Budr Cannabis Privacy Policy

Effective Date: July 2026

This Privacy Policy describes how Budr (“Budr,” “we,” “us,” or “our”) collects, uses, maintains, and discloses Personal Information collected when users (“you,” “your”) visit this website (this “Site”) and the websites controlled by us, use our mobile applications available for download on the Apple App Store and Google Play Store (collectively, the “App”), visit our retail stores, or when you otherwise interact with us. Our websites, the App, and the services we provide through them and our retail stores are collectively referred to as our “Services.”

By providing Personal Information to us or by using our Services, you acknowledge this Privacy Policy, and you are consenting to the collection, use, and disclosure of that information in accordance with this Privacy Policy. Our Services and the information provided in this Privacy Policy are solely intended for residents within the United States of America. Except as otherwise provided in this Privacy Policy, we will not disclose your Personal Information to third parties for their own marketing purposes without your consent.

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an individual or household. We do not consider Personal Information to include information that has been aggregated or de-identified so that it does not allow a third party to easily identify a specific individual. To the extent we process de-identified data, we will maintain and use it in de-identified form only and not attempt to re-identify the data, except as permitted by applicable law.

1. Use By Individuals Under 21

Our Services and our products are intended only for persons 21 years of age and older. We do not knowingly collect information from individuals under 21 years of age, children, or minors.

If you learn that your child has provided us with Personal Information without your consent, you may alert us at [email protected]. If we learn that we have collected any Personal Information from anyone under 21, we will promptly take steps to delete such information.

2. Personal Information We Collect

The information we collect falls into two categories: (1) information you voluntarily supply us or the service providers working on our behalf when you use our Services, visit our retail stores, or otherwise interact with us, and submit your information, such as via a contact form, through the App, or as part of a transaction; and (2) tracking information automatically gathered from your devices as you use our Services or visit our retail stores.

Personal Information You Provide

The following Personal Information about you may be collected when you interact with us, complete a survey, use our Services, or visit our retail stores:

Name
Date of Birth
Demographic information (including age and gender)
Driver’s License or Other Government ID Number
Address
Account credentials
Purchase history and transaction information (including billing address, transaction dates, products purchased, and payment details)
Medical marijuana patient information (if applicable, including your patient registration number or qualifying condition information, if you choose to provide it)
Email address
Phone number
Survey responses (if you choose to participate in a survey, the specific questions may vary from survey to survey, but we will generally ask attitudinal questions to help us understand your general views, behaviors, opinions, and interests as they pertain to our products and services)

This information may be supplied by you in response to specific questions, when you sign up for newsletters or other communications from us, make purchases, or communicate with us in person, through the App, or by email. You can always refuse to supply Personal Information in response to requests, except that it may prevent you from engaging in transactions, using certain features of our Services, or receiving responses to your inquiries or other information of interest such as our newsletter or customer programs. Information that is optional at these collection points will generally be noted and marked as such.

Please note that certain sensitive Personal Information we collect, such as your driver’s license or government-issued identification number, is collected with your consent at the point of collection and is required to verify your identity and age in compliance with applicable cannabis licensing and regulatory requirements. The collection and use of this information for identity and age verification purposes is necessary to comply with state law. We ask that you not send us any other sensitive Personal Information about yourself or others (e.g., Social Security numbers, financial account numbers, information related to racial or ethnic origin, political opinions, religion or philosophical beliefs, sex life or sexual orientation, transgender or nonbinary status, disability or medical treatment information, criminal background, trade union membership, biometric or genetic data, or neural data) on or through our Services.

