Privacy
What we collect, what we deliberately do not, and who it is shared with.
What we collect
| When | What | Why |
|---|---|---|
| You place an order | Name, email, phone, delivery address, order contents | To fulfil it, to email your receipt, and to satisfy the record-keeping cannabis regulators require |
| You confirm your age | Nothing. A flag is stored in your own browser | So you are not asked again on this device |
| You add to your bag or wishlist | Bag lines live in your session; a signed-in wishlist is stored with your account | So they survive a page reload |
| You subscribe | Email address | To send marketing notes. One click unsubscribes |
| You visit a page | Necessary cookies for the bag, age acknowledgement and sign-in | To keep the storefront working. Analytics stays off unless you enable it |
What we do not collect
- No payment card numbers. Checkout uses Cash App, Chime or Apple Pay. We never store a card number.
- No identification documents. ID is checked visually at handover and handed straight back.
- No purchase profile for advertising. We do not build one, and we do not sell one.
- No third-party analytics unless you opt in. Necessary cookies stay on. Analytics and marketing cookies stay off until you enable them in cookie preferences.
Who it is shared with
Three parties, and no others: the delivery driver (name, address, phone — they need to find you); our email relay (your address and the receipt); and the state regulator, where the law requires a record of the sale. We do not sell, rent or trade personal information to anybody, for any purpose.
What the packaging discloses
A delivery is the one part of an order other people can see, so it is treated as a privacy matter and not just a fulfilment one. The outer packaging carries no brand, no leaf, no dispensary name and no product reference — only the address and the carrier label — and every item inside is sealed in an opaque, odour-proof pouch. Drivers use unmarked vehicles, wear nothing branded, and do not say what they are carrying.
The exception is the packing note inside, which must carry the batch references and the warnings state law requires. We cannot remove those. The full detail is in Delivery & shipping.
How long we keep it
Order records are retained for as long as the relevant state requires — typically three to seven years — because a cannabis licence depends on producing them on request. Newsletter subscriptions are held until you unsubscribe.
Your rights
You can ask what we hold about you, ask for it to be corrected, ask for a copy, or ask for it to be deleted. Write to sales@goodvibesgreen.com or use the contact form and we will respond within 30 days. Deletion is subject to the retention periods above: we cannot delete an order record the regulator requires us to keep, and we will tell you plainly when that applies.
If you are a California resident, the CCPA gives you these rights explicitly, plus the right not to be discriminated against for exercising them. We do not sell personal information, so there is nothing to opt out of.
Security
Traffic is encrypted in transit on a production host. Passwords are stored as one-way hashes. Administrative writes are recorded. Payment card numbers are never collected.
Children
This site is not directed at anybody under 21 and we do not knowingly collect information from minors. If you believe a minor has given us information, tell us and we will delete it.
Last updated 19 September 2026. Questions? Talk to our team.