Privacy Policy

Effective date: August 23, 2026

This policy explains what cannacar ® collects, why we collect it, and the choices you have. It is written by cannacar ® and describes our own practices only.

What we collect

• Account details — name, email address, phone number, and password credentials handled by our authentication provider.
• Age and patient verification — date of birth, a government-issued photo ID image, a selfie, and medical cannabis certification details where your state requires them.
• Order and delivery data — delivery address, order contents, delivery status, and the handoff record (including signature) captured at the door.
• Device and log data — IP address, browser type, and error reports used to keep the site working.
• Waitlist data — email, and optionally phone number and ZIP code, when you ask to be notified about availability.

Why we collect it

To create and secure your account, confirm you are legally permitted to receive cannabis in your state, route and complete deliveries through licensed dispensaries and drivers, keep the records that state cannabis regulators require of delivery platforms, and send you transactional messages about your orders. Marketing email is sent only to people who asked for it, and every marketing email has an unsubscribe link.

Who we share it with

We do not sell your personal information. We share only what is needed to complete what you asked for: the licensed dispensary filling your order, the delivery driver assigned to it, and the service providers that host our infrastructure, send our email, and process payments. We also disclose information when a law, subpoena, or state cannabis regulator requires it.

Cookies and tracking

cannacar ® runs no third-party advertising pixels. Essential cookies and local storage keep you signed in and remember your age-gate confirmation, cart, and delivery address. Anything optional stays off until you turn it on, and you can change your mind at any time:

How long we keep it

Account and order records are kept while your account is active and afterwards for the period state cannabis and tax rules require us to retain delivery records. Verification images are retained only as long as needed for compliance with the state program that required them.

Your rights

Depending on where you live — including California (CCPA/CPRA), Colorado, Virginia, Connecticut, Utah, and the EU/UK under GDPR — you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of marketing and of the sharing of your data. We do not charge for these requests and we do not treat you differently for making one. Use the form below and we will verify your identity using the email on file.

Where we cannot fully delete data — for example order records we are legally required to retain — we will tell you which records were kept and why.

Children

cannacar ® is not for anyone under 21. We do not knowingly collect information from minors, and accounts found to belong to minors are removed.

Changes and contact

We will update the effective date above when this policy changes. Questions or privacy requests can also be sent to privacy@cannacar.com. To stop marketing email immediately, use the unsubscribe link in any message.