MJ Medical Delivery respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, disclose, and protect information when you visit our website, create an account, place an order, request delivery, contact our team, or use any MJ Medical Delivery service.

This Privacy Policy is intended for website use and should be reviewed by a qualified privacy or cannabis compliance attorney before publishing, especially because cannabis, medical information, delivery records, age verification, and cross border privacy rules may require location specific language. Privacy requirements may vary across the United States, Canada, UK, Europe, and Australia, including FTC guidance in the United States, UK GDPR guidance from the ICO, PIPEDA principles in Canada, and the Australian Privacy Principles. (ftc.gov)

1. Introduction

MJ Medical Delivery helps eligible patients and adult shoppers access cannabis products, wellness products, and related delivery services where legally permitted. To provide these services responsibly, we may collect personal information needed to verify eligibility, process orders, deliver products, respond to customer requests, prevent fraud, and comply with applicable laws.

By using our website or services, you agree to the collection and use of information described in this Privacy Policy. If you do not agree with this policy, please do not use our website or services.

2. Information We Collect

We may collect personal information directly from you, automatically through our website, or from approved third party service providers.

Personal Information You Provide

We may collect:

• Full name
• Date of birth
• Phone number
• Email address
• Billing address
• Delivery address
• Account login details
• Government issued identification details
• Medical cannabis card or patient authorization information, where required
• Order history
• Product preferences
• Payment related information
• Customer service messages
• Delivery instructions
• Feedback, reviews, or survey responses

Cannabis Eligibility And Verification Information

Because cannabis products are regulated, we may collect information needed to confirm that you are legally allowed to purchase or receive products in your location.

This may include:

• Age verification details
• Identity verification records
• Medical patient status, where applicable
• Proof of residence or delivery eligibility
• Compliance related transaction records

Automatically Collected Information

When you visit our website, we may collect technical and usage information such as:

• IP address
• Browser type
• Device type
• Operating system
• Pages viewed
• Time spent on the website
• Referring website
• Location data based on device or IP address
• Cookies and similar tracking data

Payment Information

Payments may be processed by third party payment providers. MJ Medical Delivery does not intend to store full payment card numbers unless clearly stated and legally permitted. Payment processors may collect and process payment details according to their own privacy and security policies.

3. How We Use Your Information

MJ Medical Delivery may use your personal information to:

• Create and manage your account
• Verify your age, identity, and legal eligibility
• Process cannabis and wellness product orders
• Arrange delivery or pickup services
• Communicate about orders, delivery updates, and customer support
• Respond to questions, complaints, or service requests
• Personalize your shopping experience
• Recommend products based on preferences or order history
• Improve website performance and customer experience
• Detect fraud, abuse, security threats, or unlawful activity
• Maintain business, tax, accounting, and compliance records
• Follow applicable cannabis, privacy, delivery, and consumer protection laws
• Send promotional messages, if you have opted in where required
• Support community programs, business planning, and internal analytics

We do not use your information for purposes that are incompatible with this Privacy Policy unless we provide notice or obtain consent where required.

4. Legal Basis For Processing

Where privacy laws require a legal basis for processing personal information, MJ Medical Delivery may process your information based on:

• Your consent
• Performance of a contract with you
• Compliance with legal obligations
• Legitimate business interests
• Protection of customers, employees, and the public
• Compliance with cannabis regulations, age restrictions, and medical authorization rules

For customers in the United Kingdom or other locations where UK GDPR style rights apply, certain privacy rights may include access, correction, deletion, objection, restriction, portability, and the right to complain to a privacy regulator. The ICO provides guidance on privacy notices and individual data rights under UK data protection law. (ico.org.uk)

5. Cookies And Tracking Technologies

MJ Medical Delivery may use cookies, pixels, tags, analytics tools, and similar technologies to operate the website and improve your experience.

Cookies may help us:

• Keep you signed in
• Remember cart items
• Understand website traffic
• Improve website speed and layout
• Measure marketing performance
• Prevent fraud and security risks
• Personalize content and product suggestions

You can usually adjust cookie settings through your browser. Some website features may not work correctly if cookies are disabled.

Where required by law, we will request your consent before placing non essential cookies on your device.

6. How We Share Information

MJ Medical Delivery may share personal information only when necessary for business, legal, safety, or service related purposes.

