LEGAL

Privacy Policy

This Privacy Policy describes how MWAH ("MWAH," "we," "us," or "our") collects, uses, and shares information when you visit gimmemwah.com (the "Site"). The Site is intended only for adults 21 years of age or older residing in Washington State. By using the Site you confirm you meet these requirements and consent to this Policy.

1. Information we collect

Information you provide. If you submit your email address through our newsletter signup form, we collect that email address. If you contact us, we collect any information you include in your message (such as your name and the content of your inquiry).

Information collected automatically. When you visit the Site, we automatically collect limited technical information, including your IP address, browser type and version, device type, operating system, referring website, pages viewed, and approximate geographic location (derived from IP address, typically accurate to the city level). This information is used to prevent abuse, secure the Site, and understand aggregate traffic patterns.

Cookies and similar technologies. We use a small number of cookies and similar storage mechanisms. A session cookie is set when you confirm you are 21 years of age or older through our age gate; this cookie expires when you close your browser and exists only to avoid asking you to confirm your age repeatedly within a single browsing session. We also use Google Analytics 4 to measure aggregate Site usage; Google Analytics sets its own cookies to identify returning visits in an anonymized form. You can learn more about Google's privacy practices at policies.google.com/privacy and opt out of Google Analytics tracking by installing Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout.

2. How we use information

We use the information we collect to provide and operate the Site (including the Find Us directory of licensed Washington State retailers); send you marketing communications if you have signed up for our newsletter (you may unsubscribe at any time — see Section 6); protect the Site from automated abuse, scraping, fraud, and unauthorized access; measure and analyze aggregate traffic patterns so we can improve the Site; and comply with applicable laws, including Washington State cannabis advertising regulations (RCW 69.50.369 and WAC 314-55-155).

3. How we share information

We do not sell your personal information. We share limited information only in the following circumstances.

Service providers. We share information with third-party service providers that help us operate the Site, such as Google (for analytics via Google Analytics 4), email-delivery platforms (for sending newsletter communications if you've subscribed), hosting and infrastructure providers (Google Firebase Hosting and Cloud Functions), and content-delivery networks. These providers process information on our behalf under contractual terms that limit how they can use that information.

Legal and safety. We may disclose information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect the safety of others, investigate fraud, or respond to a government request.

Business transfers. If MWAH is involved in a merger, acquisition, financing, or sale of assets, information we hold may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

We do not share, rent, or sell your email address or other personal information to unrelated third parties for their own marketing purposes.

4. How long we keep information

Email addresses submitted to our newsletter are retained until you unsubscribe or request deletion. Technical data (IP address, user agent, request logs) is retained for up to 90 days for security and abuse-prevention purposes, after which it is deleted or anonymized. Google Analytics data is retained according to the retention period we configure in Google Analytics (currently 14 months). The age-gate session cookie expires when you close your browser.

5. Security

We take reasonable administrative, technical, and physical safeguards to protect information from unauthorized access, disclosure, alteration, and destruction. No method of transmission over the internet or electronic storage is 100% secure, however, and we cannot guarantee absolute security. You submit information at your own risk.

6. Your choices and rights

Unsubscribe. Every marketing email we send includes an unsubscribe link. Clicking it removes your email from our marketing list.

Access, correction, deletion. You may request a copy of the personal information we hold about you, ask us to correct inaccurate information, or request that we delete your information. Email [email protected] to submit a request. We will respond within 45 days.

Do Not Track. Your browser may transmit a "Do Not Track" signal. Because there is no common industry standard for interpreting this signal, we currently do not respond to it. You can still limit tracking by using the Google Analytics opt-out add-on described in Section 1, or by using browser privacy features such as blocking third-party cookies.

Third-party advertising. We do not run third-party advertising on the Site. If this changes we will update this Policy and offer an opt-out mechanism.

7. California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides you additional rights regarding your personal information.

Right to know. You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.

Right to delete. You may request that we delete personal information we have collected from you, subject to certain exceptions (for example, where we must retain information to comply with a legal obligation).

Right to correct. You may request correction of inaccurate personal information we maintain about you.

Right to opt out of sale or sharing. We do not sell or share your personal information for cross-context behavioral advertising as those terms are defined under California law. If this changes we will provide a "Do Not Sell or Share My Personal Information" mechanism.

Right to non-discrimination. We will not deny service, charge different prices, or provide a different level of service because you exercised any of these rights.

To exercise any of these rights, email [email protected]. We may need to verify your identity before fulfilling a request. You may designate an authorized agent to submit a request on your behalf; we will require written permission signed by you and may require you to verify your identity directly with us.

Categories of personal information we collect. In the preceding 12 months we have collected identifiers (email address, IP address), internet or network activity information (browsing data, pages visited, referring URLs), and approximate geolocation (city level, derived from IP address). We do not collect sensitive personal information as defined by the CPRA.

8. Washington State residents

The Washington My Health My Data Act (RCW 19.373) regulates certain "consumer health data." We do not knowingly collect consumer health data through this Site. If you are a Washington State resident and believe we have collected consumer health data from you, email [email protected].

9. Children

This Site is not directed to and not intended for anyone under 21 years of age. We do not knowingly collect personal information from anyone under 21. If you believe a minor has provided personal information to us, email [email protected] and we will delete it promptly.

10. International visitors

The Site is intended for and operated from the United States, specifically for residents of Washington State. If you access the Site from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Site you consent to this transfer.

11. Third-party sites

The Site may link to third-party websites — for example, the Find Us directory links to retailer websites, and our footer links to Instagram. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policy of any third-party site you visit.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated through the Site or via email if you have subscribed to our newsletter. Your continued use of the Site after a change becomes effective constitutes your acceptance of the updated Policy.

13. Contact us

Questions, requests, or complaints regarding this Policy or our privacy practices:

Email: [email protected]