Privacy Policy

Last Updated: [07.06.2026]

I-5 Cannabis a California licensed cannabis retailer (DCC License No. [C10-XXC10-0001682-LIC]), located at 130 N Butte Street, Suite AB, Willows, CA 95988 ("Company," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit [i5cannabis.com] (the "Site") or interact with us in-store, including for required age and identity verification.

a. Information you provide directly:

• Name, date of birth, email address, phone number, and mailing address (e.g., when creating an account, joining a loyalty program, or placing an order for pickup)
• Government-issued ID information collected for age verification, either online (e.g., third-party age-gate verification) or in person at our retail counter
• California medicinal cannabis patient recommendation information, if applicable
• Order history and product preferences
• Communications you send us (customer service inquiries, feedback forms)

b. Information collected automatically:

• IP address, browser type, device identifiers, and general geolocation
• Pages visited, time spent on Site, referring/exit pages, and clickstream data
• Cookies and similar tracking technologies (see Section 6)

c. Information from third parties:

• Age-verification service providers
• Point-of-sale and Metrc track-and-trace system data (as required by the California Department of Cannabis Control for compliance purposes)
• Payment processors (we do not store full payment card numbers; these are handled by PCI-compliant third-party processors)

We use the information we collect to:

• Verify that you are 21 years of age or older (or a qualifying medicinal patient) before permitting purchase, consistent with DCC regulations
• Process and fulfill in-store pickup orders [and delivery orders, if applicable]
• Comply with state-mandated purchase-limit tracking and Metrc reporting requirements
• Communicate with you about your orders, account, or customer service requests
• Send marketing communications, promotions, or loyalty program updates, where you have opted in
• Maintain security of our Site and premises, and prevent fraud
• Comply with legal obligations, including recordkeeping required by the DCC, California Bureau of Cannabis Control successor agencies, and local licensing authorities

California law requires cannabis retailers to verify that customers are 21 years of age or older (or 18+ with a valid medicinal recommendation) before completing any sale. We collect and briefly review government-issued identification for this purpose. We do not retain copies of your ID [or: "We retain ID verification records only as required under DCC recordkeeping regulations, currently [X years]" — adjust based on your actual retention practice], and this information is used solely to confirm eligibility to purchase.

We do not sell your personal information for monetary consideration. We may share information with:

• State and local regulators, including the DCC, as required for licensing compliance, Metrc track-and-trace reporting, and inspections
• Service providers, such as point-of-sale platforms, payment processors, age-verification vendors, email/SMS marketing platforms, and IT hosting providers, under contractual confidentiality obligations
• Law enforcement or government authorities, when required by subpoena, court order, or applicable law
• Successors, in the event of a merger, acquisition, or sale of business assets, subject to standard confidentiality protections

We do not share your cannabis purchase history, medicinal patient status, or ID information with data brokers or advertisers for cross-context behavioral advertising without your explicit opt-in consent, consistent with CCPA/CPRA restrictions on sensitive personal information.

If you are a California resident, you have the right to:

• Know what personal information we have collected, used, disclosed, and sold (if applicable) about you
• Delete personal information we have collected from you, subject to certain exceptions (e.g., records we are legally required to retain for DCC compliance)
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information (we do not currently sell personal information)
• Limit the use of sensitive personal information, which under CPRA includes precise geolocation and, in our view, cannabis purchase and medicinal patient information
• Non-discrimination for exercising any of these rights

To exercise these rights, contact us using the information in Section 9. We will verify your identity before processing your request, consistent with CCPA/CPRA requirements. You may also designate an authorized agent to submit a request on your behalf.

We use cookies and similar technologies to operate the Site, remember your preferences (such as age-gate confirmation), analyze traffic, and, where you consent, support marketing efforts. You can control cookies through your browser settings; disabling cookies may affect Site functionality, including the age verification gate. [If using analytics/ad tech: "We use [Google Analytics / other tool] to understand Site usage. You may opt out via [opt-out mechanism]."]

We maintain reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, or disclosure, consistent with DCC security requirements for licensed retailers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information, including age-verification and transaction records, for as long as necessary to fulfill the purposes described in this policy and to comply with DCC recordkeeping requirements, which currently require licensees to maintain certain records for a minimum retention period set by regulation. [Confirm current retention period with counsel — commonly cited as at least 7 years for financial/compliance records under DCC rules.]

This Site is not intended for individuals under 21 years of age (or under 18 for medicinal patients), and we do not knowingly collect personal information from anyone under 21 [or 18, if applicable]. If we learn we have inadvertently collected such information, we will delete it.

We may update this Privacy Policy periodically. The "Last Updated" date above reflects the most recent revision. Material changes will be posted on this page, and where required by law, we will provide additional notice.

Questions or requests regarding this Privacy Policy or your personal information may be directed to:

I-5 Cannabis; 130 N. Butte Street, Suite AB, Willows, CA 95988 [530-982-6940] [Email admin@i15cannabis.com) DCC License No. [C10-0001682-LIC]