Privacy Policy

Updated: June 11, 2025

INTRODUCTION

Tree Of Life Dispensary (“Tree Of Life,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information we collect about you. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our retail cannabis dispensary, use our website at www.treeoflifenv.com, engage with our delivery and curb‑side pickup services, join our loyalty or text‑message programs, or otherwise interact with us (collectively, the “Services”). Please read this Policy carefully. By accessing or using our Services, you acknowledge that you have read and understood this Policy.

SCOPE

This Policy applies to personal information we collect from and about customers and visitors who are (i) at least 21 years of age (or 18 with valid medical‑use authorization) and located in the United States, and (ii) residents of the State of Nevada or any other state from which it is legal to purchase cannabis products under Nevada law. This Policy does not apply to Tree Of Life employees or job applicants, or to information regulated by the Health Insurance Portability and Accountability Act (“HIPAA”).

INFORMATION WE COLLECT

We collect information in the categories listed below, which may be considered “personal information,” “personal data,” or “consumer health data” under applicable laws.

3.1 Information You Provide Directly

  • Identifying details – name, mailing address, email address, telephone number, date of birth, government‑issued ID number and images (e.g., driver’s license).
  •  Purchase & transaction records – products purchased, delivery address, in‑store pickup time, payment method (note: credit/debit card details are processed by our PCI‑compliant payment processor and are not stored by us).
  •  Loyalty & marketing preferences – program membership number, communication preferences, responses to promotions, demographic information you choose to give us, and survey feedback.
  • Customer support interactions – messages, call recordings, or emails you send to us.

3.2 Information Collected Automatically

  • Device & usage data – IP address, browser type, device identifiers, referring URL, pages viewed, and the date/time you access the Services, collected via cookies, pixels, and similar technologies.•
  • Geolocation data – imprecise location derived from your IP address or, if you grant permission in our mobile experience, precise GPS coordinates to enable delivery tracking.•
  • In‑store CCTV – video footage captured on‑premises for loss‑prevention and security.

3.3 Sensitive Categories

Because cannabis use may relate to an individual’s health and wellness, some of the information we collect (e.g., medical card status, purchase history) could be classified as “consumer health data” under Nevada Senate Bill 370 (2023). We handle such information in accordance with that law’s heightened requirements.

HOW WE USE INFORMATION

We use personal information to:

  • Verify age and identity to comply with Nevada Cannabis Compliance Board (“CCB”) regulations;
  • Process, fulfill, and deliver orders and manage payments and returns;
  • Operate, maintain, and improve our store, website, and mobile experiences; Administer loyalty, text‑message, and promotional programs;
  • Respond to inquiries, provide customer support, and resolve disputes;
  • Conduct analytics, market research, and develop new products and services;
  • Detect, investigate, and prevent fraud, theft, and security incidents;
  • Satisfy legal obligations and law‑enforcement requests; and• Establish, defend, or exercise our legal rights.

HOW WE SHARE INFORMATION

We do not sell personal information in exchange for money. However, Nevada law considers certain disclosures to third parties in exchange for monetary consideration to be a “sale” and gives residents the right to opt out. We share information only:

  • With service providers who perform functions on our behalf (e.g., age‑verification vendors, payment processors, delivery partners, SMS platforms, web‑hosting, and analytics providers) and who are bound by contractual obligations to protect it;
  • With government agencies such as the Nevada CCB or local law enforcement when required by law;
  • Within our corporate group, in connection with a business transfer or bankruptcy; and
  • When we believe disclosure is necessary to protect rights, safety, or property, or to comply with court orders or subpoenas.

YOUR PRIVACY RIGHTS

6.1 Rights for Nevada Residents

Under Nevada Revised Statutes §603A and SB 220, you may: (a) request to review or delete certain personal information we maintain about you; and (b) direct us not to sell covered personal information. To exercise these rights, submit a request as described in Section 7. We will respond within 60 days as the law requires.

6.2 Rights for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”), including the rights to access, correct, delete, limit the use of sensitive personal information, and opt out of targeted advertising or the sale or sharing of personal information.

6.3 Rights Under Other U.S. State Laws

Residents of Colorado, Connecticut, Utah, Virginia, and other states with consumer privacy statutes may have comparable rights. We will honor requests consistent with applicable law.

HOW TO EXERCISE YOUR RIGHTS

You may submit a verifiable consumer request by emailing us at info@treeoflifenv.com. We may need to verify your identity (e.g., matching at least two data points) before processing your request. Authorized agents may submit requests on your behalf if they provide proof of authorization.

DATA RETENTION

We keep personal information only as long as reasonably necessary to fulfil the purposes set out in this Policy, comply with record‑keeping obligations under NRS 678B.605 and CCB regulations (typically 2 years for sales logs), resolve disputes, or enforce agreements.

SECURITY

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, role‑based access controls, and routine vulnerability assessments. No security measures are perfect, and we cannot guarantee absolute security.

COOKIES & ONLINE TRACKING

We use first‑ and third‑party cookies, pixels, and similar tools for website functionality, analytics, and marketing. You can manage cookies through your browser settings. We do not respond to “Do Not Track” signals at this time.

AGE RESTRICTIONS

The Services are intended only for adults 21+ (or 18+ medical). We do not knowingly collect personal information from anyone under 18. If we learn that we have done so, we will delete that information.

CHANGES TO THIS POLICY

We may update this Policy from time to time. If we make material changes, we will post the updated Policy and change the “Last Updated” date above. Your continued use of the Services after the effective date of the revised Policy constitutes acceptance.

CONTACT US

If you have questions or concerns about this Policy or our privacy practices, please contact us at info@treeoflifenv.com