Yeeerp (“Yeeerp,” “we,” “us” or “our”) operates an online directory and marketplace that helps adults find licensed cannabis dispensaries, delivery services, brands, strains, products and deals. This Privacy Policy explains what personal information we collect when you use our websites and services (the “Services”), why we collect it, who we share it with, and the choices and rights you have over it.
Cannabis is a regulated product, and some of the information we handle — your age, your location and, if you choose to provide it, your medical cannabis card — exists specifically because regulators require it. We try to collect the minimum needed to serve you lawfully.
Information We Collect
We collect information in three ways: directly from you, automatically as you use the Services, and from third parties you connect to us.
Information you give us
- Account details. Your name, email address, password, and optionally a phone number, date of birth, profile photo and display name when you register.
- Age and identity verification. To confirm you are 21 or older (or a qualifying medical patient where state law allows), we may ask for a government-issued photo ID and, in some cases, a selfie taken at the time of verification so the ID can be matched to you.
- Medical cannabis card data. If you tell us you are a medical patient, we collect your card number, issuing state, expiry date and an image of the card. This is health-related information and we treat it as sensitive: it is used to establish eligibility and, when you place an order, is shared with the retailer filling that order.
- Orders and preferences. Items you add to a cart, order history, pickup or delivery addresses, favourites, and the retailers and brands you follow.
- Content you post. Reviews, ratings, comments, photos, community posts, job applications and messages you send through the Services.
- Business information. If you claim or manage a listing, the business details, licence numbers and supporting documents you submit to verify that claim.
- Support and marketing. Messages you send us, and your subscription preferences for email or SMS updates.
Information collected automatically
- Location. Cannabis availability, pricing and legality are local, so the Services are location-aware. We use the region you select, an approximate location derived from your IP address, and — only if you grant your browser’s permission — your device’s precise location, to show nearby retailers and to confirm you are in a market we can lawfully serve.
- Device and log data. IP address, browser type and version, operating system, device identifiers, referring URLs, and the dates and times of your requests.
- Usage analytics. Pages and listings you view, searches you run, filters you apply, and links you click, so we can understand what is useful and fix what is not.
Information from third parties
- Social sign-in. If you create an account with Google or Facebook, we receive the basic profile information those services release to us — typically your name, email address and profile image. We do not receive your password.
- Retailers and brands. Licensed businesses may provide us with order status, menu and inventory data connected to your transactions.
- Verification providers. Services that help us confirm an identity document or a business licence is genuine.
How We Use Your Information
- To create and administer your account and authenticate you.
- To verify that you are 21 or older, or a qualifying medical patient, and that you are in a jurisdiction we can serve.
- To show you relevant local results — nearby dispensaries, delivery coverage, menus, prices, deals and events.
- To route orders you place to the licensed retailer that will fulfil them, and to keep you updated on their status.
- To publish content you choose to make public, such as reviews and community posts.
- To respond to support requests and to send service messages about your account, orders or changes to our terms.
- To send marketing communications where you have opted in, and to measure whether they are useful. You can opt out at any time.
- To detect, investigate and prevent fraud, abuse, spam and security incidents, and to enforce our Terms of Service.
- To comply with cannabis, advertising, tax and other legal obligations, and to respond to lawful requests from regulators.
- To analyse and improve the Services, including in aggregated or de-identified form that does not identify you.
Cookies and Analytics
We use cookies and similar technologies (local storage, pixels and software development kits) to keep you signed in, remember your selected region and preferences, keep your cart intact between visits, secure the Services, and measure how they are used.
We run Google Tag Manager, which loads our measurement and marketing tags — including analytics and, where applicable, advertising tags. These tools set their own cookies and may collect device identifiers, pages viewed and approximate location. Broadly, the cookies we set fall into three groups:
- Strictly necessary — sign-in, security, age-gate acknowledgement, cart and region state. The Services will not work properly without these.
- Analytics — how the Services are used in aggregate, so we can improve them.
- Advertising — measuring campaigns and, where permitted, showing you more relevant promotions.
Most browsers let you block or delete cookies in their settings, and mobile operating systems let you reset or limit advertising identifiers. Blocking strictly necessary cookies will break parts of the Services. Where required by law, we honour opt-out preference signals such as Global Privacy Control (GPC).
