Effective Date: 02/09/26

Last Updated: 02/09/26

Who We Are

This Privacy Policy explains how Quality Roots Cannabis Co. ("Quality Roots," "we," "us," or "our") collects, uses, and shares information when you visit getqualityroots.com, use our mobile applications, shop at our dispensaries, or interact with our services.

Quality Roots operates cannabis dispensaries in Michigan and New Jersey, including locations in Monroe, Detroit, Battle Creek, Owosso, Berkley, Kalamazoo, Madison Heights, Waterford, and Marlton. Our website serves as an e-commerce menu and informational platform for adults 21 and over in jurisdictions where cannabis is legal.

By using our website, creating an account, joining our loyalty program, or visiting our stores, you agree to the terms of this Privacy Policy.

Age Restriction

Our services are intended solely for adults 21 years of age or older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected information from someone under 21, we will delete it immediately.

By entering our website or stores, you confirm that you are at least 21 years old and agree to this Privacy Policy.

Information We Collect

Information You Provide to Us

We collect personal information that you voluntarily provide when you:

• Create an account or join our Quality Roots Rewards loyalty program
• Place an order for pickup
• Sign up for marketing emails or SMS messages
• Submit a contact form or customer service inquiry
• Participate in promotions, surveys, or contests
• Visit our dispensaries and complete a transaction

This information may include:

• Contact information: Name, email address, phone number, mailing address
• Account and order data: Products viewed or purchased, cart contents, preferred store location, pickup preferences, purchase history
• Loyalty program data: Rewards points, transaction history, preferences, and any optional profile details you provide
• Age verification data: Confirmation that you are 21 or older, state or ZIP code, and selected dispensary location
• Payment information: We do not currently process payments online, though this functionality is coming soon. In-store, we accept cash and debit cards. We do not store full card numbers or sensitive payment details.

Information Collected Automatically

When you use our website or mobile app, we automatically collect certain information:

• Usage data: Pages visited, time spent on pages, referring URLs, search queries, products viewed, and navigation patterns
• Device and browser information: Device type, operating system, browser type and version, IP address, and general geographic location derived from IP address
• Cookies and tracking technologies: We use cookies, web beacons, and similar technologies to maintain your cart, remember your selected store location, analyze site performance, and deliver personalized content and ads

You can manage cookies through your browser settings, but please note that disabling cookies may affect certain features such as cart functionality, age gate verification, and location selection.

Information Collected In-Store

When you visit our dispensaries in Michigan or New Jersey:

• ID verification: We scan government-issued IDs to verify that you are 21 or older and to comply with state cannabis regulations, including purchase limits and reporting requirements.
  • Michigan stores: ID data is used for age verification and may be retained if you enroll in our loyalty program or otherwise consent.
  • New Jersey store (Marlton): ID information is used solely to verify age and ensure compliance with purchase limits. We do not retain ID data unless you voluntarily opt in to our loyalty program or provide explicit consent. This aligns with New Jersey Cannabis Regulatory Commission (CRC) privacy guidance.
• Point-of-sale data: Product purchases, transaction amounts, payment method (cash or debit), and loyalty program activity.
• Medical patient information: We accept medical cannabis patients at our Michigan locations. If you are a registered medical patient, we may collect your medical card information to verify eligibility, but all patients must be 21 or older.

Information from Third Parties

We may receive information from service providers and business partners, including:

• Analytics providers (e.g., Google Analytics)
• Marketing platforms that help us deliver targeted ads or measure campaign performance
• Payment processors (for in-store debit transactions)

We may combine this information with data we collect directly to improve our services, personalize your experience, and deliver relevant offers.

