Privacy policy

1 Who is responsible for your information

Grass Station, of 8415 18th Ave, Brooklyn, NY 11214, is responsible for personal information collected through this website. You can reach us on (347) 254-6584.

To confirm: The licensee’s legal entity name and a privacy contact email.

This policy explains what we collect, why, who we share it with, and what choices you have. It covers this website. It does not cover the practices of the third-party services described below, which have their own policies.

2 What we collect

Depending on how you use the site, this may include:

• Age confirmation. When you confirm you are 21 or older, that confirmation is stored in your browser and is not sent to us. By default it is cleared when you close the browser. If you tick “Remember this device for 7 days” it is kept on that device with an expiry date and stops working after seven days.
• Order information. If you order, Dutchie collects your name, contact details, delivery address where applicable, order contents and fulfillment preferences in order to process the order.
• Identity verification. We check government-issued photo ID when you buy, as the law requires.
• Payment information. Where online payment is offered it is handled by Dutchie or its payment partners; we do not receive or store your full payment credentials.
• Messages you send us, for example by phone.
• Standard server logs kept by our hosting provider, such as IP address, browser type and the pages requested. This site does not currently run analytics.

Counsel: Check this list line by line against what is actually collected and retained, including anything captured in store (ID scans, CCTV, loyalty or SMS systems) and job applications.

3 Why we use it

• To take, prepare and fulfill your orders for pickup or delivery.
• To verify age and identity, which is a legal requirement for cannabis retail in New York.
• To keep the records the New York State Office of Cannabis Management requires us to keep.
• To respond to your questions and provide customer service.
• To keep this website secure and working.

We do not sell your personal information.

4 Who we share it with

We share information only where it is needed, with:

• Dutchie, which provides our menu, cart and checkout.
• Google, whose map is embedded on our Visit & Contact page and receives standard request information when it loads.
• Our website hosting provider, which serves the site and keeps standard server logs.
• Regulators and law enforcement, where we are legally required to disclose information, including to the Office of Cannabis Management.
• Professional advisers, where necessary and under a duty of confidentiality.

To confirm: Delivery dispatch or tracking, payment, messaging and job-application providers, if any. Joint Venture lists OnFleet and Google Forms.

Counsel: Confirm this list is complete and matches the contracts with each provider.

5 Cookies and similar technology

Your age confirmation is stored in your browser, never sent to us. By default it uses session storage and is cleared when you close the browser. If you tick “Remember this device for 7 days” it is stored in local storage with an expiry date instead, and expires after seven days. It is a functional necessity: without it you would be asked to confirm your age on every page.

The embedded Dutchie menu sets its own cookies to keep your cart and session working, and the embedded Google map may set its own cookies. Those are set by Dutchie and Google, not by us, and are governed by their privacy policies.

Counsel: Whether a consent banner is required, and revisit this section if analytics or marketing tools are ever added.

6 How long we keep it

We keep personal information for as long as needed for the purpose it was collected, and for as long as we are required to keep it by New York cannabis regulations, tax law and employment law.

Counsel: A placeholder, not an answer. State real retention periods, particularly for order records and ID checks.

7 Your choices

• You can ask us what personal information we hold about you, and ask us to correct it if it is wrong.
• You can ask us to delete information, though we may be legally required to keep some records.
• You can block or clear cookies and site storage in your browser, though the menu may not work correctly, and you will be asked to confirm your age again, if you do.

To make a request, call us on (347) 254-6584. We may need to verify your identity before we act on it.

To confirm: Whether Grass Station sends marketing texts or emails (for example through Dutchie). Joint Venture’s policy includes an opt-out by replying STOP or unsubscribing; this website itself has no signup.

8 Security

This site is served over HTTPS. Ordering and payment data is held by the specialist providers named above rather than by this website. No system is completely secure, but we take reasonable steps to protect the information we hold.

9 Children

This site is not intended for anyone under 21, and we do not knowingly collect information from anyone under 21. If you believe a minor has provided us with information, contact us and we will delete it.

10 Changes to this policy

We may update this policy. The version published on this page is the version that applies, and its status and date are shown at the top.