Last Updated: September 27, 2019
INFORMATION WE COLLECT
Information You Provide To Us
Registration and Identity Verification
When you sign up for any Stash Club account, you give us your name, email address, phone number, date of birth, and, if necessary, a copy of your government-issued ID (i.e. your driver’s license, state ID card, or passport). In order to receive a delivery or shipment, you must provide a valid delivery address — whether that’s your home address or any other valid physical address. Such information is a part of what’s called your personally identifiable information (“PII”) as this is data that can be used to specifically identify you. Additional PII we receive may include, but is not limited to, a state-issued medical marijuana ID card or a physician’s recommendation letter that you provide us in order to receive a medical delivery. This PII helps us establish and maintain your user account, verify your identity, remain compliant with state and local laws, and ensure that you are of legal age to receive a delivery or shipment.
We also collect demographic information from you when you register, when you take our surveys, and throughout your use of the Stash Club Platform. This information on its own cannot be used to specifically identify you, but we may use it to learn more about our users and their habits and preferences. Demographic information may include your age, gender, location, how you heard about Stash Club, spending habits, and other preferences or habits.
If you contact us directly, we may collect information from you that helps us provide a satisfying experience and answers any questions you have while using Stash Club. For example, when you communicate with a member of our customer service team, we may ask you for your name, email address, delivery address, phone number, or proof of charge in order to identify your account, confirm your identity, or assist with your issue. If you send us an email, we will collect the contents of that email and any other information you choose to provide. If you communicate with us via live chat, that correspondence will be archived. If you communicate with us via social media, we collect that communication and associate that information with your user account. Customer service communications over the phone may be recorded for quality control purposes and may be summarized within our customer support systems.
Payment information may be collected in connection with a transaction facilitated by Stash Club.
For on-demand delivery, all payments are made to a third-party, licensed cannabis retail dispensary fulfilling your order, and not to Stash Club. For other products and services, payments may be made directly to Stash Club or another third party. In all cases, while we may retain a limited amount of payment information for identification and convenience, to keep your financial data secure, we do not store full payment or financial information on our servers. Unless otherwise noted, payment information flows through a third-party vendor who processes the payments for Retailers and Stash Club.
Voluntary User Surveys
From time to time, we may invite you to fill out voluntary user surveys to provide feedback on various topics which may include: your experiences with Stash Club and/or our partners, available products, new services, your preferences related to cannabis, and your sentiments on public policy or other cannabis industry topics. These surveys are often conducted by third-party market research firms, who collect such data to analyze industry preferences and trends. Stash Club does not share your survey information on an individualized basis, and does not share this data for direct marketing to our users.
Information We Collect When You Use Stash Club
We collect your location information and we may use geolocation-based services in order to verify your location. For instance, knowing your location may be necessary to allow you full access to our mobile apps or certain aspects of the Stash Club Platform. Furthermore, for compliance reasons, some of the Stash Club Platform may be restricted depending on where you are located. Location information helps us connect you with a licensed retailer that services your delivery area, send you relevant content based on your location, and optimize or improve our products and services. Location data may also be collected as demographic information.
To help us understand how you use Stash Club and to help us improve our services and products, we automatically collect information about your interactions with the Stash Club Platform. This includes, but is not limited to, the products and content you view, your actions on the Stash Club Platform, how you access our Stash Club Platform, and the details of any orders you place.
Stash Club collects information about the devices you use to access the Stash Club Platform. Our servers receive and store information about your IP address, web browser, mobile operating system, phone carrier and manufacturer, unique identifiers such as advertising ID, VIN, MAC address, and IDFA, and other related software or hardware information related to your devices.
Cookies and Technical Information
Call and Text Information
We work with third-party partners to facilitate phone calls and text messages, including communications between you and your driver. We collect information about such communications, including the date and time of the call or SMS message, the parties’ phone numbers, and the content of any SMS messages.
We want to make sure you have a consistently positive experience with the Stash Club Platform, and we are always looking to improve our products and services. Accordingly, we collect and retain information about any ratings, reviews, and feedback you provide about our service, the Stash Club Platform, the products on our site, our licensed retail partners, and their drivers.
Information Collected from Third Parties
We may collect information about you directly from our third-party partners, services, or tools if your use of their services led to or related to your use of Stash Club. We may also utilize such third-party services as a means of collecting information from you as described above. The information we collect from partners will be treated in the same manner as the information we collect from you.
HOW WE USE THE INFORMATION WE COLLECT
We use the information we collect from you to:
- Provide the Stash Club Platform to you, including, but not limited to, connecting you with a licensed retailer and drivers to facilitate your legal access to cannabis and cannabis products, shipment of professionally curated, hemp-derived CBD products, facilitation of your transactions and payments
- Support our licensed retail partners with information necessary for them to maintain their records in accordance with their normal business practices and applicable law
- Identify you as a user in our system
- Comply with applicable laws
- Analyze and assess current and potential user markets
- Improve, optimize and create new products and services
- Evaluate retailer, brand, and other third-party partnerships
- Personalize your experience with Stash Club
- Provide customer support and assist with your access or use of the Stash Club Platform
- Communicate with you, either directly or through one of our partners, including for marketing and promotional purposes
- Facilitate your communication with the driver fulfilling your order
- To engage in marketing activities with you and to assess marketing and promotional initiatives
- Detect, prevent, or mitigate fraud or any other suspicious activities
- Conduct research and development, such as by conducting voluntary user surveys or obtaining other feedback from you
- Create aggregated, de-identified and/or anonymized data, such as for educational content
- Support ongoing efforts in cannabis legalization and social equity and justice
HOW WE SHARE INFORMATION
We may share your information as described below:
To Facilitate Delivery
In order to facilitate deliveries, we share information with our business partners, including licensed retailers and their drivers. When you send an order to the retailer through Stash Club, the retailer receives information required to complete your order, such as your first name, delivery address, order details, birthdate, and a picture of your face taken from your government-issued ID. The retailer connects you with a driver who fulfills your order, and the driver receives this information to complete the delivery. The driver never sees a full upload of your ID. When the driver arrives with your order, they will check your ID in person to verify your identity as required by law.
