Privacy Policy

Welcome to Releaf Club ("we," "our," or "us"), operating under RC Concepts LLC & GDINLA, INC (License: C10-0001365-LIC). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

This policy applies to all information collected through our website (releafclub.com), mobile applications, and any related services, sales, marketing, or events (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not access or use our Services.

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Register for an account or make a purchase
• Request a quote or delivery service
• Contact us via email, phone, or contact form
• Subscribe to our newsletter or marketing communications
• Participate in surveys, contests, or promotions

Personal information may include:

• Contact Information: Name, email address, phone number, mailing address
• Account Information: Username, password (encrypted)
• Business Information: Company name, business type
• Order Information: Billing address, delivery address, payment information
• Communication Data: Messages, inquiries, feedback
• Identity Verification: Age verification data (21+ requirement)

2.2 Automatically Collected Information

When you access our Services, we automatically collect certain information, including:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, time spent on pages, click patterns, referral URLs
• Location Data: General geographic location based on IP address
• Cookies and Tracking: Session data, preferences, analytics data

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Payment processors (Stripe) for transaction data
• Analytics providers (Google Analytics) for usage statistics
• Age verification services for compliance purposes
• Marketing partners for campaign effectiveness

We use the information we collect for the following purposes:

3.1 Service Delivery

• Process and fulfill orders and delivery requests
• Manage your account and provide customer support
• Communicate order status, shipping updates, and service changes
• Process payments and prevent fraudulent transactions
• Verify age and identity for legal compliance

3.2 Improvement and Analytics

• Analyze usage patterns to improve our Services
• Monitor and analyze trends, usage, and activities
• Develop new products, services, and features
• Conduct research and analytics for business purposes

3.3 Marketing and Communications

• Send promotional materials, newsletters, and special offers (with consent)
• Conduct surveys, contests, and promotions
• Provide personalized content and recommendations
• Send administrative information and service updates

3.4 Legal and Security

• Comply with legal obligations and regulatory requirements
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service and other policies
• Respond to legal requests and prevent harm

We use cookies and similar tracking technologies to track activity on our Services and store certain information. Cookies are files with small amounts of data that are sent to your browser from a website and stored on your device.

4.1 Types of Cookies We Use

4.2 Managing Cookies

You can control and manage cookies in various ways. Please note that removing or blocking cookies can impact your user experience and parts of our website may no longer be fully accessible.

• Most browsers allow you to refuse cookies or delete existing cookies
• You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on
• Contact us to opt-out of marketing cookies

We may share your information with third-party service providers who perform services on our behalf. These parties are contractually obligated to protect your information and may only use it for the purposes we specify.

5.1 Third-Party Services We Use

We do not sell your personal information to third parties.

Depending on your location, you may have certain rights regarding your personal information.

6.1 GDPR Rights (European Union)

If you are located in the EU, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with a supervisory authority

6.2 CCPA Rights (California)

If you are a California resident, you have the following rights:

• Right to Know: Request information about data collection and use
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

6.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Retention Periods

• Account Information: Retained while your account is active and for 2 years after closure
• Transaction Records: Retained for 7 years for tax and legal compliance
• Marketing Data: Retained until you unsubscribe or request deletion
• Analytics Data: Aggregated data retained indefinitely; personal data retained for 26 months
• Contact Form Submissions: Retained for 3 years
• Cookies: Session cookies expire when you close your browser; persistent cookies last up to 2 years

When we no longer need your information, we will securely delete or anonymize it.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

8.1 Security Measures

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive data
• Secure authentication and access controls
• Regular security audits and updates
• Employee training on data protection
• Limited access to personal information on a need-to-know basis

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Our Services are not intended for individuals under the age of 21.

We do not knowingly collect personal information from anyone under 21 years of age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Age verification is required to access certain parts of our website and services.

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

We ensure that appropriate safeguards are in place when transferring data internationally, including:

• Standard contractual clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Ensuring third parties are GDPR compliant

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this page
• Sending you an email notification (for material changes)

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Some web browsers include a "Do Not Track" (DNT) feature. Because there is no common understanding of how to interpret DNT signals, we do not currently respond to DNT signals.