Passive Information Collection

We may use third-party analytics tools, including Google Analytics, to help us measure traffic, usage, and sales trends by your use of our Services. These tools use various technologies, including cookies or similar technologies, to automatically collect certain information from your devices, including:

Your browser name
Demographic data about you
The pages or screens you visit on our Services, whether you have previously accessed our Services
The IP (Internet Protocol) address for your computer
The type of computer or mobile device and technical information about your means of connection to our Services, such as the operating system and the Internet service providers utilized
Navigational Data, also known as log files, server logs, or clickstream data

When you download, install, or use the App, we may collect additional information from your mobile device, including:

Device identifiers, such as your mobile device’s unique device identifier (UDID), advertising identifier (IDFA or AAID), or other unique identifiers
Information about your mobile device, including device type, operating system version, and mobile network information
Geolocation information, if you grant the App permission to access your device’s location services, which we may use to provide location-based features and to show you nearby retail locations
Information about your use of the App, including the features you use, actions you take, and the time and duration of your activities
Push notification tokens, if you enable push notifications, which allow us to send you notifications about orders, promotions, and other updates

In addition, the laws of some states (including Connecticut) require that we capture CCTV footage within certain retail stores. This footage will include images of all customers who enter and interact with us in those retail stores. Security camera footage is retained for 30 days unless a longer retention period is required for legal, regulatory, or security purposes.

Cookies and Tracking Technologies

Cookies are small files that are stored on the device you use to access our Services. Your web browser may place cookies on its storage for record-keeping purposes and sometimes to track information about you.

You may choose to set your web browser or mobile device to refuse cookies, or to alert you when cookies are being sent. If you adjust your settings to refuse cookies, or if you delete cookies, you may not be able to access or use some portions of our Services and some features may not work as intended.

The Site uses first-party cookies (set by Budr) and third-party cookies (set by our partners). The cookies used on our Site fall into the following categories:

Strictly Necessary Cookies: These cookies are essential for the Site to function properly. They enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies because they are required to provide you with the services you request.
Preference Cookies: These cookies enable the Site to remember information that changes the way the Site behaves or looks, such as your preferred language or the region you are in. They help provide a more personalized experience.
Statistics Cookies: These cookies collect information about how you use the Site, such as which pages you visit and how long you spend on them. This information is used exclusively for anonymous statistical purposes to help us understand how visitors interact with the Site and to improve its performance.
Marketing Cookies: These cookies are used to create user profiles and to track you across our Site and other websites for marketing purposes. They enable us and our advertising partners to deliver advertisements that are more relevant to you and your interests. These cookies may be set by us or by third-party advertising partners.

The cookies used on our Site may be session-based or persistent. Session cookies are temporary and are deleted after you close your internet browser or power off your device. Persistent cookies remain on your device between sessions until they expire or you delete them.

Our Services may also use other technologies including but not limited to JavaScript tags or tracking pixels to collect, process, and store browsing information as described above. Tracking pixels and tags assist in delivering cookies and allow us to collect browsing information about you. On the App, we may use mobile software development kits (SDKs) that collect information through device identifiers and other mobile-specific tracking technologies.

Tracking pixels or tags may also be included in the emails we send you to determine whether the emails have been opened and if you have clicked on links within the emails.

To learn more about the specific cookies and tracking technologies used on our Services and to manage your preferences, including the ability to opt out of non-essential cookies and tracking technologies, please visit our Cookie Preferences Center at https://budrcannabis.com/opt-out-preferences/.

Our Services recognize Global Privacy Control (GPC) and similar universal opt-out preference signals where required by law. If your browser or device sends a GPC signal indicating your preference to opt out of the sale or sharing of your personal information or targeted advertising, we will treat that signal as a valid opt-out request.

3. How We Use Personal Information

We collect only the Personal Information that is adequate, relevant, and reasonably necessary in relation to the purposes for which it is processed, as disclosed in this Privacy Policy. We do not collect Personal Information beyond what is proportionate to achieve the purposes described below. Budr may collect and use the Personal Information that we do collect for the following purposes:

