Privacy Policy

On Deck Delivery – ondeckdelivery.com
Last updated: November 29, 2025

1. Overview

This Privacy Policy explains how On Deck Delivery (“On Deck Delivery,” “On Deck,” “we,” or “us”) collects, uses, shares, and protects information about you when you use ondeckdelivery.com and any related online services (the “Services”).

This policy is especially focused on California users, since we operate a cannabis delivery business based in La Habra, California and are subject to California privacy laws like the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

By using the Services, you agree to the practices described here.

2. What this policy covers

This policy applies to:

• Visitors to our website and menu pages.
• People who create an account or place orders.
• People who sign up for SMS or email marketing, loyalty programs, or promotions.
• People who contact us using forms, SMS, or other digital channels we control.

It does not apply to websites, platforms, or services we do not control, even if we link to them.

3. Notice at collection and categories of information

California law requires us to tell you, at or before the time we collect personal information, what categories of information we collect and why we use them.

Here are the main categories of personal information we collect and examples of what is in each category:

• Identifiers: name, alias, phone number, email address, delivery address, account username, IP address, and device identifiers.
• Customer records information: date of birth, age, government-issued ID details (for example, type of ID and partial ID numbers), and medical cannabis documentation where required for medical orders.
• Commercial information: order history, products viewed, products added to cart, loyalty points, discounts used, and refund or complaint history.
• Internet / network activity: pages you visit, links you click, time spent on pages, browser type, device type, and general location based on IP.
• Geolocation data: approximate location inferred from your IP address or delivery address.
• Audio or electronic information: records of communications with us, such as emails or messages, and limited call notes if you contact customer support.
• Inferences:categories or segments we create about you based on your purchase history or engagement with promotions (for example, “prefers vape products” or “high-frequency buyer”).

Some of this information, such as ID data and certain health-related notes for medical patients, may be considered “sensitive personal information” under California law.

We collect this information to operate our business, deliver your orders, meet legal and licensing requirements, keep the Services secure, and run marketing and loyalty programs.

4. How we collect information

We collect information in three main ways.

You provide information directly when you:

• Create an account.
• Place an order.
• Enter a delivery address.
• Upload or show ID or medical documentation when required.
• Join SMS or email marketing or loyalty programs.
• Contact us through the Contact page, forms, SMS, or other channels.
• Respond to surveys or promotions.

When you use the Services, we and our partners automatically collect some information using cookies, pixels, and similar technologies. This includes:

• IP address, browser type, device type, and operating system.
• Pages you view, links you click, and time spent on the site.
• General location information based on IP.
• Device identifiers and session IDs.

We use Google Analytics and similar tools to understand traffic, usage patterns, and performance, and to improve the site.

We receive information about you from:

• Alpine IQ Marketing, Alpine ecommerce / AIQ Ecommerce, and related services, which provide loyalty program details, segmentation, campaign performance, and ecommerce data such as order details and engagement with promotions.
• Ecommerce platforms we use for menu and checkout, which send us order and account data.
• Payment processors, which send us payment status information (we do not receive full card numbers).
• ID verification and compliance services when we verify age or eligibility.
• Delivery and logistics tools that provide delivery status and related details.
• Marketing and referral partners that tell us which campaigns or links brought you to us.

We combine this information with what we collect directly to keep our records accurate and to offer relevant products and deals.

5. How we use information

We use the information we collect for these purposes:

• Processing orders and coordinating delivery.
• Verifying age and identity where required.
• Running your account, including login, preferences, and order history.
• Providing customer support and handling issues, complaints, and questions.
• Managing loyalty points, credits, and promotions.
• Meeting California cannabis regulations, including age verification, record-keeping, and reporting obligations.
• Handling tax and accounting requirements.
• Responding to law enforcement and regulatory requests where legally required.

Using tools like Alpine IQ and the ecommerce systems, we:

• Track your product preferences and purchase history.
• Recommend products, categories, and deals that match your interests.
• Build segments for marketing and loyalty (for example, heavy edible buyers, frequent vape buyers).
• Adjust messaging and offers so they are more relevant.

If you opt in, or where allowed by law, we use your info to:

• Send marketing SMS and emails about deals, new products, events, and loyalty offers.
• Run referral programs and limited-time promotions.
• Use SMS and email platforms that comply with TCPA and CTIA rules, including clear consent, opt-out instructions, and rate disclosures.

You can opt out of marketing at any time as described in Section 11.

We use information to:

• Analyze how people use the Services, which pages perform well, and where users drop off.
• Measure the success of marketing campaigns, loyalty programs, and promotions.
• Test new features and improve site speed, usability, and reliability.
• Monitor for fraud, abuse, and security threats.

6. Cookies and tracking technologies

We and our partners use cookies, pixels, tags, and similar technologies to:

• Keep you logged in and remember your cart.
• Save your preferences (for example, whether you confirmed your age).
• Understand how you use the site.
• Measure advertising and marketing performance.
• Support retargeting and audience building where allowed.