How We Use Your Information

We use the information we collect for the following purposes:

Fulfilling Orders and Services

• Process online orders for in-store pickup
• Maintain user accounts and loyalty program profiles
• Track rewards points, redemptions, and purchase history

Customer Support and Communication

• Respond to contact form submissions and customer service inquiries
• Send transactional messages, including order confirmations, pickup notifications, and loyalty balance updates

Marketing and Personalization

• Send promotional emails and SMS messages about featured deals, daily deals, clearance items, and exclusive rewards
• Personalize offers and content based on your purchase history, preferences, and selected store location (e.g., Monroe vs. Marlton deals)
• Deliver targeted advertising on third-party platforms

Safety, Security, and Legal Compliance

• Enforce age restrictions and prevent underage access to cannabis content through our 21+ age gate
• Detect, prevent, and respond to fraud, abuse, security incidents, or violations of our terms
• Comply with applicable Michigan and New Jersey cannabis regulations, including record-keeping duties, purchase limits, and reporting obligations
• Respond to legal requests, court orders, or government inquiries
• Protect our rights, property, and the safety of our customers and employees

Analytics and Improvement

• Analyze site traffic, user behavior, and engagement to improve our website, product selection, and customer experience
• Conduct research and development to enhance our services

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: When you opt in to marketing communications, accept cookies, or agree to our age gate and Privacy Policy
• Contract performance: When processing is necessary to fulfill your order or maintain your loyalty account
• Legitimate interests: For analytics, fraud prevention, security, and improving our services
• Legal obligation: To comply with Michigan and New Jersey cannabis laws and other applicable regulations

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers and Processors

We share information with trusted third-party service providers who help us operate our business, including:

• IT hosting and infrastructure providers
• Analytics and performance monitoring tools
• Marketing and advertising platforms
• Payment processors (for in-store debit transactions)
• Customer support and communication tools

These providers are authorized to use your personal information only as necessary to provide services to Quality Roots and are contractually required to protect your data.

Business Partners and Affiliates

We may share information within our corporate family, including across our Michigan and New Jersey locations, to provide consistent service and honor your loyalty program benefits at any Quality Roots dispensary.

Legal and Compliance Disclosures

We may disclose your information when necessary to:

• Comply with applicable laws, regulations, legal processes, or government requests
• Enforce our Terms of Service or other agreements
• Protect our rights, property, or safety, or that of our customers or the public
• Investigate fraud, security incidents, or violations of our policies
• Defend against legal claims or litigation

Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the successor entity. We will notify you of any such change and any choices you may have regarding your information.

Cookies, Tracking, and Advertising

We use cookies and similar technologies to enhance your experience on getqualityroots.com. Cookies are small data files stored on your device that help us:

Types of Cookies We Use

• Essential cookies: Required for core functionality, including age gate verification, cart management, and selected store location
• Analytics cookies: Help us understand site traffic, user behavior, and performance (e.g., Google Analytics)
• Marketing cookies: Enable targeted advertising, retargeting, and measurement of ad campaign effectiveness

Your Cookie Choices

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies, but doing so may affect site functionality, such as:

• Maintaining items in your cart
• Remembering your selected dispensary location
• Staying logged in to your account

Third-party analytics and advertising providers (e.g., Google) may set their own cookies. You can opt out of certain tracking through tools like the Google Analytics Opt-Out Browser Add-On or through your browser's privacy settings.

Universal Opt-Out Mechanisms (New Jersey Residents)

For New Jersey residents, we will make reasonable efforts to recognize and honor browser or device-level universal opt-out signals, such as Global Privacy Control (GPC), where technically feasible. These signals allow you to opt out of targeted advertising and certain tracking. Please note that opting out of tracking does not affect necessary processing for orders, security, or legal compliance.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Transaction data: Retained as required by Michigan and New Jersey cannabis regulations, tax laws, and accounting standards
• Loyalty and marketing profiles: Retained while your account is active and for a reasonable period after inactivity, unless you request deletion (subject to legal retention requirements)
• Web logs and analytics: Kept for a limited period for security and performance purposes, then anonymized or deleted
• ID scans (New Jersey): Deleted after age verification unless you opt in to loyalty or provide consent for retention

If you wish to request deletion of your information, please contact us using the details provided below.

