Privacy Policy

Super Chronic Club Privacy Policy

Effective Date: December 3, 2025

This Privacy Policy describes how Super Chronic Club (referred to as “Company,” “we,” “us,” or “our”) collects, uses, and discloses information when you visit our website (the “Site”) or retail locations. This policy is designed to comply with applicable Washington State and U.S. federal laws, including the Washington State My Health My Data Act and the Biometric Privacy Protection Act.

By accessing or using our services, you signify your understanding and agreement to the collection, use, and disclosure of your information as described in this policy.

1. Information We Collect

We collect information to provide and improve our Services, manage compliance obligations, and enhance your experience. The types of information we collect include:

  • Identifiers and Contact Data:
    • Name, email address, phone number, physical address.
    • Date of birth (required for age verification: 21+).
    • Information from your government-issued ID upon in-store verification (name, photo, ID number, address).
  • Commercial Transaction Data: Purchase history, product preferences, order status updates, and transaction details.
  • Payment Information: We are a cash-only business with ATMs on-site. We retain transaction records as required by WSLCB regulations.
  • Biometric Data: If you opt into biometric ID verification (e.g., facial scan or fingerprint), we may collect this data with your explicit written consent (see Section 9).
  • Usage and Device Data (Automatically Collected):
    • IP address, browser type, operating system, referring website.
    • Pages viewed, timestamps, device identifiers.
  • In-Store Surveillance Data: Continuous 24/7 video and audio surveillance (minimum 640×470 resolution) as required by WSLCB. This includes images, audio, and movement in all controlled areas.

2. How We Use Your Information (Purposes)

We use your information for the following purposes:

  • Service Delivery: Processing online reservations, loyalty accounts, and customer support.
  • Legal & Regulatory Compliance:
    • Age verification (21+).
    • Transaction record-keeping for WSLCB CCRS.
    • Maintaining surveillance logs for at least 45 days.
    • Complying with the My Health My Data Act.
  • Communication & Marketing: Order confirmations, service updates, and marketing (only with your consent).
  • Site Improvement & Analytics: Using analytics tools (e.g., Google Analytics) to improve the Site.
  • Security & Fraud Prevention: Protecting against suspicious activity.

3. Sharing and Disclosure of Information

We do not sell or rent your personal information. We may share information only under the following conditions:

  • Service Providers: Including:
    • Payment processors
    • SaaS/POS vendors
    • SMS platforms
    • Analytics providers (e.g., Google Analytics)

    All vendors must comply with written privacy agreements.

  • Legal & Regulatory Authorities: Including WSLCB compliance requests, subpoenas, court orders, or government investigations.
  • Business Transfers: If the business is sold or merged, information may transfer to the successor entity under similar protection standards.

4. Data Security and Retention

We use encryption, access controls, and secure storage protocols to protect your data.

We retain information only as long as necessary for legal and operational purposes. Surveillance footage and transaction data are retained according to WSLCB requirements and then securely destroyed or anonymized.

5. Your Choices and Rights (Washington State Residents)

  • Right to Know: Request access to your stored information.
  • Right to Correction: Request updates to inaccurate information.
  • Right to Deletion: Request deletion except where we must retain data for legal reasons.
  • Right to Opt-Out of Marketing:
    • Email: use the “unsubscribe” link.
    • SMS: reply “STOP”.
  • How to Exercise Rights: Contact us using Section 12. We verify identity before responding.

6. Washington State Medical Marijuana Patients

  • Data Handling Restrictions: We cannot store or solicit patient medical conditions or history.
  • Confidentiality: DOH database information is confidential and used only to verify recognition card validity.
  • Patient Access: Patients may request their own information through the DOH, not us.

7. My Health My Data Act (MHMDA) Disclosure

  • Your cannabis purchases may be considered “consumer health data.”
  • We obtain explicit consent before collecting such data.
  • We do not sell or share consumer health data for advertising without separate authorization.

8. Use of Cookies and Tracking Technologies

We use cookies to improve functionality and analyze site traffic.

  • Types of Cookies: Essential, analytics/performance.
  • Managing Cookies: You may modify browser settings to block some or all cookies.

9. Biometric Data Specifics

  • We provide written disclosures explaining purpose, storage, retention, and destruction schedules before collecting biometric data.
  • We require signed consent.
  • Biometric data is securely stored and deleted within 3 years or when no longer needed.

10. Children’s Privacy (Under 21)

Our Services are not for individuals under 21. We do not knowingly collect their information. If discovered, we delete it immediately.

11. Changes to This Privacy Policy

We may update this policy periodically. Changes will be posted with an updated “Effective Date.”

12. Contact Information

If you have any questions or requests regarding this Privacy Policy, please contact us:

Super Chronic Club
Phone: 360-350-0862