California Consumer Privacy Statement

Last modified: November 2024

Glass House Retail, LLC, a California company, (“Farmacy”), and our affiliates and subsidiaries (collectively, “Company” or “We”) respect your privacy and are committed to protecting it through our compliance with this California Consumer Privacy Statement (“Statement”).

This Statement supplements the information contained in Company’s Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this Statement to comply with the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA/CPRA”) and any terms defined in the CCPA/CPRA have the same meaning when used in this Statement.

Information We Collect

We may collect (and may have collected during the 12-month period prior to the effective date of this Statement) information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“personal information”). Personal information does not include:

Publicly available information from government records.
Deidentified or aggregated consumer information.
Information excluded from the CCPA’s scope, like:
- health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data, or other qualifying research data;
- personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

In particular, We may have collected the following categories of personal information from consumers, including job applicants and employees, within the last twelve (12) months for business and commercial purposes. See below for additional information on how information is collected, the purpose of collection, and how personal information is used and shared.

Categories of Personal Information We May Have Collected:

Examples of How We Use this Personal Information Include:

A. Identifiers Including Personal Information categories listed in CA Customer Records Statute.
Contact details, such as real name, alias, postal address, phone number, unique personal identifier, IP address, email address, account name, SSN, driver’s license or state ID, passport number, or other similar identifiers. Insurance policy, education, employment history, bank account number, credit or debit card number, medical information, or health insurance information.

Verification of eligibility and qualifications to engage in business activities, commercial services, or otherwise, with our Company.
General administrative services and functions.
Account customization, maintenance, and security.
Communicating with you for business purposes and services.
Compliance with applicable law or governing regulations, including information requests from authorities.
Processing your requests, purchases, transactions, and payments.

B. Protected classification characteristics under California or federal law.
Age (40 years or older), race, color, citizenship, religion or creed, marital status, national origin, medical condition, physical or mental disability, sex (incl: gender, gender identity and expression), pregnancy/childbirth and related medical conditions), veteran or military status.

Compliance with applicable law or governing regulations, including reporting and information requests.
Establish customer classifications and purchasing limits (i.e., veteran discount, senior discount, medical cannabis recommendation data, if you choose to share it).

C. Commercial information.
Records of products or services purchased, obtained, or considered.

Support, personalize, and develop our Website, products, and services.
Offer personalized services and products.

D. Biometric information.
Fingerprints, faceprints, and voiceprints.

Verification of age and identity.
Kronos /Time keeping (Personnel only)

E. Internet or other similar network activity.
Browsing and search history, information on a consumer’s interaction with a website, application, or advertisement.

Personalize your Website experience and deliver content, product, and service offerings relevant to your interests, including targeted offers and ads through our Website, third-party sites, applications, and via email or text message (with your consent, where required by law).

F. Geolocation data.
IP address, physical location or movements, device location.

Verification of age and identity.

G. Sensory data.
Electronic, visual, or similar information.

Personalize your Website experience and to deliver content and product and service offerings relevant to your location.
GPS movement and location data of personnel for business purposes (i.e. delivery, distribution).

H. Professional or employment-related information.
Current or past job history or performance evaluations.

Verification and evaluation of eligibility and qualifications to engage in business activities, employment, service agreements, commercial services, or otherwise, with our Company.

I. Inferences drawn from other personal information.
Profile reflecting a person’s preferences, characteristics, abilities, and aptitudes.

Inferring your product preferences based on selections to offer personalized services and products.

We may obtain the categories of personal information listed above from the following categories of sources:

you or your devices, for example, through your use of the Services;
our affiliates and subsidiaries;
business partners;
data analytics providers;
vendors who provide services on our behalf;
social networks;
internet service providers;
online advertising networks and services;
publicly and commercially available sources (as permitted by applicable law);
from our business customers and vendor representatives, your employer.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following purposes:

To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.

To provide support, personalize, and develop our Website, products, and services.
To create, maintain, customize, and secure your account with us.
To process your requests, purchases, transactions, and payments and prevent transactional fraud.
To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
To help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business.
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
As described to you when collecting your personal information or as otherwise set forth in the CCPA/CPRA.To evaluate or conduct a merger, restructuring, or other sale or transfer of some or all of our assets.We will not collect additional categories of personal information or use the personal information collected for materially different, unrelated, or incompatible purposes without providing notice.

Sharing Personal Infomation

We may share your personal information by disclosing it to a third-party for a business purpose. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. We do not sell personal information.

Your Rights and Choices

The CCPA/CPRA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA/CPRA rights and explains how to exercise those rights.

Access: You may have the right to request, twice in a 12-month period, that we disclose to you the personal information we have collected about you, including (i) the categories of personal information; (ii) the categories of sources from which the personal information is collected; (iii) the business or commercial purposes for collecting, selling, or sharing (for cross-context behavioral advertising purposes) personal information; (iv) the categories of third parties to whom we disclose personal information; and (v) the specific pieces of personal information we collected about you.

Correction: You may have the right to request that we correct the personal information we maintain about you, if that information is inaccurate.

Deletion: You may have the right to request that we delete certain personal information we have collected from you.

Opt-Out of Sale or Sharing: You may have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes

Statistics: please contact legal@glasshousegroup.com to request statistics relating to consumer privacy rights requests we received last year.

Shine the Light Request: You also may have the right to request that we provide you with (1) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (2) the identity of those third-parties.

How to Submit a Request: To submit an access, correction, or deletion request, or a request to limit the use and disclosure of your sensitive personal information, email us at legal@glasshousegroup.com. To submit a Shine the Light request, email us at legal@glasshousegroup.com. To opt out of the (a) sale of your personal information, or (b) sharing of your personal information for cross-context behavioral advertising purposes email us at legal@glasshousegroup.com. To submit a request as an authorized agent on behalf of a consumer, email us at legal@glasshousegroup.com.

Non Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Changes to Our Privacy Policy

We reserve the right to amend this privacy policy at our discretion and at any time. When we make changes to this privacy policy, we will post the updated notice on the Website and update the notice’s effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this notice, the ways in which the Company collects and uses your information described here, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at: legal@glasshousegroup.com.

If you need to access this Policy in an alternative format due to having a disability, please contact legal@glasshousegroup.com.