How We Share Information
We do not sell your personal information for money. We share it in the following circumstances:
- Licensed retailers and delivery services. When you place an order, we pass the retailer what they need to fulfil and lawfully record it — typically your name, contact details, order contents, delivery or pickup address and, where required, your medical card or age-verification status.
- Service providers. Vendors who run the Services on our behalf and may process personal information only on our instructions. These currently include Amazon Web Services (hosting, storage, authentication), Google Maps Platform (mapping, geocoding and place search), Google and Facebook (sign-in, if you use it), Google Tag Manager and analytics providers (measurement), and SendGrid (transactional and marketing email).
- Publicly, at your direction. Reviews, ratings, comments, community posts and the public parts of your profile are visible to other users and to search engines.
- Legal and safety. Where we believe in good faith that disclosure is required by law, regulation, subpoena or court order, or is necessary to protect the rights, property or safety of Yeeerp, our users or the public.
- Business transfers. In connection with a merger, acquisition, financing or sale of assets, subject to the acquirer continuing to honour this Policy for information transferred.
Data Retention
We keep personal information only as long as we need it for the purposes described above, then delete or de-identify it. In practice:
- Account data is kept while your account is active and for a reasonable period afterwards so you can reactivate.
- Identity and age-verification images are kept only as long as needed to complete and evidence the check, and are deleted on the shorter of our retention schedule or the period required by applicable state law.
- Order records are retained for the period cannabis, tax and accounting rules require, which is typically several years.
- Public content such as reviews remains visible until you or we remove it.
We may retain information for longer where we are required to by law or where it is needed to resolve a dispute or enforce our agreements.
Security
We use administrative, technical and physical safeguards designed to protect personal information — encryption in transit, access controls that limit who on our team can reach sensitive records, and storage with reputable infrastructure providers. Identity documents and medical card images are treated as sensitive and access to them is restricted.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password, and tell us promptly if you believe your account has been compromised.
Your Privacy Rights
Depending on where you live, you may have some or all of the following rights over your personal information:
- Know and access. Request confirmation of whether we process your personal information, the categories and sources of it, the purposes for processing, the categories of recipients, and a copy in a portable format.
- Delete. Request that we delete personal information we have collected from you, subject to exceptions — for example, records we must keep to comply with cannabis or tax law, or to complete a transaction you asked for.
- Correct. Ask us to fix inaccurate personal information.
- Opt out of sale or sharing. Direct us not to sell or share your personal information for cross-context behavioural advertising.
- Limit sensitive information. Ask us to limit the use of sensitive personal information — such as precise location or medical card data — to what is necessary to provide the Services.
- Non-discrimination. We will not deny you service, charge you a different price or give you a lesser experience for exercising any of these rights.
California residents
If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you the rights listed above. You may exercise them yourself or through an authorised agent. We will verify your request against the information already associated with your account before we act on it, and we will respond within the timeframes the statute requires.
How to make a request
Email us at privacy@yeeerp.com with the subject line “Privacy Request,” and tell us which right you want to exercise and the email address on your account. Many settings can also be changed directly in your account, and every marketing email carries an unsubscribe link.
Age Restriction
The Services are intended solely for adults aged 21 or older, or for qualifying medical cannabis patients aged 18 or older where state law permits. They are not directed to children, and we do not knowingly collect personal information from anyone under 18.
If we learn that we have collected information from someone below the applicable minimum age, we will delete it and close the account. If you believe a minor has provided us with personal information, contact us at privacy@yeeerp.com and we will act promptly.
Third-Party Sites
The Services link to dispensary, brand and partner websites we do not control. This Policy does not apply to them. We encourage you to read the privacy policy of any site you visit from ours.
Changes to This Policy
We may update this Policy as the Services, our partners or the law change. When we do, we will revise the “last updated” date at the top of this page, and if the changes are material we will give you additional notice — by email or an in-product message — before they take effect. Continuing to use the Services after an update means you accept the revised Policy.
Contact Us
Questions, concerns or complaints about this Policy or about how we handle your personal information can be sent to privacy@yeeerp.com. You can also review our Terms of Service, which govern your use of the Services.