To fulfill transaction requests and improve our Services for you: If you make a purchase at a retail location, through the App, or request delivery, we will collect the information required to process your orders, facilitate delivery to your location, or respond to your customer service requests. This may include your name, address, credit card number, card type, expiration date, and security code. In addition to utilizing this information to fulfill your requests, Budr may use information collected during these transactions to analyze and improve our Services. In conducting these activities, Budr does not store, archive, or otherwise retain credit card numbers.
To verify your identity and age: We use your driver’s license or government-issued identification number to verify your identity and confirm that you are 21 years of age or older, as required by Connecticut cannabis licensing and regulatory requirements.
To administer our loyalty program: If you enroll in our Budr Rewards loyalty program, we use your Personal Information to track your purchases, calculate and apply rewards, provide you with personalized offers, and communicate with you about your loyalty account and benefits.
To provide location-based features: If you grant the App permission to access your device’s location, we may use your geolocation information to show you nearby retail locations, provide directions, and deliver location-relevant content and offers.
To create and manage your account: If you register for an account through our Services, we use your Personal Information to create your account, maintain your profile, authenticate your identity when you log in, and provide you with account-related features and functionality.
To respond to your requests and improve our Services for you: Information you provide helps us respond to your questions and requests more efficiently.
To communicate with you: We may send you information about topics we think may be of interest to you, such as our newsletters, upon your request or otherwise as consistent with this Privacy Policy.
To send periodic emails: We may use your provided email address to send you information and updates. We may also use this information to respond to your inquiries, questions, and/or other requests.
To market products and services to you: For example, we might provide you with information about special promotions, offers, new features, or new services. We might also use your information to serve you ads about our products and offers. To learn about your choices for these communications, read the Privacy Rights section below.
To conduct research and analytics: We use information to better understand our customers and users.
To personalize the user experience: We may use information in the aggregate to understand how our users as a group use our Services.
To improve our Services: We may use information we have collected to improve our Services.
To comply with legal and regulatory obligations: We may use information we have collected to enforce our Terms of Use, prevent or respond to fraud, and fulfill legal obligations, like conducting CCTV monitoring of certain retail locations and responding to court orders, subpoenas, or government requests.
To verify requests made pursuant to this Privacy Policy.
We do not collect, use, or sell your Personal Information for the purpose of training artificial intelligence or large language models.

4. How We Collect Personal Information

We collect Personal Information about you from various sources, directly and indirectly, including from the following:

Directly from you: For example, we collect information you enter or provide us when you register an account, contact us, submit an inquiry or report a problem, make a purchase, sign up for our communications, participate in a survey, or otherwise provide your information to us.
From your devices: As described above, we and our service providers use tracking tools like browser cookies, mobile SDKs, and web beacons to automatically collect information about you and your device. We collect information when you interact with our Services, our ads, or our emails that we send to you. To learn about your choices for these tracking tools, see our Opt-Out Preferences page at https://budrcannabis.com/opt-out-preferences/.
From vendors we hire to work on our behalf: For example, vendors that host or maintain our Services and send promotional emails for us may give us information. We may also get information from vendors that process payments and from marketing agencies, advertising technology vendors, and analytics or research providers.
From other sources: Other parties may give us personal information about you, such as business and marketing partners, data brokers, companies that we acquire, and social media platforms.
We combine information: We may combine information that we have collected offline with information we collect online. Or we may combine information we get from another party with information we already have. We may also aggregate your information with other individuals’ information to understand preferences and trends over time.

5. Sharing Your Personal Information

We may share the categories of personal information described above with service providers and third parties that we partner with to assist us in various functions, including providing technological support and performing security and anti-fraud services, providing you with our services and products, and providing you with communications and marketing information on our behalf. These third parties have access to your Personal Information only to perform specific tasks on our behalf and are obligated not to disclose or use your Personal Information for any other purpose.

These service providers and third parties can be classified in the following categories:

Delivery partners, to deliver our products to the right location; financial partners involved in the processing of your banking or credit card data in retail locations;
Marketing partners, which we use to send you promotional communications, for instance;
Technology and platform service providers, such as our data hosting provider, point-of-sale and inventory management systems, loyalty and rewards program platforms, age and identity verification services, mobile application platforms, analytics and advertising technology providers, and other companies we employ to manage our Services, help us conduct surveys, provide Services-related services, and/or to assist us in analyzing how our Services are used;
State and local regulatory agencies, including the Connecticut Department of Consumer Protection and other cannabis regulatory authorities, as required to comply with cannabis licensing, reporting, and compliance obligations; and
Other service providers that we may engage to provide services to us or on our behalf.