To Facilitate Shipping
Stash Club uses a third-party logistics provider (“3PL”) in order to facilitate shipping of hemp-derived CBD products. When you order from the Stash Club menu, the 3PL receives your name, shipping address, and order details so that they can send your items to the right place.
We may share your personal information with businesses that are legally part of the same group of companies that Stash Club is part of, or that become part of that group (“Affiliates”). Affiliates may use this information to help provide, understand, and improve the Stash Club Platform and Affiliates’ own services (including by providing you with better and more relevant experiences).
Anonymized, De-Identified and/or Aggregated Data
We share aggregated, de-identified and/or anonymized information for educational or informational purposes. Aggregated and anonymized means that user information is combined together with all PII removed so that any individual user cannot be identified. De-identified information means we have removed any identifiers that make a user identifiable, such as their name or address. We may also share anonymized, aggregated and/or de-identified data with third parties for consulting or independent research purposes. This data provides valuable information including how users interact with Stash Club, our partners, available products, and also helps us drive conversation on consumer habits, preferences, and behavior within the cannabis industry.
Promotions and Referrals
If you signed up for a promotion with another user’s referral or promotion code, we may let your referrer know that their code was redeemed. However, we do not specifically identify the user that redeemed the code.
Third-Party Tools and Services
We may share your information with third-party service providers, business partners, consultants, tools, and services to facilitate Stash Club operations such as compliance, marketing, communications, statistical analysis, hosting, database management, and a number of other functions. We share your information with these parties to the extent minimally necessary to perform their respective specific tasks on our behalf. We do not sell your information with third parties for direct marketing purposes by those parties, except as directed by you.
Government Authority, Law Enforcement, & Safety
Stash Club does not proactively divulge your information to any local, state, or federal authorities. All of your information is securely stored and accessible only by authorized personnel. However, we will disclose information about you to a government authority, law enforcement official, or one of our partners if we believe we are required to by law, or in order to respond to or comply with regulations or legal processes, including, but not limited to, responding to subpoenas or warrants. We may also share your information if we think doing so is necessary to protect the rights, property, or safety of Stash Club, our partners and their employees, our users, the public, or any particular person.
At Your Direction
There may be instances where you direct us to share personal information on your behalf, such as for medical records, for legal or administrative proceedings, or otherwise.
Acquisition or Merger of Stash Club
We provide you with the choices below regarding your personal information:
You can always unsubscribe from Stash Club promotional emails by clicking the link provided at the bottom of the email. We will still send you transactional emails and receipts generated from your use of Stash Club as these are not promotional communications.
You can opt out of receiving promotional text messages by texting the word STOP from the mobile device receiving the messages to the phone number you received the message from. Promotional texts are SMS messages sent to you containing offers, promo codes, or deal reminders. Standard messaging rates from your cell phone carrier will apply.
You can opt out of receiving promotional push notifications through your device settings. Please note that opting out of receiving transactional push notifications, such as receiving a notification that your order has arrived, may impact your use of Stash Club.
You can prevent your device from sharing geolocation information at any time through your device settings. Please note that the use of geolocation information may be necessary to access some of our services, such as mobile apps that may only allow access to users in states that have legalized the sale of recreational cannabis.
Editing Account Information
You can review and edit your account information at any time by logging into your account and navigating to your “Account Settings.”
Deleting Your Account
We will store your PII as long as your account is open. If you wish to terminate, delete, suspend, or otherwise disable your Account or use of the Stash Club Platform, please contact Customer Support. When we delete user accounts we must maintain certain information, including PII, as long as necessary to comply with legal obligations, prevent fraudulent activity, or to enforce agreements. Upon your request for deletion, the PII not necessary for such tasks will be deleted from your Account in reasonable amount of time.
Changes to the Policy
In addition, we may provide you with “just-in-time” disclosures or additional information about the data collection, use and sharing practices of specific parts of the Stash Club Platform. These notices may provide more information about our privacy practices, or provide you with additional choices about how we process your personal information.
Stash Club is intended for access and use by individuals who are of legal age for the services offered based on the applicable regulations of their state or other government entities (“Qualifying Age”). We do not knowingly collect PII or other information from or about anyone who is not of Qualifying Age. If you are not of Qualifying Age, you should not attempt to access or use Stash Club, or send any information to us. If we discover that we have collected PII or other information from an individual who is not of Qualifying Age, we will take steps to remove that information.
All of the information we collect is protected within our database, and we are committed to securing your information. Although we take reasonable, industry-standard precautions to protect your information, no security measures are 100% secure, and we cannot guarantee the full security of your information.
You are also responsible for maintaining the secrecy of your unique password and account information, and for controlling access to emails or physical mail between you and Stash Club at all times. When you direct Stash Club to share your information with third parties, please note that your privacy and security may also be affected by changes in such third party services. We are not responsible for the functionality, privacy, or security measures of any other organization or third party.