Privacy Policy

We are Route 66 Hemp LLC. This privacy policy explains how we collect, use, and protect your personal information when you use our services.

Further information for California residents

About this section

This section supplements the rest of our Privacy Policy. It is provided by the business operating this website and, where applicable, its parent, subsidiaries, and affiliates (collectively, “we,” “us,” or “our”).

Applicability

This section applies to consumers residing in California under the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”) and related regulations. For these consumers, this section controls if it conflicts with other parts of the policy.

Definition

“Personal information” has the meaning given in the CCPA/CPRA.

Categories of personal information we collect

• We have collected the following categories of personal information:
  • Identifiers
  • Internet or other electronic network activity information
• We do not collect sensitive personal information.
• We will not collect additional categories without notice.

Purposes for using personal information

Business purposes. We use personal information to operate this website and its features. Processing is necessary and proportionate to the purposes for which the information was collected and limited to compatible operational uses.

Commercial/legal purposes. We may also use personal information for other commercial reasons, to comply with law, and to protect our rights and interests, including before competent authorities.

No incompatible use. We will not process personal information for unexpected or incompatible purposes without your consent.

Retention

Unless otherwise stated in Detailed information on the processing of personal data, we retain personal information only as long as reasonably necessary for the purposes for which it was collected (or longer if required by law).

Sources of personal information

We collect personal information directly and indirectly from you when you use this website.

Direct collection: e.g., when you submit a form.

Indirect collection: e.g., through your site navigation; certain data is observed/collected automatically.

Third parties: we may receive personal information from service providers and partners supporting the website and its features.

How we disclose, sell, or share information

Disclosure for business purposes. We may disclose personal information to third parties (not including “service providers” or “contractors” as defined by the CCPA) as listed in Detailed information on the processing of personal data. Those third parties are grouped by processing purpose.

Sale or sharing. “Sale” means providing personal information to a third party for monetary or other valuable consideration. “Sharing” means providing personal information to a third party for cross-context behavioral advertising (whether or not consideration is exchanged). Transfers to service providers under a compliant written contract are not “sales” or “sharing.”

Opt-out rights

We may sell or share your personal information as described above. You have the right to opt out at any time. You can contact us using the details at the start of this document or use the privacy choices link on this website. We honor user-enabled Global Privacy Control (GPC) signals. We will use any information provided with an opt-out request solely to comply with that request and will wait at least 12 months before asking you to re-authorize sale or sharing.

Your CCPA/CPRA rights and how to exercise them

Right to know and portability. You may request that we disclose:

• the categories of personal information we collected about you;
• the sources of that information;
• the purposes for which we use it;
• the categories of third parties to whom we disclose it; and
• the specific pieces of personal information we collected about you.

You also have the right to know what personal information we sold or shared and to whom, including two separate lists showing: (i) the categories sold or shared and the categories of third parties; and (ii) the categories disclosed for a business purpose and the categories of recipients. Disclosures generally cover the preceding 12 months (and beyond January 1, 2022 when technically feasible and not disproportionately burdensome). Electronic disclosures will be provided in a portable, readily usable format where feasible.

Right to delete. You may request deletion of your personal information, subject to legal exceptions (e.g., security, fraud prevention, debugging, or to fulfill transactions).

Right to correct. You may request correction of inaccurate personal information we maintain about you.

Right to opt out of sale/sharing and to limit use of sensitive personal information. You may opt out at any time. (We do not collect sensitive personal information.)

Non-discrimination. We will not discriminate against you for exercising your rights. If certain information is necessary to provide a service, we may be unable to complete a transaction without it. Where permitted, we may offer promotions or financial incentives reasonably related to the value of your information (e.g., bona fide loyalty or rewards programs).

How to submit a request

• Contact us using the details at the start of this document.
• Your request must provide sufficient information to verify your identity and describe the request with enough detail for us to respond.
• If we cannot verify your identity, we will not respond to the request.
• You do not need an account to make a request. Any information collected to verify your request will be used only for verification and retained no longer than necessary.
• Authorized agents registered with the California Secretary of State may act on your behalf. Adults may make requests for their minor children.
• You may submit up to two requests within a 12-month period.

Timing and our response

• We will confirm receipt within 10 days and explain our process.
• We will respond within 45 days. If more time is needed (up to a total of 90 days), we will tell you why and for how long.
• Our response will cover the preceding 12 months; for data collected on or after January 1, 2022, you may request disclosures beyond 12 months unless impossible or disproportionately burdensome.
• If we deny your request, we will explain why.
• We do not charge a fee unless a request is manifestly unfounded or excessive; in such cases we may charge a reasonable fee or refuse to act and will explain our decision.

Further information for Virginia residents

This section supplements the policy for residents of the Commonwealth of Virginia under the Virginia Consumer Data Protection Act (“VCDPA”). “Personal data” has the meaning given in the VCDPA.

