Privacy & Data Policy

Who controls your data

The Good Weed Co platform hosts independent, licensed cannabis stores. When you shop or create an account at a store, that individual store is the controller of your information. Each store has its own isolated customer database; a store cannot see customers, orders, or uploaded documents belonging to another store.

What we collect

Depending on how you use a store, we may collect:

• Contact details — your name and phone number. Email is optional.
• Delivery information — the delivery address you provide with an order.
• Age / identity verification — a photo of your government-issued ID, and, if you choose to provide it, a photo of your medical cannabis card. Cannabis sales are restricted to adults 21+ (or qualified patients), and stores are legally required to verify age and identity.
• Account information — if you create an account: a username, a password (stored only as a salted hash, never in readable form), and an optional profile photo. An account is optional; you can order as a guest.
• Order history and activity — the items, totals, taxes, and status of your orders, used to fulfill orders and to recognize returning customers (loyalty status such as Return Client, Loyal Client or VIP).
• Messaging preference — whether you opted in to receive order text messages at your number.

Even without an account, a store keeps a record tied to your phone number so it can recognize you on return visits and apply loyalty status. You can ask a store to delete this record.

How we use it

• To verify you are of legal age and a valid purchaser.
• To take, confirm, fulfill, and deliver your orders, and to calculate taxes.
• To contact you about your order — by phone, and by text message only if you opted in.
• To recognize returning customers and apply loyalty status and rewards.
• The store's on-site assistant may be told your first name and loyalty status so it can help you better; it is not told your exact contact details or document images.

Sensitive documents (ID & medical card)

ID and medical-card images are treated as sensitive. They are stored separately from public files and are accessible only to authorized staff of the store you provided them to, for the purpose of age/identity verification and legal compliance. They are never displayed publicly and are not shared with other stores.

Text messages

If you opt in to order text messages, a store may text the number you provide about your order. Message and data rates may apply. You can opt out at any time by replying STOP or by asking the store to turn it off.

Sharing

Your information is used by the store you interacted with and the service providers that operate it (for example, the text-message and email providers used to send order notifications). It is not sold. Stores may disclose information where required by law or regulators.

Your choices

• Order as a guest instead of creating an account.
• Decline order text messages, or opt out later.
• Ask a store to show, correct, or delete the information it holds about you, including ID/medical images.

To make a request, contact the store directly. Because each store controls its own data, requests are handled per store.