About Twenty8Gramz – Brooklyn NY Cannabis Dispensary

Privacy Policy for Twenty8Gramz

Last Updated: June 1, 2026

Twenty8Gramz (“Twenty8Gramz,” “we,” “us,” or “our”), operated by [Supply Design LLC] , doing business as (“DBA”) Twenty8Gramz, operates the website https://twenty8gramz.com/ (the “Site”), our mobile application (if applicable), and our retail location at 2201 Avenue U, Brooklyn, NY 11229.

This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you use our website, mobile application, retail services, loyalty program, and related services.

By using our Site, mobile application, or services, you agree to the terms of this Privacy Policy.

1. AGE RESTRICTION (21+)

In compliance with New York State law and Office of Cannabis Management (OCM) regulations, our services are intended solely for adults aged 21 and older.

Visitors may be required to confirm that they are at least 21 years of age through an age-verification or age-gate mechanism before accessing certain content or services.

Additional age verification may be required during account registration, ordering, delivery, or in-store purchases through government-issued identification.

We do not knowingly collect personal information from individuals under the age of 21. If we learn that we have collected personal information from anyone under 21, we will promptly delete such information.

Please note that this Privacy Policy page itself remains accessible and is not age-gated as required for legal transparency and regulatory compliance.

2. INFORMATION WE COLLECT

Personal Information

Personally identifiable information that you voluntarily provide, including:

• Name

• Email address

• Telephone number

• Billing address

• Delivery address

• Date of birth

• Loyalty program information

• Account registration details

Government Identification Information

Where required by law, we may collect or review government-issued identification to verify age and identity during in-store purchases, delivery transactions, account verification, or regulatory compliance activities.

Transaction Information

Information related to purchases, orders, rewards, promotions, and transaction history.

Financial Information

Financial information related to payment methods used for transactions. Most cannabis transactions may be processed through specialized payment processors or cash payment systems.

We generally do not store complete payment card information on our systems.

Device and Technical Information

We may automatically collect information including:

• IP address

• Browser type

• Browser version

• Operating system

• Device type

• Device model

• Mobile carrier

• Device identifiers

• Android Advertising ID (AAID)

• Application version

• Access times

• Pages viewed

• Clickstream data

• Referring URLs

• Usage activity

• Crash logs

• Performance diagnostics

Cookies and Tracking Information

We may collect information through:

• Cookies

• Pixels

• Web beacons

• SDK technologies

• Analytics tools

• Similar tracking technologies

3. HOW WE USE YOUR INFORMATION

We may use collected information to:

• Verify age and identity as required by law

• Process transactions and fulfill orders

• Manage customer accounts

• Operate loyalty and rewards programs

• Provide customer support

• Send transactional communications

• Send marketing communications where permitted by law

• Improve website and application functionality

• Analyze trends and usage patterns

• Detect fraud and security incidents

• Comply with legal obligations

• Meet New York State cannabis regulatory requirements

• Maintain business records and reporting obligations

4. DISCLOSURE OF YOUR INFORMATION

We may share information in the following circumstances:

Legal Compliance

We may disclose information when required by law, court order, subpoena, regulatory request, or governmental authority.

Regulatory Agencies

We may provide information to the New York State Office of Cannabis Management (OCM), law enforcement agencies, tax authorities, or other regulatory bodies as required by applicable laws and regulations.

Service Providers

We may share information with third-party service providers that assist us with:

• Website hosting

• Mobile app hosting

• Payment processing

• Loyalty and rewards programs

• Customer relationship management

• Analytics

• Email delivery

• SMS communications

• Security monitoring

• Technical support

• Cloud storage

Business Transfers

Information may be transferred as part of a merger, acquisition, financing, asset sale, or business restructuring.

5. THIRD-PARTY SERVICES, SDKS, AND ANALYTICS

We may use third-party technologies, software development kits (“SDKs”), analytics services, and business partners to support our operations.

Depending on the services implemented, these may include:

• Google Analytics

• Google Firebase

• OneSignal

• Twilio

• Dutchie

• Alpine IQ

• Springbig

• Website hosting providers

• Payment processors

• Loyalty and rewards platforms

• Customer support platforms

These providers may collect or process information including device identifiers, usage information, IP addresses, diagnostics, analytics data, and account-related information as necessary to provide services on our behalf.

Please update this list periodically as services may change.

6. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, tracking technologies, SDKs, pixels, and similar technologies to:

• Remember preferences

• Improve website performance

• Measure marketing effectiveness

• Analyze user activity

• Maintain security

• Personalize user experiences

Most browsers allow users to manage cookie preferences. Disabling cookies may affect certain website functionality.

7. SECURITY OF YOUR INFORMATION

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.

Despite these efforts, no internet transmission or electronic storage method can be guaranteed to be completely secure.

8. DATA RETENTION

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Customer account information will generally be retained while the account remains active and for up to 30 days after account deletion, unless a longer retention period is required by applicable law, regulatory obligations, tax requirements, litigation holds, or cannabis compliance recordkeeping requirements.

Transaction records and regulatory compliance records may be retained for longer periods as required by New York State cannabis regulations and other applicable laws.

When information is no longer required, we will securely delete, anonymize, or destroy it where reasonably practicable.

9. MOBILE APPLICATION DATA

When you use our mobile application, we may collect technical information including:

• Device type

• Device identifiers

• Operating system version

• Mobile carrier

• IP address

• Application version

• Usage analytics

• Diagnostic information

• Performance information

• Crash reports

This information helps us improve functionality, maintain security, troubleshoot technical issues, and enhance user experience.

10. YOUR PRIVACY RIGHTS

Depending on your jurisdiction, including New York, California, the European Union, or other applicable regions, you may have the right to:

• Request access to personal information we hold

• Request correction of inaccurate information

• Request deletion of personal information

• Request portability of your information

• Opt out of marketing communications

• Request information regarding categories of data shared with third parties

• Withdraw consent where processing is based on consent

To exercise these rights, contact us using the information below.

11. DO NOT TRACK

Some browsers offer a “Do Not Track” feature. Because there is currently no uniform industry standard for responding to such signals, our website may not respond to Do Not Track requests.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically.

Any changes will become effective upon posting the updated Privacy Policy on our website or mobile application. Continued use of our services after changes are posted constitutes acceptance of those changes.

13. CONTACT US

Twenty8Gramz

Operated by: Supply Design LLC

DBA: Twenty8Gramz

2201 Avenue U

Brooklyn, NY 11229

United States

Email: info@twenty8gramz.com

Phone: 718-490-3614

Website: https://twenty8gramz.com/

DISCLAIMER

This Privacy Policy is provided for informational purposes only and does not constitute legal advice. Cannabis laws and privacy regulations may change over time. We recommend consulting qualified legal counsel familiar with New York cannabis regulations, privacy laws, and mobile application compliance requirements to ensure ongoing compliance.