Categories processed & purposes

See Detailed information on the processing of personal data and The purposes of processing for full details. We will not process your data for incompatible purposes without your consent. You may grant or withdraw consent at any time using the contact details provided.

Types of personal data we collect

• Identifiers and internet information
• We do not collect sensitive data.
• We will not add new categories without notice.

Sharing with third parties

We share personal data with third parties listed in Detailed information on the processing of personal data, grouped by processing purpose. “Third party” has the meaning in the VCDPA.

Sale

“Sale” means exchanging personal data for monetary consideration with a third party. Disclosures to processors acting on our behalf are not sales. Other VCDPA exceptions may apply. Our uses may, in some cases, be considered a sale under the VCDPA.

Opt-out of sale

You may opt out of the sale of your personal data at any time by contacting us using the details provided. We will use any information collected with your opt-out solely to comply with the request.

Targeted advertising

We do not currently process personal data for targeted advertising. If we choose to do so, we will inform you in advance and honor your right to opt out.

Your VCDPA rights

• Access: confirm whether we process your personal data and access it.
• Correct: request correction of inaccurate personal data.
• Delete: request deletion of personal data.
• Portability: obtain your data in a portable, usable format where technically feasible.
• Opt out: of targeted advertising, sale of personal data, or profiling producing legal or similarly significant effects.
• Non-discrimination: we will not discriminate for exercising your rights. Where permitted, we may offer different prices or benefits related to bona fide loyalty or rewards programs.

How to exercise your rights

• Submit a request using the contact details provided at the start of this document.
• We must verify your identity using commercially reasonable efforts; we may request additional information to authenticate you.
• You do not need to create an account, though we may require you to use an existing account. Any data collected for authentication will be used only for that purpose and retained no longer than necessary.
• Adults may submit requests for children under their parental authority.

Timing and appeals

• We will respond without undue delay and no later than 45 days; we may extend up to 90 days with notice.
• If we deny your request, you may appeal using the contact details provided. We will respond in writing within 60 days with our decision and reasons. If denied, you may contact the Virginia Attorney General.
• We do not charge a fee for up to two requests per year unless a request is manifestly unfounded, excessive, or repetitive.

Further information for Colorado residents

This section supplements the policy for Colorado residents under the Colorado Privacy Act (“CPA”). “Personal data” has the meaning in the CPA.

Categories processed & purposes

See Detailed information on the processing of personal data for full details. We will not process data for incompatible purposes without your consent; you may grant or withdraw consent at any time using the contact details provided.

Categories we collect

• Identifiers and internet information
• We do not collect sensitive data.
• No new categories will be collected without notice.

Sharing with third parties

We share personal data with third parties listed in Detailed information on the processing of personal data, grouped by purpose. “Third party” has the meaning in the CPA.

Sale

Our use of personal data may be considered a “sale” under the CPA (exchange for monetary or other valuable consideration). Disclosures to processors are not sales; other CPA exceptions may apply.

Opt-out of sale

You may opt out of the sale of your personal data at any time via the contact details at the start of this document or via the privacy choices link on this website. Information collected to process an opt-out is used solely for that purpose.

Targeted advertising

We do not currently process personal data for targeted advertising. If we choose to do so, we will inform you and honor your right to opt out. “Targeted advertising” has the meaning in the CPA and does not include contextual ads, first-party ads, direct responses to your requests, or measurement/reporting alone.

Your CPA rights

• Opt out of targeted advertising, sale of personal data, or profiling with legal or similarly significant effects.
• Access personal data and confirm whether we process it.
• Correct inaccurate personal data.
• Request deletion of personal data.
• Obtain a portable copy where technically feasible.

We will not increase price or decrease availability solely because you exercise your rights. Where permitted, we may offer different prices or benefits related to bona fide loyalty or rewards programs.

How to exercise your rights

• Submit a request using the contact details provided.
• We must verify your identity and understand which right you wish to exercise; we may request additional information.
• You do not need to create an account, though we may require use of an existing account. Authentication data will be used only for that purpose and retained no longer than necessary.
• Adults may submit requests for children under their parental authority.

Timing and appeals

• We will respond within 45 days; we may extend up to 90 days with notice.
• If we deny your request, you may appeal. We will respond within 45 days with reasons. If denied, you may contact the Colorado Attorney General.
• No fee for up to two requests per year.

Further information for Connecticut residents

This section supplements the policy for Connecticut residents under the Connecticut Data Privacy Act (“CTDPA”). “Personal data” has the meaning in the CTDPA.

Categories processed & purposes

See Detailed information on the processing of personal data and The purposes of processing for details. We will not process data for incompatible purposes without your consent; you may grant or withdraw consent at any time.

Categories we collect

• Identifiers and internet information
• We do not collect sensitive data.
• No new categories will be collected without notice.