Your Personal Information may be disclosed to a third party if we are required to do so because of an applicable law, court order or governmental regulation, or if such disclosure is otherwise necessary in support of any criminal or other legal investigation or proceeding, or to protect against or investigate illegal activity. Your Personal Information may be disclosed to a third party if the disclosure is reasonably related to the potential or actual sale or other disposition of all or part of our business or assets.

We may share aggregated or de-identified information with third-party partners, affiliates, or service providers for the purposes outlined above.

6. How We Protect Your Information

We use commercially reasonable data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your Personal Information under our control, in accordance with this Privacy Policy. However, the Internet is not 100% secure or error-free. We cannot guarantee that your use of our Services will be completely safe, and we cannot ensure or warrant the security of any information you provide to us.

7. Third-Party Websites and Services

Our Services may contain links to sites or services of third parties. We do not control the content or links that appear on these sites and services and are not responsible for them. These sites and services may have their own privacy policies. Browsing and interaction on any other website or service, including websites or services which have a link to our Services, is subject to that website’s or service’s own terms and policies.

8. Your Privacy Rights

Depending on the state in which you live, the type of Personal Information we collect, and subject to certain exemptions provided in the applicable law of your state of residence, you may have rights with respect to your Personal Information. We may also choose to give you these rights even if we are not required to do so.

Right to Know What Happens to Your Personal Information

This is called the right to be informed. It means that you have the right to obtain from us all information regarding our data processing activities that concern you, such as how we collect and use your Personal Information, how long we will keep it, and who it will be shared with, among other things. We are informing you of how we process your Personal Information with this Privacy Policy.

Right to Know What Personal Information Budr Has About You

This is called the right of access. This right allows you to confirm whether we are processing your Personal Information and, if so, to access that Personal Information. Once we receive and verify your request (or a request from your authorized agent), we will provide you with: a copy of the specific Personal Information we have collected about you in a portable and readily usable format; the categories of Personal Information we process; the categories of sources from which we collected your Personal Information; our purposes for processing your Personal Information; the third parties with whom we share your Personal Information; and if we carry out automated decision-making, including profiling, meaningful information about the logic involved and the significance and potential consequences of such processing for you. Under some circumstances, we may deny your access request. In that event, we will respond to you with the reason for the denial.

Right to Change Your Personal Information

This is called the right of correction. It gives you the right to request that we correct inaccurate Personal Information we have about you, and to complete any incomplete Personal Information. Please contact us using the information in the Contacting Us section below. We will correct your Personal Information unless an exemption applies or we are otherwise unable to verify the accuracy of the information you provide. If we deny your correction request, we will inform you of the reason for the denial.

Right to Delete Your Personal Information

This right means you can ask for your Personal Information to be deleted. Sometimes we can delete your information, but other times it is not possible for either technical or legal reasons. If that is the case, we will consider if we can limit how we use it. We will also inform you of our reason for denying your deletion request.

Right to Move Your Personal Information

This is called the right to data portability. It is the right to ask for and receive a portable copy of your Personal Information that you have given us or that you have generated by using our Services. We will provide your Personal Information in a structured, commonly used, and machine-readable format. When you request this information electronically, we will provide you a copy in electronic format.

Your Right to Opt-Out

You have the right to opt out of: (1) the sale of your Personal Information; (2) the processing of your Personal Information for targeted advertising; and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Our disclosure of your Personal Information to third-party advertising and analytics providers may constitute a “sale” under the CTDPA. To exercise your opt-out rights, you may: (a) enable an opt-out preference signal or Global Privacy Control on your browser or device, which we will recognize as a valid opt-out request; (b) adjust your preferences in our cookie preference center at https://budrcannabis.com/opt-out-preferences/; or (c) submit an opt-out request to [email protected].

