Website Privacy Policy

Last modified: October 2024

Introduction

Welcome to the Glass House Cultivation, LLC, a California corporation (“Glass House Farms”) website and services! Glass House Farms and our affiliates and subsidiaries (collectively, “Company,” “we,” or “us“) respect your privacy and are committed to protecting it.

This Privacy Policy (“Privacy Policy”) describes the personal information we may collect from you or that you may provide when you visit the website www.glasshousefarms.org (our “Website”) and our practices for collecting, using, maintaining, protecting, and disclosing that information. We collect personal information on individuals only as allowed by law.

This policy applies to the information we collect:

On this Website

In email, text, and other electronic messages between you and this Website.
Through the use of services, features, media, functions, content, tools, and links contained in or offered via the Websites (collectively, the “Services”).
Through the customer loyalty program application.

It does not apply to information collected by:

Us offline or through any other means, including on any other website operated by Company or any third party (including our affiliates and subsidiaries); or
Any third-party through any application or content (including advertising) that may be linked to or be accessible through the Website.

Some sections in this Privacy Policy apply only to persons subject to Regulation EU 2016/679 (the “GDPR”), namely residents of or persons located in the European Economic Area.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you agree to this privacy policy. Capitalized terms not defined herein shall have the meaning ascribed to them in the Terms of Use.

Changes to Our Privacy Policy

On occasion, we may make changes to this Privacy Policy. If those changes are material, we will post the revised policy on our Websites, and do our best to notify you by email and/or push notification. Your continued use of this Website after we make changes is deemed to be acceptance of those changes. The privacy policy revision date is identified at the top of the page.

Children and Minors Personal Information

Our Websites are not intended for children or individuals under 21 years of age. No one under age 21 may provide any personal information to or on the Website. We do not knowingly collect personal information from children or persons under 21. If you are under 21, do not:

use, register, or provide any information on this Website or through any of its features,
attempt to make any purchases through the Website,
use any of the interactive or public comment features of this Website or media platforms.

If you have reason to believe that a person under the age of 21 has provided personal information to us, please contact us at legal@glasshousegroup.com.

Information We Collect About You and How We Collect It

We may collect the following personal information from and about users of our Website, including:

Personal and contact details: full name, email address, postal address, phone number, and date of birth.
Device Details: device type, operating system, browser type, browser settings, IP addresses, unique identifiers (such as VIN, MAC address and IDFA), language settings, dates and times of connection to our website and other technical communication.
Usage Details: records of your use of our website, including registration, content with which you interact, records of purchases/orders made via the website, page views, clicked links, your communication preferences. We may collect this information through use of cookies and other related technologies, as is further described in the “Information We Collect Through Automatic Data Collection Technologies” below.
Transactional Information: credit card numbers, cardholder names, card security details, card expiry dates, billing addresses, signature; that you provide to us or our third-party payment processors
Opinions, views and interests: comments, ratings, or reviews that you choose to send to us, post via our website, via a survey, or publicly post via social media or third-party platforms
Account details: information stored in or associated with your account, including account profile, ID, username and password (if applicable), government-issued ID, Physician’s Recommendation or MMID (as applicable).
Products and preferences: information about products you purchase, obtain, or consider.
Information collected from third parties: information from public sources, such as your public social media information; we may collect information about you directly from our vendors or our third-party processors who collect information on our behalf.
Employee, Agents, and Job Applicants: full name, full contact details, and other relevant information you provide to us, such as your demographics, past employment information, education and state ID, vehicle information and your DMV driving records, (as applicable). Please review our “California Consumer Privacy Statement” for additional information about how we collect, use, and share personal information (provided to us under this scope) for business purposes.

We collect this information

Directly from you when you provide it to us.
Automatically as you navigate the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies and other tracking technologies
From third parties, for example, our business partners.

Information You Provide to Us

The information we collect on or through our Website and Services may include:

Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website, subscribing to our service, or purchasing our products. We may also ask you for information when you enter a contest or promotion sponsored by us, and when you report a problem with our Website.
Records and copies of your correspondence (including email), if you contact us.
Your responses to surveys that we might ask you to complete for research purposes.
Details of transactions you carry out through our Website and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website.
Your search queries on the Website.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
Information about your computer and internet connection, including your IP address, operating system, and browser type

“Do Not Track”

We may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there currently isn’t an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

The information we collect automatically may only include statistical data and does not include personal information, but we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

Estimate our audience size and usage patterns.
Store information about your preferences, allowing us to customize our Website according to your individual interests.
Speed up your searches.
Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
Web Beacons. Pages of our Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Website are served by third parties, including advertisers, ad networks and servers, content providers, and application providers.