Sharing with third parties

We share personal data with third parties listed in Detailed information on the processing of personal data, grouped by purpose. “Third party” has the meaning in the CTDPA.

Sale

Our use of personal data may be considered a “sale” under the CTDPA (exchange for monetary or other valuable consideration). Disclosures to processors are not sales; other CTDPA exceptions may apply.

Opt-out of sale

You may opt out at any time using the contact details provided or the privacy choices link on this website. Information used to process an opt-out is used only for that purpose.

Targeted advertising

We do not currently process personal data for targeted advertising. If we choose to do so, we will inform you and honor your right to opt out. “Targeted advertising” has the meaning in the CTDPA and excludes contextual/first-party ads, direct responses, and measurement/reporting alone.

Your CTDPA rights

• Access personal data and confirm whether we process it
• Correct inaccurate personal data
• Request deletion of personal data
• Obtain a portable copy where technically feasible
• Opt out of targeted advertising, sale of personal data, or profiling with legal or similarly significant effects

We will not increase price or decrease availability solely because you exercise your rights. Where permitted, we may offer different prices or benefits related to bona fide loyalty or rewards programs.

How to exercise your rights

• Submit a request using the contact details provided.
• We must verify your identity and understand the right you wish to exercise; we may request additional information.
• You do not need to create an account, though we may require use of an existing account. Authentication data will be used only for that purpose and retained no longer than necessary.
• Adults may submit requests for children under their parental authority.

Timing and appeals

• We will respond within 45 days; we may extend up to 90 days with notice.
• If we deny your request, you may appeal. We will respond within 45 days with reasons. If denied, you may contact the Connecticut Attorney General.
• No fee for up to one request per year.

Further information for Utah residents

This section supplements the policy for Utah residents under the Utah Consumer Privacy Act (“UCPA”). “Personal data” has the meaning in the UCPA.

Categories processed & purposes

See Detailed information on the processing of personal data for details.

Categories we collect

• Identifiers and internet information
• We do not collect sensitive data.
• No new categories will be collected without notice.

Sharing with third parties

We share personal data with third parties listed in Detailed information on the processing of personal data, grouped by purpose. “Third party” has the meaning in the UCPA.

Sale

Our use of personal data may be considered a “sale” under the UCPA (exchange for monetary or other valuable consideration). Disclosures to processors are not sales; other UCPA exceptions may apply.

Opt-out of sale / targeted advertising

You may opt out of the sale of personal data and targeted advertising at any time using the contact details at the start of this document or the privacy choices link on this website. Information used to process an opt-out is used only for that purpose.

We do not currently process personal data for targeted advertising. If we choose to do so, we will inform you and honor your right to opt out. “Targeted advertising” has the meaning in the UCPA.

Your UCPA rights

• Access personal data and confirm whether we process it
• Request deletion of personal data
• Obtain a portable copy where technically feasible
• Opt out of targeted advertising or sale of personal data

We will not increase price or decrease availability solely because you exercise your rights. Where permitted, we may offer different prices or benefits related to bona fide loyalty or rewards programs.

How to exercise your rights

• Submit a request using the contact details provided.
• We must verify your identity and the right you wish to exercise; we may request additional information. We may retain your email address to respond to your request.
• Adults may submit requests for children under their parental authority.

Timing

• We will respond within 45 days; we may extend up to 90 days with notice.
• If we deny your request, we will explain why.
• No fee for up to one request per year.

Information about this document

Additional information about data collection and processing

Legal action. We may use personal data to protect our rights in court or before authorities arising from misuse of the website or related services. We may be required to disclose personal data upon lawful request by public authorities.

Additional information. We may provide further contextual notices about specific services or processing upon request.

System logs and maintenance. For operation and maintenance, this website and third-party services may collect system logs or other personal data (e.g., IP address).

Information not contained here. You may request more details about collection or processing at any time using the contact information at the start of this document.

Changes to this policy. We may update this policy by posting changes on this page and, where feasible, within the website or via available contact details. Please check the “Last updated” date. If changes affect processing based on your consent, we will seek new consent where required.

Definitions and legal references

Personal data (or “data”): Information that identifies or can be used to identify a natural person, directly or indirectly (e.g., name, ID number).

Usage data: Information collected automatically by this website or third-party services (e.g., IP address, browser, OS, request time/method, response status, visit duration, pages visited, device details).

This website: The means by which personal data is collected and processed.

Service: The service provided by this website as described in the Terms of Service and on this site.

European Union (EU): References include EU Member States and, unless stated otherwise, the European Economic Area.

Cookie: A tracker consisting of small data stored in your browser.

Tracker: Any technology (e.g., cookies, identifiers, web beacons, embedded scripts, e-tags, fingerprinting) that enables tracking or access/storage of information on your device.

Legal information: This privacy statement is prepared based on multiple laws. It applies solely to this website unless stated otherwise.