We may share information with:

• Licensed dispensaries, cannabis suppliers, or fulfillment partners
• Delivery drivers or delivery service providers
• Payment processors
• Age and identity verification providers
• Customer support platforms
• Website hosting and technology providers
• Analytics and marketing service providers
• Legal, accounting, and compliance advisors
• Law enforcement, regulators, or government agencies when required
• Business successors in the event of a merger, sale, restructuring, or transfer

We do not sell your personal information for money. If any data sharing is considered a “sale,” “sharing,” or “targeted advertising” activity under applicable privacy laws, you may have the right to opt out where required.

7. Cannabis, Medical, And Sensitive Information

Some information collected by MJ Medical Delivery may be sensitive, especially if it relates to medical cannabis eligibility, patient status, government identification, health related preferences, or regulated product use.

We use sensitive information only for limited purposes such as:

• Confirming eligibility
• Completing legal cannabis transactions
• Fulfilling delivery obligations
• Maintaining compliance records
• Supporting customer requests
• Meeting legal, medical cannabis, or regulatory requirements

We do not intentionally disclose sensitive medical or cannabis related information for unrelated marketing purposes without consent where required by law.

8. Marketing Communications

If you subscribe to emails, text messages, loyalty updates, or promotional communications, we may use your contact information to send offers, product updates, store news, educational content, or delivery updates.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in an email
• Replying STOP to eligible text messages
• Updating your account preferences
• Contacting us directly

Transactional messages, such as order confirmations, delivery updates, verification requests, or legal notices, may still be sent even if you opt out of marketing.

9. Data Security

MJ Medical Delivery uses reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

Security measures may include:

• Secure website connections
• Access controls
• Account authentication
• Staff privacy training
• Vendor review procedures
• Secure record storage
• Fraud monitoring
• Limited access to sensitive information

No website, delivery platform, or digital system can guarantee complete security. You are responsible for keeping your account password private and notifying us if you believe your account has been accessed without permission.

The FTC provides business guidance on protecting consumer privacy and data security, including the importance of safeguarding sensitive information. (ftc.gov)

10. Data Retention

We keep personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or allowed by law.

Retention periods may depend on:

• Cannabis compliance requirements
• Medical authorization rules
• Tax and accounting obligations
• Delivery and transaction records
• Fraud prevention needs
• Customer service history
• Legal disputes or investigations
• Account status

When information is no longer needed, we may delete, anonymize, or securely archive it according to applicable requirements.

11. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information.

These rights may include the right to:

• Request access to your personal information
• Ask us to correct inaccurate information
• Request deletion of certain information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Request a copy of your information
• Opt out of marketing communications
• Opt out of certain data sharing or targeted advertising
• File a complaint with a privacy regulator

Canadian privacy law under PIPEDA includes principles such as accountability, identifying purposes, consent, limiting collection, limiting use and disclosure, safeguards, openness, individual access, and challenging compliance. (priv.gc.ca)

Australian privacy obligations may involve the Australian Privacy Principles, which address the handling of personal information by covered organizations and agencies under the Privacy Act 1988. (oaic.gov.au)

12. How To Submit A Privacy Request

To submit a privacy request, please contact us using the details below.

MJ Medical Delivery

Email: info@mjmedicaldelivery.com

We may need to verify your identity before processing your request. Verification may require your name, contact details, order information, account details, or other information needed to confirm that you are the person making the request.

We will respond within the timeframe required by applicable law.

13. Location Based Privacy Rights

United States Customers

Privacy rights in the United States may vary by state. Depending on your state of residence, you may have rights to access, correct, delete, or opt out of certain uses of your personal information.

If applicable, you may also have the right to appeal a privacy decision or limit the use of sensitive personal information.

United Kingdom Customers

If UK data protection laws apply, you may have rights under the UK GDPR and Data Protection Act, including the right to be informed, access your data, correct inaccurate data, request erasure, restrict processing, object to processing, and raise concerns with the Information Commissioner’s Office.

Canadian Customers

If Canadian privacy laws apply, your information may be handled in accordance with PIPEDA or applicable provincial privacy laws. You may request access to your personal information, challenge its accuracy, and ask questions about how it is used or disclosed.

Australian Customers

If Australian privacy laws apply, your information may be handled according to the Australian Privacy Principles. You may request access to and correction of your personal information and may contact us with privacy questions or complaints.

14. International Data Transfers

MJ Medical Delivery may work with service providers, technology platforms, verification companies, or support teams located in different countries. As a result, your personal information may be transferred to, stored in, or accessed from countries outside your location.

When we transfer personal information internationally, we aim to use appropriate safeguards as required by applicable law.

By using our website or services, you understand that your information may be processed in countries with privacy laws that differ from those in your location.