Catalyst Cannabis Co. ("Catalyst," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our websites, mobile applications, social media pages, or interact with our services (collectively, the "Services"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.
This Privacy Policy applies to information we collect through our Services, in email, text, and other electronic messages between you and the Services, and when you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this Privacy Policy. This Privacy Policy does not apply to information collected by any third party, including through any application or content that may link to or be accessible from or on the Services.
Our Services are intended for visitors who are at least 21 years of age, or 18 years of age or older with a valid medical marijuana card, in the state of California. By using the Services, you represent and warrant that you meet these age requirements.
Usage of Information
We will not share your personal information with anyone except as described in this Privacy Policy. Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services.
If you have any questions about this Privacy Policy, please contact us at legal@catalystcannabis.co.
Changes to This Privacy Policy and Terms of Use
We may update this Privacy Policy from time to time. If we make material changes to how we treat our users' personal information, we will post the new Privacy Policy on this page with a notice that the Privacy Policy has been updated. The date the Privacy Policy was last revised is identified at the top of the page. All changes are effective immediately when we post them and apply to all access to and use of the Services thereafter.
This Privacy Policy is incorporated into and made a part of our Terms of Use. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates. This Privacy Policy is governed by the laws of the State of California.
Disclaimers
Due to the inherent nature of the internet, we cannot guarantee that communications between you and our servers, or information stored on our servers or systems, will be free from unauthorized access by third parties such as hackers. By using the Services, you acknowledge and agree that you assume these risks. For additional information, please see our Legal Disclaimers.
Children's Privacy
Our Services are not intended for anyone under 21 years of age (or under 18 years of age with a valid medical marijuana card). No one under these age requirements may provide any personal information to or on the Services. We do not knowingly collect personal information from anyone under 21 (or under 18 with a valid medical card). If you are under 21 (or under 18 without a valid medical card), do not use or provide any information on the Services.
We do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at legal@catalystcannabis.co.
Cannabis Use in General
Cannabis use may not be universally acceptable. Some employers, housing providers, educational institutions, and other organizations may have policies prohibiting cannabis use, even in jurisdictions where it is legal. Use of cannabis is at your own risk. Catalyst makes no representations or warranties regarding the legality, safety, or appropriateness of cannabis use in any particular circumstance. You are solely responsible for understanding and complying with all applicable laws and regulations regarding cannabis possession and use.
Information Collection Practices
What Information Does Catalyst Collect?
We collect several types of information from and about users of our Services, including information by which you may be personally identified, such as name, postal address, email address, telephone number, date of birth, or any other identifier by which you may be contacted online or offline ("personal information"). We collect this information directly from you when you provide it to us, automatically as you navigate through the Services, and from third parties.
Information You Voluntarily Provide
The information we collect on or through our Services may include:
- Information that you provide by filling in forms on our Services, including information provided at the time of registering to use our Services, subscribing to our communications, posting material, or requesting further services.
- Records and copies of your correspondence if you contact us.
- Your responses to surveys that we might ask you to complete.
- Details of transactions you carry out through our Services and of the fulfillment of your orders.
- Your search queries on the Services.
The types of personal information we may collect include:
- Name, email address, postal address, telephone number
- Date of birth
- Username and password
- Payment information (credit card number, billing address)
- Medical marijuana card information (where applicable)
- Government-issued identification information for age verification
- Any other information you choose to provide (e.g., preferences, feedback)
Information We Collect Through Automated Means
As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
- Details of your visits to our Services, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Services.
- Information about your computer and internet connection, including your IP address, operating system, and browser type.
- Information about your mobile device, including device type, operating system, unique device identifiers, and mobile network information.
- Your browsing history, search history, and information regarding your interaction with our Services, advertisements, or emails.
- Geolocation data.
The information we collect automatically helps us to improve our Services and to deliver a better and more personalized experience, including by enabling us to estimate our audience size and usage patterns, store information about your preferences, speed up your searches, and recognize you when you return to our Services.
Website Cookies
A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Services. We use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Services.
Clear GIFs, Beacons, and Pixels
Pages of our Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email, and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity). We may also use these technologies to collect information about your interactions with our email messages, such as whether you opened, clicked on, or forwarded a message.
Information from Social Media
When you interact with us through social media platforms, we may collect information that you make available to us through those platforms, including your account ID or username, profile information, and any other information you have made publicly available. We may also collect information from social media platforms when you use social media features integrated into our Services (such as "like" or "share" buttons).
How Does Catalyst Use Your Information?
General Use
We use information that we collect about you or that you provide to us, including any personal information:
- To present our Services and their contents to you.
- To provide you with information, products, or services that you request from us.
- To fulfill any other purpose for which you provide it.
- To provide you with notices about your account, including expiration and renewal notices.
- To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
- To notify you about changes to our Services or any products or services we offer or provide through them.
- To allow you to participate in interactive features on our Services.
- In any other way we may describe when you provide the information.
- For any other purpose with your consent.
Improve Catalyst's Services
We may use your information to improve the quality and design of our Services and to create new features, functionality, and services by storing, tracking, and analyzing user preferences and trends.
Safety and Security
We may use your information to protect the safety, integrity, and security of our Services, as well as those of our users, employees, and third parties. We may also use your information to detect, prevent, and respond to fraud, intellectual property infringement, violations of our Terms of Use, violations of law, or other misuse of the Services.
Promotional Communications
We may use your contact information to send you promotional messages and special offers. You may opt out of receiving such communications at any time by following the unsubscribe instructions included in such messages or by contacting us at legal@catalystcannabis.co.
Marketing/Performance Analysis & Data Analytics
Data Analytics
We may use third-party analytics services, such as Google Analytics, to collect and analyze usage information through cookies and similar technologies, to engage in auditing, research, or reporting, to assist with fraud prevention, and to provide certain features to you. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-Out Browser Add-on.