Right to Withdraw Consent

Where we process your Personal Information based on your consent, you have the right to withdraw your consent at any time. To withdraw your consent, please contact us at [email protected]. Please note that withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, and it may affect our ability to provide certain services to you, such as processing transactions that require identity verification.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. Unless the applicable data protection laws permit it, we will not: deny you goods or services; charge you different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties; provide you a different level or quality of goods or services; or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

We do not make decisions based solely on automated processing that produces legal effects concerning you.

Right to Appeal

If we decline to take action on your request, you have the right to appeal our decision. To submit an appeal, please contact us at [email protected] with the subject line “Privacy Rights Appeal.” We will respond to your appeal within sixty (60) days of receipt, explaining any actions taken or not taken and the reasons for our decision. If your appeal is denied, we will provide you with information on how to contact the appropriate state attorney general or other regulatory authority to submit a complaint.

How to Exercise Your Privacy Rights

To make any of the requests described above, please contact us at [email protected] or by using the contact information in the Contacting Us section below. You may also designate an authorized agent to make a request on your behalf by providing written authorization to your agent and having your agent submit the request with proof of such authorization. We will acknowledge receipt of your request and advise you how long we expect it will take to respond. We will respond to your request within forty-five (45) days of receipt. If we require additional time, we may extend this period by an additional forty-five (45) days, provided we notify you of the extension and the reason for it within the initial 45-day period. If we are unable to verify your identity or the authority of your authorized agent, we may deny your request.

In order to respond to your privacy rights requests, we may need to confirm that you made the request. We may require additional information to verify your identity. If you submit a request on behalf of another person, we may require proof of authorization and verification of identity directly from the person for whom you are submitting a request.

Opting Out of Marketing Communications

You can opt out of receiving our marketing emails. To do so, follow the instructions in any promotional message you get from us, or email us at [email protected]. Even if you opt out of getting marketing messages, we will still send you transactional messages. These include responses to your questions.

You can opt out of interest-based advertising. In addition to using the Global Privacy Control on your browser or device, you can visit www.aboutads.info/choices and https://optout.privacyrights.info/ to opt out of certain uses of cookies for advertising purposes.

Updating Your Personal Information

To keep your Personal Information current and accurate, please contact us as specified above. If you decide to email us, please include the words “Updating Personal Information” in the subject line.

We will take reasonable steps to update or correct Personal Information in our possession that you have previously submitted via our Services.

9. Data Retention

We will retain your information for as long as needed to provide you our Services, for Budr’s valid business purposes, and as necessary to comply with our legal obligations, resolve disputes, defend our legal rights, and enforce our agreements. When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize it, or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

10. Changes to This Privacy Policy

Budr has the discretion to update or change this Privacy Policy at any time. If we make any material change in how we process your personal information, we will notify you by email if you have provided your email address to us, by means of a notice on our Services, or by push notification through the App. Any changes will become effective when the revised Privacy Policy is posted on our Services, except that material changes to how we use previously collected Personal Information will not apply to information collected before the change unless we obtain your consent. We recommend that you regularly review the Privacy Policy when you use our Services.

11. Other Terms

Your use of our Services is subject to the Terms of Use. If you choose to use our Services, your visit and any dispute over privacy and data collection is subject to this Privacy Policy and our Terms of Use, including limitations on damages, dispute resolution procedures, and application of the law of the State of Connecticut.

12. Contacting Us

Budr, located at 1037 Boulevard, West Hartford, CT 06119, is the company responsible for the collection, use, maintenance, and disclosure of Personal Information under this Privacy Policy.

Budr welcomes your questions, complaints, or comments regarding this Privacy Policy. If you have any questions or to make any of the requests regarding your privacy outlined above, please contact Budr at:

Budr
1037 Boulevard
West Hartford, CT 06119
Email: [email protected]
Phone: (860) 816-8225

Are You At Least 21 Years Old?