Privacy policy.

Effective Date: July 17, 2026
Last Updated: July 17, 2026

Beach Boys Cannabis Co. (“Beach Boys,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit www.beachboyscannabis.com, communicate with us, visit one of our locations, participate in a loyalty program or promotion, or use an online service that links to this Privacy Policy.

Our website provides information and services for:

  • Adult-use recreational cannabis customers age 21 or older at our South Portland and Old Orchard Beach locations

  • Legally qualified medical cannabis cardholders at our South Portland medical cannabis location

Different eligibility, identification, purchase, advertising, and recordkeeping requirements apply to adult-use and medical cannabis services.

This Privacy Policy applies only to services operated by Beach Boys Cannabis Co. that link to it. Third-party websites, online menus, payment services, medical providers, social media platforms, and other independently operated services may have their own privacy policies.

1. Age and Eligibility

Adult-use recreational cannabis content, products, and transactions are intended only for individuals who are at least 21 years old.

Medical cannabis content and services are available only to qualifying patients, caregivers, or other individuals legally authorized to participate in Maine’s Medical Use of Cannabis Program. Legally qualified medical cardholders may include individuals under age 21, subject to Maine law and all applicable patient, caregiver, identification, and authorization requirements.

Our website’s age-selection or age-gate feature is only an initial screening tool. It does not replace identification, medical certification, patient documentation, or other eligibility checks required by law.

We do not knowingly collect personal information online from children under age 18. We do not intentionally market adult-use cannabis to anyone under age 21.

If you believe a child or other ineligible minor has provided personal information to us, please contact us using the information in Section 18.

2. Personal Information We Collect

The information we collect depends on how you interact with us and which services you use.

A. Information You Provide Directly

We may collect:

  • Name

  • Email address

  • Telephone number

  • Mailing address

  • Date of birth or age confirmation

  • Account login information

  • Store preference

  • Loyalty or rewards information

  • Product preferences

  • Marketing preferences

  • Communications and customer-service inquiries

  • Survey responses

  • Event registrations

  • Promotion or giveaway entries

  • Reviews, photographs, comments, or other content you submit

  • Email and text-message consent records

  • Information necessary to respond to product, safety, recall, defect, or transaction concerns

B. Order and Transaction Information

We may collect information related to:

  • Products viewed, requested, reserved, or purchased

  • Whether an order relates to an adult-use or medical cannabis location

  • Store location

  • Order status

  • Pickup or delivery information, where legally offered

  • Purchase history

  • Discounts, rewards, and promotions

  • Transaction date and amount

  • Payment confirmation

  • Returns, exchanges, defects, recalls, or customer-service requests

Submitting an online order or reservation request does not necessarily complete a cannabis sale. Cannabis transactions are completed only by the applicable licensed store, as permitted by Maine law, and after all required identification and eligibility checks.

C. Identity and Eligibility Information

We may collect, review, or verify information necessary to:

  • Confirm that an adult-use customer is at least 21 years old

  • Review government-issued identification

  • Confirm medical cannabis patient, caregiver, or other authorized status

  • Confirm eligibility for a particular location, service, promotion, or transaction

  • Prevent fraud

  • Comply with cannabis laws, regulations, and recordkeeping requirements

We seek to limit the collection and retention of identification and medical-program information to what is legally and operationally necessary.

D. Medical Cannabis Information

For medical cannabis services, we may collect or review limited information necessary to confirm that a person is legally authorized to participate in Maine’s Medical Use of Cannabis Program.

Depending on the transaction, this may include:

  • Patient or caregiver status

  • Medical cannabis certification or card information

  • Expiration dates

  • Government-issued identification

  • Information required by Maine law for transaction or recordkeeping purposes

Beach Boys Cannabis Co. does not provide medical diagnoses or independently determine whether someone qualifies for a medical cannabis certification.

Independent medical providers or certification services are responsible for their own privacy practices.

E. Payment Information

Payment information may be collected directly by third-party payment processors, financial institutions, pay-by-bank providers, debit providers, automated teller machine operators, or other payment services.

Beach Boys Cannabis Co. may receive limited transaction information, such as:

  • Payment status

  • Transaction amount

  • Payment method

  • Confirmation number

  • Refund or reversal status

We do not necessarily receive or store complete bank account, debit card, credit card, or other payment credentials.

F. Device and Website Usage Information

When you use our website, we or our service providers may automatically collect:

  • Internet Protocol address

  • Browser type

  • Device type

  • Operating system

  • Referring website

  • Pages viewed

  • Links clicked

  • Dates and times of visits

  • Cookie and device identifiers

  • Approximate location derived from an Internet Protocol address

  • Website performance, security, and error information

G. Location Information

We may receive approximate location information based on your Internet Protocol address.

