Privacy Policy

1. Introduction

Welcome to www.shaggysbaggy.com, owned and operated by Shaggy's Baggy ("we," "us," or "our"), a licensed medical cannabis dispensary located in Auburn, Maine. We are committed to protecting the privacy and security of our patients' personal and medical information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our online services, or visit our physical dispensary. By accessing this Site, you agree to the terms of this Privacy Policy.

2. Eligibility & Age Verification

This Site is intended solely for use by:

  • Qualifying patients with a valid Medical Marijuana Registry Identification Card who are at least 18 years of age.

  • Registered caregivers at least 21 years of age.

We do not knowingly collect, solicit, or maintain personal information from anyone under the age of 18. If you are under 18 (and not a qualifying pediatric patient accessing services through a legal guardian), please do not use this Site.

3. Information We Collect

We collect information that identifies you personally as well as data regarding your use of our Site.

A. Personal & Medical Information

To provide medical cannabis services in compliance with Maine law, we may collect:

  • Identity Information: Name, date of birth, mailing address, email address, and phone number.

  • Medical Verification: Maine Medical Cannabis Program Patient ID number, Registry Identification Card details, and valid government-issued photo ID (e.g., driver’s license).

  • Transaction Data: Purchase history, product preferences, and payment information.

B. Usage & Technical Data

When you visit our Site, we automatically collect:

  • Device Information: IP address, browser type, operating system, and device identifiers.

  • Activity Data: Pages viewed, time spent on the Site, and referring website addresses.

4. How We Use Your Information

We use your data for the following purposes:

  • Verification: To verify your age and status as a valid medical cannabis patient or caregiver in accordance with the Maine Office of Cannabis Policy.

  • Order Processing: To process online reservations, pickup orders, and payments.

  • Compliance: To maintain records as required by Maine state law (Title 22 MRSA §2430-G) and to report mandatory data to the state tracking system (Metrc).

  • Communication: To send you updates about your orders, service changes, or (with your explicit consent) marketing materials.

  • Site Improvement: To analyze website traffic and improve user experience.

5. Disclosure of Your Information

We value your privacy and do not sell your personal information to third parties. However, we may share your information in the following limited circumstances:

  • Regulatory Compliance: We are required by law to share specific transaction and inventory data with the Maine Office of Cannabis Policy (OCP) and its designated tracking system (Metrc).

  • Service Providers: We may share data with trusted third-party vendors who assist us with website hosting, payment processing, POS systems, and email delivery. These partners are contractually obligated to keep your information confidential.

  • Legal Obligations: We may disclose information if required to do so by law, such as in response to a subpoena, court order, or law enforcement request, or to protect the safety and rights of Shaggy's Baggy, our patients, or the public.

6. Data Security (HIPAA & Maine Law)

We implement administrative, technical, and physical security measures designed to protect your personal and medical information. While we strive to use commercially acceptable means to protect your data (including SSL encryption for the Site), please be aware that no method of transmission over the Internet is 100% secure.

Note on HIPAA: While we adhere to strict confidentiality standards similar to HIPAA (Health Insurance Portability and Accountability Act), please consult with us directly regarding specific medical record protections.

7. Your Rights and Choices

  • Access and Correction: You have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate.

  • Marketing Opt-Out: You may opt out of receiving promotional emails or text messages from us at any time by following the "unsubscribe" link in the communication or contacting us directly.

  • Cookies: You can choose to set your browser to remove or reject browser cookies. Please note that disabling cookies may affect the functionality of our Site.

8. Third-Party Links

Our Site may contain links to third-party websites (e.g., cannabis education resources, regulatory bodies). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies.

9. Medical Disclaimer

Content on this Site is for informational purposes only and is not intended to be a substitute for professional medical advice, diagnosis, or treatment.

  • FDA Disclosure: These statements have not been evaluated by the Food and Drug Administration. These products are not intended to diagnose, treat, cure, or prevent any disease.

  • Impairment Warning: Marijuana has intoxicating effects and may be habit-forming. Driving or operating machinery while under the influence of marijuana is illegal.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or Maine state regulations. We will notify you of any significant changes by posting the new policy on this page with an updated date.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please use the contact us using the contact form at www.shaggysbaggy.com/contact

Implementation Notes for the Web Developer:

  • Age Gate: Ensure you have a functional age gate pop-up when users first visit the site, asking them to confirm they are 18+ (medical) or 21+.

  • Consent Checkbox: Add a checkbox on any contact or order forms that says, "I agree to the Privacy Policy and consent to the processing of my data."

  • Opt-Out: Ensure your email marketing platform (e.g., Mailchimp, Constant Contact) has a working unsubscribe link.