Online Advertising
We may use third-party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use our Services and other websites or online services, based on information relating to your access to and use of our Services and other websites or online services on any of your devices, as well as on information received from third parties.
Mobile Advertising
When using mobile applications, you may also receive tailored in-application advertisements. Each operating system (iOS, Android, and Windows) provides its own instructions on how to control in-application tailored advertising. You should review the support materials and/or the privacy settings for the respective operating systems to opt out of tailored in-application advertisements.
Email Marketing
We may use your email address to send you marketing communications, including information about products, services, and events offered by us and others. Each marketing email we send will include instructions for opting out of receiving future marketing emails.
Do Not Track
Some web browsers may transmit "do-not-track" signals to the websites and other online services with which the browser communicates. There is no standard that governs what, if anything, websites should do when they receive these signals. We currently do not take action in response to these signals. If and when a standard is established, we may revise our policy on responding to these signals.
Combined Information
We may combine information that we collect from you through our Services with information that we receive from third parties, and use such combined information in accordance with this Privacy Policy.
Aggregate/De-Identified Data
We may aggregate and/or de-identify information collected through the Services so that such information can no longer be linked to you or your device ("Aggregate/De-Identified Information"). We may use Aggregate/De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also share such data with any third parties, including advertisers, promotional partners, and sponsors.
How Does Catalyst Share Your Information?
We may disclose personal information that we collect or that you provide as described in this Privacy Policy:
- Affiliates. We may share your information with our subsidiaries, parent companies, and affiliated entities for purposes consistent with this Privacy Policy.
- Service Providers. We may share your information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.
- Legal Compliance. We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of Catalyst, (iii) act in urgent circumstances to protect the personal safety of users of the Services or the public, or (iv) protect against legal liability.
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Public Forums. Certain features of our Services may allow you to share information publicly, such as product reviews or comments. Any information you share in a public forum is public, and you should consider carefully before disclosing any personal information in such areas.
- Aggregate Data. We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for marketing, advertising, research, or similar purposes.
CCPA Disclosures
In the preceding 12 months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act ("CCPA"):
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. | Yes |
| B. California Customer Records (Cal. Civ. Code § 1798.80(e)) | Name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. | Yes |
| C. Protected classification characteristics under California or federal law | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information. | Yes |
| D. Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Yes |
| F. Internet or similar network activity | Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. | Yes |
| G. Geolocation data | Physical location or movements. | Yes |
| H. Sensory data | Audio, electronic, visual, thermal, olfactory, or similar information. | Yes |
| K. Inferences drawn from other personal information | Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Yes |
We may disclose the above categories of personal information to third parties for a business purpose. In the preceding 12 months, we have disclosed the following categories of personal information for a business purpose: Category A (Identifiers), Category B (California Customer Records), Category D (Commercial information), Category F (Internet or similar network activity), and Category G (Geolocation data).
Catalyst does not sell personal information for monetary consideration. We may share personal information with third parties as described in this Privacy Policy, including for marketing, advertising, and analytics purposes, which may constitute a "sale" or "sharing" of personal information under the CCPA. You have the right to opt out of such sharing. Please see our Right to Opt-Out page for more information.
Information Security
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Any payment transactions will be encrypted using SSL technology.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.
Third Party Data Practice
Third parties may use cookies, web beacons, and similar technologies to collect or receive information from our Services and elsewhere on the internet and use that information to provide measurement services and target ads. You can opt out of the collection and use of information for ad targeting by visiting www.aboutads.info/choices or www.youronlinechoices.eu.
We do not control the data collection and use practices of these third parties. Please refer to each party's privacy policy to understand their data collection and use practices.
Submitting Information from Outside the United States
Our Services are operated in the United States. If you are located outside of the United States, please be aware that any information you provide to us will be transferred to and stored in the United States. By using our Services or providing us with your information, you consent to this transfer. The data protection and privacy laws of the United States may differ from those of your country of residence, and your information may be subject to access requests from governments, courts, or law enforcement in the United States according to the laws of the United States.
Rights to Opt-In / Opt-Out
You may opt out of receiving promotional communications from us at any time by following the instructions in those messages. If you opt out, we may still send you non-promotional communications, such as those about your account or our ongoing business relations. To opt out of the sale or sharing of your personal information, please visit our Right to Opt-Out page or contact us at legal@catalystcannabis.co.
Your Choices in Correcting Your Information
You may send us an email at legal@catalystcannabis.co to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. We may also retain certain information as required by law or for legitimate business purposes.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. Cannabis regulations may require us to retain certain transaction and customer records for specified periods. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal information, and applicable legal requirements.
Privacy Rights for California Residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"). These rights include:
- The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information was collected, the business or commercial purpose for collecting the personal information, the categories of third parties with whom we share personal information, and the specific pieces of personal information we have collected about you.
- The right to delete personal information that we have collected from you, subject to certain exceptions.
- The right to correct inaccurate personal information that we maintain about you.
- The right to opt out of the sale or sharing of your personal information.
- The right to limit the use and disclosure of your sensitive personal information.
- The right not to be discriminated against for exercising any of your CCPA rights.
To exercise any of these rights, please contact us at legal@catalystcannabis.co or visit our Right to Opt-Out page. We will verify your identity before fulfilling your request.
California "Shine the Light" Law
California Civil Code Section 1798.83 permits users of our Services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to legal@catalystcannabis.co with "California Shine the Light Request" in the subject line and your full name, email address, and postal address in the body of the email.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Catalyst Cannabis Co.
Attn: Website Administrator
401 Pine Ave.
Long Beach, California 90803
legal@catalystcannabis.co