The Garden Club (“we,” “us,” or “the Club”) is a New York State licensed adult-use cannabis retail dispensary. This Privacy Policy explains what information we collect through our website at thegardenclubbk.com (the “Site”) and our retail operations, how we use and share it, and the choices you have. Cannabis purchase records are regulated by New York State; we treat them with the discretion that requires.
1. Information we collect
Account & loyalty data — when you create an account or join the loyalty program, we collect your name, email address, mobile phone number, date of birth, and any preferences you provide. Identity verification at pickup is performed in store; we do not retain a scanned copy of your ID through this Site.
Order data — products selected, pickup times, order totals, applied discounts, and points earned or redeemed.
Communications — messages you send us by email, text, or web form, and the content of any review or feedback you choose to share. If you opt in to SMS, we collect mobile-carrier metadata used to deliver and confirm those messages.
Site usage — pages viewed, referring URL, approximate location derived from IP address, device type, browser, and a session cookie used to keep you signed in. We may use first-party analytics to understand which menu sections perform.
Age verification — when you complete the age gate we record only that you affirmed you are 21 or older, plus a timestamp; we do not collect a copy of your ID through the Site.
2. How we use information
- To accept, fulfill, and confirm your in-store pickup orders.
- To verify eligibility (21+, New York presence) at the time of order and pickup.
- To operate the loyalty program, including earning, redeeming, and expiring points.
- To send order updates, pickup-ready notifications, and — if you have opted in — promotional messages. You can stop promotional SMS at any time by replying STOP.
- To improve the Site, troubleshoot bugs, and prevent fraud or abuse.
- To meet record-keeping and reporting requirements imposed by the New York Office of Cannabis Management (“OCM”) and other regulators.
3. Information we do not collect or sell
We do not sell your personal information. We do not share cannabis purchase data for third-party advertising. We do not enroll customer phone numbers in shared SMS lists, and SMS opt-in data is not used for any purpose other than the messages you have consented to receive.
4. Cookies & analytics
We use a minimal set of cookies to keep you signed in (an HttpOnly session cookie), remember the contents of your cart, and measure aggregate Site usage. You can clear cookies at any time through your browser. Disabling cookies will sign you out and may break in-cart features.
5. Service providers we share data with
We share the minimum data necessary with vendors who help us run the business, each under a written agreement that limits how they may use your information:
- Alpine IQ — loyalty program, SMS verification, points balances, and customer messaging consents.
- Dutchie / point-of-sale provider — order fulfillment, inventory, and tax reporting.
- Hosting and analytics providers — to keep the Site online and measure aggregate traffic.
We may also disclose information when required by law, in response to valid legal process, or to protect the rights, property, or safety of The Garden Club, our customers, or the public.
6. Retention
We retain order records for the period required by the OCM and applicable tax law. We retain account and loyalty data while your account is open, plus a reasonable period after closure for fraud prevention and reporting. SMS opt-in/opt-out logs are retained for compliance purposes.
7. Your rights & choices
You may request access to or correction of your account information, ask us to close your account, or unsubscribe from marketing communications. Email info@thegardenclubbk.com from the address on file and we will respond within thirty (30) days. New York residents may have additional rights under New York law; California residents have rights under the CCPA/CPRA, and we will honor verifiable requests to know, delete, or correct personal information consistent with applicable law.
8. Security
We use encryption in transit, HttpOnly signed session cookies, and access controls to protect your information. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security. If we learn of a breach affecting your data we will notify you and the appropriate authorities as required by law.
9. Children
The Site is intended only for adults aged 21 or older. We do not knowingly collect personal information from anyone under 21. If we learn we have done so we will delete it. If you believe a minor has used the Site or provided us information, contact info@thegardenclubbk.com.
10. Updates to this policy
We may update this policy as our business or the law evolves. The date at the top of this page reflects the most recent revision. Material changes will be highlighted on the Site for a reasonable period.
11. Contact
The Garden Club · 227 Smith Street, Brooklyn, NY 11231 · info@thegardenclubbk.com