Privacy Policy

1. Information We Collect

2. How We Use Personal Information

• ▸To respond to inquiries, provide information about our cultivation operations or products, and communicate with you.
• ▸To operate, maintain, secure, and improve the Site and our services.
• ▸To verify eligibility or business status where relevant to licensed cannabis activities.
• ▸To comply with legal and regulatory obligations under Minnesota Statutes Chapter 342, Minnesota Rules Chapter 9810, OCM requirements (including seed-to-sale tracking of inventory, security, and record-keeping), tax, and other applicable laws.
• ▸To detect, prevent, and respond to fraud, security incidents, or unauthorized access.
• ▸For internal analytics, quality improvement, and business operations (using de-identified or aggregated data where feasible).
• ▸With your consent, for marketing or promotional communications (you may opt out at any time).
• ▸To enforce our terms, protect our rights, or as otherwise required or permitted by law.

3. How We Share Personal Information

We do not sell personal information for monetary consideration. We do not share personal information for cross-context behavioral advertising in a manner that would constitute a "sale" under the MCDPA without providing required opt-out rights. We may disclose personal information in the following circumstances:

• ▸Service providers / processors: To trusted third parties who perform services on our behalf (website hosting, analytics, email delivery, security, payment processing if applicable, IT support). These parties are contractually obligated to use the information only for the services they provide and to protect it appropriately.
• ▸Regulatory and legal compliance: To the Minnesota Office of Cannabis Management, other state or local regulators, law enforcement, or courts when required by law, regulation, subpoena, court order, or to comply with seed-to-sale, security, licensing, or inspection requirements under Chapter 342 and Rules Chapter 9810.
• ▸Business transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of assets (subject to appropriate confidentiality protections).
• ▸With your consent or at your direction.
• ▸Protection of rights and safety: When we believe disclosure is necessary to protect the rights, property, or safety of Kind Bud, our employees, customers, or others, or to investigate potential violations of law or our policies.
• ▸Aggregated or de-identified data: We may share data that cannot reasonably be used to identify you.

4. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction, taking into account the nature of the data and the risks involved. These measures include access controls, encryption where appropriate, secure storage, employee training on data privacy and confidentiality (as required by Minn. R. 9810.1102), designation of authorized personnel for access to private/nonpublic data, and SOPs for responding to security breaches consistent with Minn. Stat. §§ 325E.61 and 325E.64 (as required by Minn. R. 9810.1100 and 9810.1500). No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a breach of the security of a system containing personal information that meets the statutory definition, we will provide notice as required by Minnesota law.

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal, regulatory, tax, accounting, or licensing obligations (including OCM record-keeping requirements), to resolve disputes, or as otherwise permitted or required by law. Retention periods vary by category of data and applicable requirements. When no longer needed, we securely delete, destroy, or de-identify the information.

6. Your Privacy Rights

Minnesota Consumer Data Privacy Act (MCDPA) rights (if we meet applicability thresholds or as a matter of good practice). Minnesota residents may have the right to:

• ▸Confirm whether we are processing your personal data and access the categories (and, in some cases, specific pieces) of personal data.
• ▸Correct inaccurate personal data.
• ▸Delete personal data (subject to exceptions, including legal retention obligations).
• ▸Obtain a portable copy of personal data you previously provided.
• ▸Opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
• ▸Question the results of certain profiling decisions and request review.
• ▸Obtain a list of the categories of third parties (or, where feasible, specific third parties) to which we have disclosed personal data.

7. Cookies and Tracking Technologies

We and our service providers may use cookies, pixels, local storage, and similar technologies to operate the Site, remember preferences, analyze traffic, and improve user experience. You can control cookies through your browser settings. Disabling certain cookies may affect Site functionality. We do not currently respond to "Do Not Track" signals in a uniform manner across all browsers, but we honor legally required opt-out mechanisms for targeted advertising or sales where applicable.

8. Third-Party Links and Services

The Site may contain links to third-party websites, services, or applications. This Policy does not apply to those third parties. We encourage you to review their privacy policies.

9. Children's Privacy

The Site is not directed to individuals under 21. We do not knowingly collect personal information from anyone under 21. If we learn that we have collected such information, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us.

10. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or OCM guidance. The "Last Updated" date at the top will indicate when changes were made. Material changes will be posted on the Site, and where required by law we will provide additional notice or obtain consent. Your continued use of the Site after the effective date of changes constitutes acceptance of the updated Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

12. Additional Cannabis and Minnesota-Specific Disclosures

• ▸We operate as a licensed cannabis cultivator under Minnesota Statutes Chapter 342 and are subject to oversight by the Minnesota Office of Cannabis Management. Our operations, including security of records and employee training on data privacy, are conducted in accordance with Minnesota Rules Chapter 9810.
• ▸Inventory and product movement are tracked through the statewide monitoring (seed-to-sale) system as required; this primarily concerns product data rather than individual consumer personal information.
• ▸We do not share customer personal information with federal agencies except as specifically ordered by a court or as otherwise required by applicable law.
• ▸This Policy is provided for transparency and compliance purposes. It does not create contractual rights beyond those required by law. Nothing in this Policy constitutes legal advice.