Privacy Policy

Introduction

Monterey Growers ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or conduct business with us.

As a licensed cannabis business operating in California, we must comply with additional regulations beyond standard privacy laws, including state tracking requirements and heightened data security standards.

1. Information We Collect

1.1 Business Information

When you register as a wholesale partner or conduct business with us, we collect:

• Business Details: Company name, business type, license numbers, tax ID
• Contact Information: Business address, phone number, email address
• License Verification: California cannabis license numbers, license documentation, permit information
• Authorized Representatives: Names, titles, and contact information for authorized personnel

1.2 Transaction Information

• Order history and product selections
• Payment information (processed securely through third-party processors)
• Delivery addresses and shipping information
• Invoice and receipt records

1.3 Website Usage Data

• Automatically Collected: IP address, browser type, device information, operating system
• Cookies and Tracking: Website usage patterns, page views, time spent on pages
• Analytics: Traffic sources, navigation paths, feature usage

1.4 Communications

• Email correspondence with our team
• Phone call records (when applicable)
• Support ticket information
• Newsletter subscription preferences

1.5 Cannabis Regulatory Data

As required by California law, we collect and maintain:

• METRC Tracking: Track-and-trace data for all cannabis products
• Compliance Records: Testing certificates, batch numbers, cultivation data
• License Monitoring: Ongoing verification of partner license status

2. How We Use Your Information

2.1 Business Operations

• Process and fulfill orders
• Verify business licenses and maintain compliance
• Communicate about products, services, and updates
• Provide customer support
• Manage wholesale partnerships

2.2 Legal Compliance

• Comply with California cannabis regulations (MAUCRSA, DCC requirements)
• Maintain required business records per state law
• Submit regulatory reports to state agencies
• Cooperate with law enforcement when legally required
• Enforce our Terms of Service

2.3 Website Improvement

• Analyze website performance and user experience
• Identify technical issues and bugs
• Develop new features and services
• Conduct market research and analytics

2.4 Marketing (With Consent)

• Send newsletters about new products and strains
• Provide cultivation tips and industry updates
• Announce special offers for wholesale partners
• Share company news and events

3. Information Sharing and Disclosure

3.1 We DO Share Information With:

• Government Agencies: California Department of Cannabis Control (DCC), tax authorities, and other regulatory bodies as required by law
• Service Providers: Third-party vendors who help us operate our business (payment processors, shipping providers, IT services) under strict confidentiality agreements
• Licensed Distributors: For product delivery coordination (license numbers verified)
• Testing Laboratories: For product testing and compliance verification
• Legal Advisors: When necessary for legal compliance or protection

3.2 We DO NOT:

• Sell Your Data: We never sell, rent, or trade your personal information
• Share With Marketers: We don't share data with third-party advertisers
• Cross State Lines: We don't transfer data to entities outside California for cannabis business purposes
• Public Disclosure: We don't make customer lists or business information publicly available

3.3 Legal Requirements

We may disclose information when required by law, including:

• Response to court orders, subpoenas, or legal processes
• Compliance with cannabis regulatory audits or investigations
• Protection of our legal rights or defense of claims
• Prevention of fraud or illegal activity

4. Data Security

We implement robust security measures to protect your information:

4.1 Technical Safeguards

• Encryption: SSL/TLS encryption for data transmission
• Secure Storage: Encrypted databases and secure servers
• Access Controls: Role-based access and multi-factor authentication
• Regular Audits: Security assessments and vulnerability testing

4.2 Administrative Safeguards

• Employee training on data privacy and security
• Confidentiality agreements with all staff
• Limited access to personal information (need-to-know basis)
• Incident response procedures

4.3 Physical Safeguards

• Secure facilities with restricted access
• Surveillance and monitoring systems
• Secure disposal of physical documents

Important: While we use industry-standard security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to protect your information.

5. Your California Privacy Rights (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

5.1 Right to Know

You have the right to request disclosure of:

• Categories of personal information we collect
• Sources of that information
• Business purposes for collection
• Categories of third parties with whom we share information
• Specific pieces of personal information we have about you

5.2 Right to Delete

You can request deletion of your personal information, subject to certain exceptions (e.g., legal compliance, completing transactions, maintaining records as required by cannabis regulations).

5.3 Right to Correct

You can request correction of inaccurate personal information we maintain about you.

5.4 Right to Opt-Out

While we don't sell personal information, you can opt-out of marketing communications at any time.

5.5 Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

5.6 How to Exercise Your Rights

To submit a privacy request:

• Email: info@MontereyGrowers.com

We will verify your identity before processing requests. Response time: typically within 45 days.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings and preferences

6.2 Third-Party Analytics

We may use services like Google Analytics to analyze website traffic. These services may use cookies and similar technologies. You can opt-out through browser settings or third-party opt-out tools.

6.3 Managing Cookies

Most browsers allow you to control cookies through settings. Note that disabling cookies may limit website functionality.

7. Data Retention

We retain your information for as long as necessary to:

• Fulfill the purposes described in this Privacy Policy
• Comply with legal obligations (California cannabis laws require 7-year record retention)
• Resolve disputes and enforce agreements
• Maintain business records for tax and accounting purposes

After the retention period, we securely delete or anonymize personal information.

8. Cannabis-Specific Privacy Considerations

8.1 Federal vs. State Law Conflict

Cannabis remains illegal under federal law. While we comply with California state regulations, there is inherent risk in the federal-state legal conflict. We minimize data exposure where possible to protect our partners.

8.2 Banking and Financial Services

Due to federal restrictions, cannabis businesses face limited banking options. We work only with compliant financial partners and do not share unnecessary financial data.

8.3 Government Access

Cannabis businesses are subject to regulatory oversight. State agencies (DCC, tax authorities) may access certain business records. We only provide information as legally required.

9. Children's Privacy

Our services are intended for individuals and businesses 21 years of age or older. We do not knowingly collect information from anyone under 21. If we discover we have collected information from someone under 21, we will delete it immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notification to registered wholesale partners (for significant changes)

Your continued use of our services after changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

Monterey Growers - Privacy Team
Email: info@MontereyGrowers.com

Response Time: We aim to respond to all privacy inquiries within 5 business days.