Security Measures

We use reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using HTTPS
• Restricted internal access to personal information on a need-to-know basis
• Regular security assessments and updates to our systems

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights and Choices

You have certain rights and choices regarding your personal information:

Access and Update

You can access and update your account information, loyalty profile, and preferences by logging into your Quality Roots account or contacting us directly.

Deletion

You may request deletion of your personal information, subject to legal obligations that require us to retain certain records (e.g., cannabis transaction data for regulatory compliance).

Marketing Opt-Out

• Email: You can unsubscribe from promotional emails by clicking the "unsubscribe" link in any marketing email or by contacting us.
• SMS: You can opt out of text messages by replying "STOP" to any SMS or by contacting us.

Please note that even if you opt out of marketing messages, we may still send you transactional or account-related communications.

Cookie Controls

You can manage cookies and tracking technologies through your browser settings or third-party opt-out tools, as described in the "Cookies, Tracking, and Advertising" section above.

Rights for New Jersey Residents

If you are a New Jersey resident, the New Jersey Data Privacy Act (NJDPA), which took effect January 15, 2025, provides you with additional rights regarding your personal information.

Your NJDPA Rights

New Jersey residents have the right to:

• Access: Confirm whether we process your personal data and obtain a copy of that data
• Correct: Request correction of inaccurate personal information
• Delete: Request deletion of your personal data, subject to legal retention requirements for cannabis transactions
• Opt out of:
  • Targeted advertising
  • Sale of personal data (Note: Quality Roots does not sell personal data)
  • Certain profiling used for decisions that produce legal or similarly significant effects

How to Exercise Your Rights

To exercise any of these rights, you may:

• Email us at [email protected]
• Submit a request through our website contact form
• Call or visit our Marlton, NJ location at 850 Rte. 70 W, Marlton, NJ

We will respond to your request within the timeframes required by NJDPA (typically within 45 days for access/deletion requests and within 15 days for opt-out requests).

Sensitive Personal Data

Under NJDPA, certain information is considered "sensitive personal data" and requires additional safeguards. For New Jersey customers, we treat the following as sensitive and process it only with appropriate consent and security measures:

• Government-issued IDs or age-verification documents scanned at point of sale
• Medical-related information (if you are a registered medical cannabis patient)

Universal Opt-Out Signals

As described in the "Cookies" section, we will make reasonable efforts to recognize and honor universal opt-out mechanisms, such as Global Privacy Control (GPC), for New Jersey residents.

No Retaliation

We will not discriminate against you for exercising your NJDPA rights. You will receive the same quality of service regardless of whether you exercise these rights.

Rights for Michigan Residents

While Michigan does not currently have a comprehensive consumer privacy law like California's CCPA or New Jersey's NJDPA, we are committed to protecting the personal information of all our customers.

Michigan residents may have rights under other Michigan laws, including the Identity Theft Protection Act. We take reasonable measures to safeguard personal information and comply with applicable Michigan data security requirements.

If you are a Michigan resident and have questions about your privacy rights or our data practices, please contact us using the information below.

Third-Party Links and Content

Our website and communications may contain links to third-party websites, social media platforms, brand sites, or other external resources. This Privacy Policy does not apply to those third-party sites or services, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party sites before providing them with personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective Date" at the top of this policy and may notify you via email, on our website, or through other communication channels.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: [email protected]

Phone:

Michigan Locations:

• Monroe: (734) 244-0200
• Detroit (Hamtramck): (313) 263-0360
• Battle Creek: (269) 719-8600
• Owosso (Corunna): (989) 472-9500
• Berkley: (248) 268-8400
• Kalamazoo: (269) 348-0005
• Madison Heights: (248) 951-4300
• Waterford: (248) 461-9400

New Jersey Location:

• Marlton: (856) 702-1800

Online: Submit a request through our contact form

Quality Cannabis. Quality Service. Quality People.