These third-parties may use cookies and/or other tracking technologies to collect information about you when you use our website. The information they collect may be associated with your personal information, your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third-party tracking technologies, or how they may be used. Some third parties may permit you to opt out of their Cookies or Other tracking Technologies directly. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see “Your Rights and Choices,” below.

Share or Use Your Information

We may use information that we collect about you or that you provide to us, including any personal information, for one or more of the following purposes:

Our Website: operating and managing our Website; providing content and advertising to you, and communicating and interacting with you via our website.
Provision of services to you: providing our website and other services to you, including fulfilling your purchase orders; creating, maintaining, customizing and securing your account; improving and personalizing our content, products and services; providing you with support and respond to your inquiries.
Marketing communications: communicating with you via any means (including via email, telephone, text message, social media) and other information, in compliance with applicable law.
Communications and IT operations: communication with you; management of our communications systems; operation of IT security; and IT security audits.
Health, safety and legal compliance: to maintain the safety, security, and integrity of our website, products and services, databases and other technology assets, and business; compliance with legal obligations.
Analytics: to analyze and assess current and potential user markets; to create aggregated, de-identified and/or anonymized data.
Financial management: for sales, finance, corporate audit, and vendor management.
Surveys: engaging with you for the purpose of obtaining your views on our website, our services and products and industry views.
Your status as a medical customer is not used for marketing purposes, other than in the aggregate, or at your request, or with your consent.

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

To our subsidiaries and affiliates.
To our trusted contractors and service providers in compliance with our privacy policy and any other appropriate confidentiality and security measures.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Website users personal information is among the assets transferred.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the information.
With your consent.

We may also disclose your personal information:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
To enforce or apply our Terms of Use, other agreements, including for billing and collection purposes.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Company, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Your Rights and Choices

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Tracking Technologies and Advertising. You may be able to disable Cookies or Other Tracking Technologies through your browser settings. Please follow your browser’s instructions to determine what choices you have available to you through your browser. Similarly, your device may provide you with choices about Cookies and Other Web Technologies via your device settings. For example, you can also restrict the collection and/or use of advertising IDs on your mobile device. Please visit: https://www.networkadvertising.org/mobile-choice.
Disclosure of Your Information for Third-Party Advertising. If you do not want us to share your personal information with unaffiliated or non-agent third parties for promotional purposes, you have the right to opt-out, manage and object to the further use of non-functional cookies through our cookie panel. You can also disable the use of cookies via your browser, but please note that our website may no longer work properly. You can also send us an email with your request to legal@glasshousegroup.com.
Promotional Offers from the Company. If you do not wish to have your contact information used by the Company to promote our own or third parties’ products or services, you can opt-out by sending us an email stating your request to legal@glasshousegroup.com. If we have sent you a promotional email, you may send us a return email asking to be omitted from future email distributions. This opt out does not apply to information provided to the Company as a result of a product purchase, product service experience or other transactions.
Targeted Advertising. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target-audience preferences, you can opt-out by sending us an email stating your request to legal@glasshousegroup.com. We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way.  Additionally, you may be able to opt out of some of such third party’s practices by visiting the following links: Network Advertising Initiative, Adobe Privacy Choices, and Digital Advertising Alliance. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website.

Please note that disabling a Cookie or Other Web Technology or category of Cookies or Other Web Technologies does not delete the Cookies or Other Tracking Technologies from your browser unless manually completed through your browser function. For more information, please visit: https://www.allaboutcookies.org/manage-cookies/

Your Rights under GDPR

This section only applies to data subjects that are protected under the GDPR. You may exercise your rights by writing us an e-mail to legal@glasshousegroup.com and informing us of the reason for your request and the right that you wish to exercise. We may request you to provide a copy of a document evidencing your identity if we deem it is necessary. Subject to applicable law, you may have a number of rights regarding the processing of your personal information, including:

the right to request access, review, correct, or update your personal information that we process or control;
the right to request, on legitimate grounds: erasure of your personal information that we process or control; or restriction of processing of your personal information that we process or control;
the right to object, on legitimate grounds, to the processing of your personal information by us or on our behalf;
the right to have your personal information that we process or control transferred to another controller, to the extent applicable;
where we process your personal information on the basis of your consent, the right to withdraw that consent; and
the right to complain to a Data Protection Authority regarding the processing of your personal information by us or on our behalf.

For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority in the EEA.

Notice to California Residents

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information. To learn more about California residents’ privacy rights, visit California Consumer Privacy Statement.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on secure servers behind firewalls. Any payments will be encrypted using SSL technology.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Website. The information you share in public areas may be viewed by any user of the Website.]

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at:

legal@glasshousegroup.com.