Privacy policy

This is a cannabis store. We ask for your date of birth when you create an account and we check it before any order goes out. If you are under 21, do not use this site — we cannot sell to you and we will not keep an account for you.

When you make an account

Your name, email address, password and date of birth. We use the date of birth to confirm you are 21 or over, which the law requires us to do before we sell you anything.

When you order

Your delivery address, phone number and what you bought. The card number, expiry date and security code are entered into the payment processor's own form and never reach our servers; we receive only a token standing in for the card, plus the billing address you type alongside it. If you use the order-notes field to tell us about an allergy, we keep that note with the order so the person packing it can see it.

When you use the site

Your IP address, device and browser, the pages you look at and what you search for. Two of our analytics tools also record page interactions — clicks, scrolling and mouse movement — so we can see where the site is confusing.

• Taking payment, packing your order and getting it to you.
• Confirming your age, and confirming your phone number is yours.
• Answering you when you call, message or email.
• Store credit, referrals and any discount you have been given.
• Understanding how the site is used so we can fix what is broken.
• Marketing email, only if you asked for it.
• Keeping the records the law requires us to keep.

We do not sell your personal information. We do share it with the companies below, and the advertising and analytics tools among them may count as “sharing” or “selling” under some state privacy laws — which is why they are listed rather than buried.

We will also hand over information if the law makes us — a court order, a regulator, or a legitimate law-enforcement request.

We use cookies to keep you signed in, remember your cart and hold on to a referral or discount code until checkout. The analytics and advertising tools listed above set their own. You can clear or block all of them in your browser; the ones that keep you signed in and hold your cart are the only ones the store needs to function.

Account information stays until you ask us to delete it. Order records stay longer, because tax and cannabis regulations require it. Analytics data is kept on the schedules of the services above, which are theirs rather than ours.

See or correct what we hold

Most of it is in your account. Ask us for the rest.

Delete your account

Ask us and we will, except where we have to keep records for tax or regulatory reasons.

Stop marketing email

Unsubscribe from any of it, or tell us. Order and account email will still reach you.

Turn off analytics and advertising

Use your browser's cookie controls or its Do Not Track setting. The site works without them.

The site runs over HTTPS, passwords are stored hashed rather than in plain text, and card numbers never reach our servers. No system is perfect, and we will tell you promptly if something happens that affects your information.

If this policy changes in a way that matters, we will update the date at the top and say so. Questions, or a request about your own data, go to info@gothammeds.com or the contact page.