We collect precise geolocation information only when an enabled ordering, pickup, delivery, mapping, or mobile feature requires it and you provide any consent required by law.

H. Inferences and Preferences

We may create or receive inferences concerning:

  • Product interests

  • Store preferences

  • Adult-use or medical program preferences

  • Shopping patterns

  • Marketing preferences

  • Likely interests based on website activity

3. Sources of Personal Information

We may collect information:

  • Directly from you

  • Automatically from your browser or device

  • From transactions or interactions at our stores

  • From our employees

  • From online menu and ordering platforms

  • From payment providers

  • From loyalty and customer relationship management services

  • From email and text-message providers

  • From analytics and advertising services

  • From social media platforms

  • From appointment or medical certification providers

  • From fraud-prevention and security providers

  • From publicly available or commercial sources

  • From other parties at your direction or with your consent

4. How We Use Personal Information

We may use personal information to:

  • Operate and maintain our website

  • Direct visitors to the appropriate adult-use or medical cannabis services

  • Display store information, menus, and product availability

  • Respond to order requests or reservations

  • Facilitate lawful in-store, pickup, curbside, or delivery transactions

  • Verify age, identity, patient status, caregiver status, and eligibility

  • Comply with adult-use and medical cannabis requirements

  • Provide customer service

  • Operate customer accounts and loyalty programs

  • Process payments and confirm transactions

  • Send order, account, safety, recall, or service communications

  • Send promotional emails or text messages where permitted

  • Personalize content and offers

  • Measure website, advertising, and campaign performance

  • Analyze customer preferences and website use

  • Improve our stores, products, website, and services

  • Prevent fraud, theft, misuse, and security incidents

  • Comply with tax, accounting, financial, regulatory, and recordkeeping obligations

  • Respond to legal process or government requests

  • Protect our customers, employees, property, business, and legal rights

  • Enforce our agreements

  • Evaluate or complete a merger, financing, reorganization, acquisition, or sale

  • Carry out another purpose disclosed when information is collected

  • Carry out a purpose to which you consent

5. Adult-Use and Medical Marketing

We may use contact and preference information to send marketing communications appropriate to the program for which you are eligible.

Adult-use cannabis marketing is intended only for individuals age 21 or older.

Medical cannabis communications are intended only for legally qualified patients, caregivers, or other authorized individuals.

We seek to maintain appropriate separation between adult-use and medical cannabis marketing. You should not select or enroll in an adult-use marketing program unless you are at least 21 years old.

6. Cookies and Similar Technologies

We and our service providers may use:

  • Cookies

  • Pixels

  • Tags

  • Local storage

  • Analytics tools

  • Advertising measurement technologies

  • Similar tracking technologies

These technologies may be used to:

  • Enable essential website functions

  • Remember preferences

  • Maintain security

  • Analyze website use

  • Diagnose technical problems

  • Measure advertising performance

  • Personalize content or advertising, where enabled

You may manage certain technologies through your browser, device settings, or cookies pop up. Disabling cookies may affect website functionality.

Where required by applicable law, we will recognize supported browser-based opt-out preference signals, such as Global Privacy Control, for the browser or device that sends the signal.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

A. Service Providers

We may disclose information to companies that provide:

  • Website hosting

  • Online menus and ordering tools

  • Payment processing

  • Loyalty and customer relationship management services

  • Email and text messaging

  • Analytics

  • Advertising services

  • Information technology support

  • Cybersecurity

  • Fraud prevention

  • Customer service

  • Accounting

  • Legal services

  • Insurance

  • Data storage

  • Pickup or delivery support, where legally offered

Service providers may use personal information only as permitted by their contracts and applicable law.

B. Cannabis Regulators and Government Authorities

We may disclose information when required or permitted to:

  • Maine cannabis regulators

  • Law enforcement

  • Courts

  • Tax authorities

  • Other government agencies

C. Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

  • Comply with law

  • Respond to a subpoena, warrant, court order, or lawful request

  • Investigate fraud or unlawful conduct

  • Protect customers, employees, stores, property, or legal rights

  • Respond to an emergency

  • Address product safety or recall concerns

  • Enforce our agreements

D. Business Transactions

Information may be disclosed in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business.

E. With Your Direction or Consent

We may disclose information when you direct us to do so or provide consent.

8. Sale, Sharing, and Targeted Advertising

Privacy laws in some states define “sale,” “sharing,” and “targeted advertising” broadly. These terms may include certain disclosures involving advertising, analytics, cookies, or online identifiers, even when money is not exchanged.