Most browsers let you control cookies through settings. If you block cookies, some features of the Services may not work as intended.

7. How we share information

We do not sell your personal information for money to unrelated third parties. However, some of the ways we use analytics and advertising tools may be treated as a “sale” or “sharing” under California privacy laws because they involve sharing identifiers and usage data with third parties.

We share personal information in these ways:

We share information with third-party companies that help us run the business, including:

• Alpine IQ Marketing and ecommerce platforms that handle loyalty, segmentation, SMS/email campaigns, and online ordering.
• Payment processors that handle payments and refunds.
• ID verification and compliance vendors.
• Hosting providers and security services.
• SMS and email delivery services.
• Analytics providers such as Google Analytics.

These companies can only use your information to provide services to us and must protect it.

When we run joint promotions or loyalty benefits with brands or partners, we may share limited information needed to run that program. For example, we might share that you are eligible for a certain offer or redeemed a reward.

We may share information if we believe it is reasonably necessary to:

• Comply with a law, regulation, legal process, or government request.
• Protect the rights, property, or safety of On Deck Delivery, our customers, or others.
• Detect, prevent, or address fraud, security, or technical issues.
• Enforce our Terms of Service or other agreements.

If we are involved in a merger, acquisition, reorganization, or sale of some or all of our assets, your information may be transferred as part of that transaction as allowed by law.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

8. How long we keep information

We keep personal information only as long as reasonably needed to:

• Provide the Services and deliver your orders.
• Maintain business and accounting records.
• Meet cannabis licensing, tax, and other legal requirements.
• Resolve disputes and enforce our rights.

We may keep some information in backups or archives for a period after it is no longer actively used, as allowed or required by law.

When information is no longer needed, we will delete it or de-identify it, where feasible.

9. Security

We use reasonable physical, technical, and administrative measures to protect personal information from unauthorized access, loss, or misuse. These can include encryption, access controls, and staff training.

No system is perfectly secure. We cannot guarantee absolute security of your information, but we do work to reduce risk and respond to incidents if they occur.

10. Children and minors

The Services are intended only for:

• Adults 21 and older for adult-use cannabis.
• Adults 18 and older with required medical documentation where medical cannabis is allowed.

We do not knowingly collect personal information from anyone who does not meet these age limits. If we learn that we have collected information from someone who is not eligible, we will delete it and may close the related account.

Do not provide personal information about anyone under 16.

11. Your choices and privacy rights

If you have an account, you may be able to:

• Review and update certain account information.
• Change some communication preferences.
• To stop marketing texts, reply STOP to any message. For help, reply HELP or contact us through the Contact page.
• To stop marketing emails, click “unsubscribe” at the bottom of any marketing email.

We may still send non-marketing messages about orders, your account, or important updates to our policies.

You can set your browser to refuse cookies or alert you when cookies are used. You can also use opt-out tools from some analytics and ad providers.

Blocking or deleting cookies may affect how the Services work.

If you are a California resident, you have rights under CCPA/CPRA, subject to certain limits.

These rights include:

• Right to know: You can request that we tell you what categories of personal information we collect, use, disclose, sell, or share, and the sources and purposes.
• Right to access: You can request a copy of personal information we hold about you.
• Right to delete: You can ask us to delete personal information we collected from you, subject to legal and operational exceptions (for example, we may need to keep certain records for licensing or tax reasons).
• Right to correct: You can ask us to correct inaccurate personal information.
• Right to opt out of sale or sharing:You can ask us not to “sell” or “share” your personal information for cross-context behavioral advertising, to the extent our use of analytics or ads is considered a sale or sharing.
• Right to limit use of sensitive personal information: You can request that we limit how we use and disclose certain sensitive personal information, except where we must use it for core services or legal reasons.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your California privacy rights:

• Go to the Contact page on ondeckdelivery.com.
• Tell us which privacy rights you want to exercise (for example, “access,” “delete,” or “opt out of sale/sharing”).
• Give us enough information to identify you and verify that you are the account holder or consumer.

We may ask for additional information to verify your identity before completing your request. You can also appoint an authorized agent to make requests on your behalf, subject to verification and documentation.

We aim to respond to privacy requests within the time periods required by California law.

If we use a “Do Not Sell or Share My Personal Information” link or similar tool on the site, you can also use that to opt out of sale/sharing of personal information that is covered by those rules.

12. International use

Our Services are intended for use in California, in areas where we are allowed to deliver cannabis. If you access the Services from outside California, you do so at your own risk and are responsible for following local laws.

Your information will be processed in the United States and may be subject to U.S. laws.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

When we update it:

• We will change the “Last updated” date at the top of this page.
• We may provide additional notice on the site if the changes are significant.

If you continue to use the Services after we post an updated Privacy Policy, you accept the new version.

14. Contact

If you have questions or want to make a privacy-related request, use the Contact page on ondeckdelivery.com to reach us.