Privacy Policy
Last updated: March 1, 2024
Table of Contents
1. Introduction
This Privacy Policy explains how Roots ("we", "our", or "us") collects, uses, shares, and protects personal information when you use our website, mobile applications, and services (collectively, the "Services").
By using our Services, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and ensuring the security of your personal information.
2. Information We Collect
We collect several types of information to provide and improve our Services:
Personal Information
- Name, email address, phone number - Date of birth (for age verification) - Government-issued ID information - Delivery addresses - Payment information
Usage Information
- Device information (IP address, browser type, operating system) - Pages visited and features used - Time spent on pages - Click patterns and navigation behavior
Location Information
- General location based on IP address - Precise location (with your permission) for delivery services
Communications
- Customer service interactions - Survey responses - Marketing preferences
3. How We Use Your Information
We use the information we collect for various purposes:
Service Delivery
- Processing and fulfilling orders - Verifying age and identity - Providing customer support - Communicating about orders
Personalization
- Customizing your experience - Recommending products - Remembering preferences
Security & Compliance
- Fraud prevention - Regulatory compliance - Age verification - Identity verification
Improvement
- Analyzing usage patterns - Improving our Services - Developing new features - Testing functionality
Marketing
- Sending promotional communications (with consent) - Personalized offers - Loyalty program updates
4. How We Share Information
We may share your information in the following circumstances:
With Dispensary Partners
We share necessary order information with dispensaries to fulfill your orders.
With Delivery Partners
Delivery drivers receive delivery address and order information to complete deliveries.
With Service Providers
We work with third-party companies for payment processing, analytics, marketing, and other services.
For Legal Compliance
We may disclose information when required by law or to respond to legal requests.
Business Transfers
In case of merger, acquisition, or sale, customer information may be transferred.
With Your Consent
We share information when you give explicit consent.
5. Data Security
We implement robust security measures to protect your information:
- **Encryption**: All data transmission is encrypted using SSL/TLS
- **Secure Storage**: Data is stored on secure servers with restricted access
- **Access Controls**: Employee access to personal data is limited and monitored
- **Regular Audits**: We conduct regular security assessments
- **Incident Response**: We have procedures to address security incidents
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide our Services
- Comply with legal obligations
- Resolve disputes
- Enforce agreements
Retention Periods
- Account information: Duration of account plus 7 years - Order history: 7 years for tax and legal compliance - Marketing data: Until consent is withdrawn - Age verification records: As required by law
You can request deletion of your data (subject to legal requirements) by contacting us.
7. Your Privacy Rights
Depending on your location, you may have the following rights:
**Access**: Request a copy of your personal information **Correction**: Request correction of inaccurate information **Deletion**: Request deletion of your information **Portability**: Receive your data in a portable format **Opt-Out**: Opt out of marketing communications **Do Not Sell**: California residents can opt out of sale of personal information
Exercising Your Rights
To exercise any of these rights, contact us at privacy@rootshtx.co or through your account settings.
California Residents
Under the CCPA, you have additional rights including the right to know what personal information is collected, sold, or disclosed.
9. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing personal information.
10. Children's Privacy
Our Services are not intended for anyone under the age of 21. We do not knowingly collect personal information from individuals under 21. If we become aware of such collection, we will take steps to delete the information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on our website
- Sending an email notification
- Displaying a notice in our app
Your continued use of our Services after changes indicates acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our privacy practices:
**Email**: privacy@rootshtx.co **Mail**: Roots Privacy Team, 123 Cannabis Way, Suite 400, San Francisco, CA 94102 **Phone**: 1-800-ROOTS (1-800-76687)
Data Protection Officer
For privacy-related concerns, contact our DPO at dpo@rootshtx.co
Related policies and information: