevant marketing.
- Affiliates and related entities for consistent service and operations.
- Business transferees in the event of a merger, acquisition, or asset sale.
- Law enforcement, regulators, and other parties as required by law or to protect our rights, safety, customers, or the public.
- With your direction or consent, including when you link accounts or use social features.

We do not disclose full payment card numbers; payments are handled by third‑party processors.

Targeted Advertising and Analytics

We may work with advertising and analytics partners that use cookies or similar technologies to understand how you use the Site and to provide more relevant ads. You can manage your preferences through our privacy choices tools (where available), your browser settings, platform ad settings, and device-level controls. You can also contact us to request that we limit certain types of targeted marketing.

“Do Not Sell or Share” (California)

We may “share” personal information for cross‑context behavioral advertising as defined by California law. You can opt out of “selling” or “sharing” personal information through the Site’s “Do Not Sell or Share My Personal Information” link (where available) or by contacting us. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Your Choices

- Account and order information: You can review and update certain information in your account or by contacting us.
- Marketing communications: You can unsubscribe from marketing emails using the unsubscribe link in the message or adjust SMS preferences using the instructions provided. Transactional and service messages may still be sent.
- Cookies and tracking: Manage cookies in your browser and via our on‑site privacy choices (where available).
- Location: Adjust your device or browser location settings to disable precise location collection.

Do Not Track

We do not currently respond to browser “Do Not Track” signals.

Data Retention

We retain personal information for as long as needed to provide services, comply with legal and tax requirements, resolve disputes, enforce agreements, and for legitimate business purposes. Retention periods vary by data type and legal obligations.

Security

We implement administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

U.S. State Privacy Rights

Depending on where you live (for example, California, Colorado, Connecticut, Utah, Virginia), you may have rights to:

- Know/access the categories and specific pieces of personal information we have collected.
- Correct inaccurate personal information.
- Delete personal information, subject to exceptions.
- Opt out of targeted advertising, sales, or certain profiling.
- Port your data to another service.
- Appeal a denial of your request (where applicable).

To exercise these rights, use the Site’s privacy choices tools (where available) or contact us. If we decline a request, you may appeal by replying to our decision with “Appeal” in the subject line. We will respond within the timeframe required by applicable law.

EU/UK Data Protection (GDPR)

If you are in the European Economic Area or the United Kingdom, Next Door Cannabis is the controller of your personal information. We process personal information on the following legal bases:

- Contract: to provide products/services you request, including order processing and support.
- Legitimate interests: to secure our services, prevent fraud, perform analytics, and improve our offerings.
- Consent: for certain marketing, cookies, and where required by law.
- Legal obligations: to comply with applicable regulations and recordkeeping.

Transfers: If we transfer personal information outside the EEA/UK, we use appropriate safeguards, such as standard contractual clauses or other lawful mechanisms. Your rights include access, rectification, erasure, restriction, portability, and objection, as well as the right to withdraw consent where processing is based on consent. You may lodge a complaint with your local supervisory authority.

Children and Age Restrictions

Our Site and services are intended for adults of legal age (21+ for recreational cannabis; 18+ for medical patients where permitted by law). We do not knowingly collect personal information from individuals under the legal age. If we learn we have collected such information, we will delete it and may take steps to terminate the account.

Changes to This Policy

We may update this Policy from time to time to reflect changes to our practices, technology, legal requirements, or for other operational reasons. The “Last updated” date at the top will indicate the most recent changes.

Contact Us

If you have questions, requests, or complaints about this Privacy Policy or our privacy practices, please contact us via the Contact Us page on the Site