Where applicable, you may opt out using:

  • Available cookie controls

  • A supported browser-based privacy signal

9. Sensitive and Cannabis-Related Information

Information concerning cannabis purchases, medical cannabis participation, identity, financial accounts, precise geolocation, and account credentials may be sensitive.

We seek to:

  • Collect only information reasonably necessary for lawful business purposes

  • Limit employee and vendor access

  • Avoid using cannabis-related information for unrelated purposes

  • Avoid unnecessary disclosure of cannabis purchase or patient-status information

  • Retain sensitive information only as long as reasonably necessary

  • Maintain reasonable safeguards appropriate to the information

Beach Boys Cannabis Co. does not represent that it is a health care provider or that all information it receives is protected by the Health Insurance Portability and Accountability Act.

Independent health care providers and certification services are responsible for their own privacy practices.

10. Email Communications

You may unsubscribe from promotional emails by:

  • Using the unsubscribe link in the email

  • Updating your account preferences

  • Contacting us

We may continue sending non-promotional communications, including transaction, account, safety, recall, or legal notices.

Adult-use promotional emails are intended only for individuals age 21 or older.

11. Text Messages

If you enroll in a Beach Boys Cannabis Co. text-message program:

  • Consent is not a condition of purchase

  • Message frequency may vary

  • Message and data rates may apply

  • You may reply STOP to opt out

  • Other reasonable opt-out requests will be honored as required by law

Adult-use promotional text messages are intended only for individuals age 21 or older.

12. Loyalty and Rewards Programs

If you participate in a loyalty or rewards program, we may collect and use information concerning:

  • Contact information

  • Store location

  • Program eligibility

  • Points or rewards

  • Purchases

  • Product preferences

  • Redemption activity

  • Marketing consent

  • Program participation

Loyalty-program participation does not automatically constitute consent to receive promotional text messages unless separate consent is provided.

Adult-use loyalty benefits are available only to eligible individuals age 21 or older. Medical loyalty benefits, where offered, are limited to legally qualified participants.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

  • The nature of the information

  • The length of the customer relationship

  • Adult-use or medical cannabis recordkeeping requirements

  • Tax and accounting requirements

  • Fraud prevention

  • Security

  • Marketing consent records

  • Product-safety and recall obligations

  • Dispute resolution

  • Litigation holds

  • Other legal or regulatory requirements

When information is no longer reasonably necessary, we may delete, anonymize, or aggregate it.

14. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

No website, network, transmission, or storage system is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of account credentials and should notify us promptly if you suspect unauthorized use.

15. Your Privacy Choices and Rights

You may:

  • Unsubscribe from promotional emails

  • Revoke text-message consent

  • Adjust browser and cookie settings

  • Update certain account information

  • Request information about our privacy practices

Depending on your state of residence, the nature of our processing, and whether an applicable law covers our business, you may also have the right to:

  • Request access to certain personal information

  • Request correction of inaccurate information

  • Request deletion

  • Request a portable copy

  • Request information concerning certain disclosures

  • Opt out of certain sales, sharing, targeted advertising, or profiling

  • Limit certain uses of sensitive personal information

  • Appeal the denial of a request

These rights are not available in every state and may be subject to legal exceptions.

We may retain information when permitted or required for:

  • Legal compliance

  • Cannabis recordkeeping

  • Tax and accounting

  • Fraud prevention

  • Security

  • Product recalls

  • Dispute resolution

  • Contract enforcement

  • Other lawful purposes

16. Submitting a Privacy Request

To submit a privacy request, contact:

Email: sales @ beachboyscannabis.com

Use the subject line “Privacy Request.”

We may request information reasonably necessary to verify your identity and authority. We will not request more information than reasonably necessary.

Where applicable, an authorized agent may submit a request on your behalf. We may require proof of authorization or direct confirmation from you.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

17. Third-Party Websites and Services

Our website may link to or embed third-party:

  • Menus

  • Ordering platforms

  • Payment services

  • Maps

  • Social media

  • Appointment services

  • Medical certification providers

  • Videos

  • Promotions

  • Websites

We do not control the privacy practices of those third parties. Review their privacy policies before providing information.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

  • Law

  • Technology

  • Vendors

  • Business practices

  • Services

  • Store operations

We will post the updated version and revise the “Last Updated” date.

Where required, we will provide additional notice or obtain consent.

19. Contact Us

Beach Boys Cannabis Co.
818 Main Street #2
South Portland, ME 04106

Beach Boys Cannabis Co.: Beach Club
11 Ocean Park Road
Old Orchard Beach, ME 04064

Email: sales @ beachboyscannabis.com

Questions concerning a specific store may also be directed to the contact information listed on our website.