Last Updated: [17/06/2026]
Muncheas (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you visit our website or use our services.
1. Information We Collect
We collect a small amount of data to make our website work and to understand how people use it.
Information you provide directly:
- Name, email address, phone number, and delivery address (when you register or place an order)
- Date of birth and age verification information (required by Massachusetts law)
- Account credentials and saved preferences
Information we collect automatically:
- Browser type, device type, and operating system
- IP address (for security and analytics purposes)
- Pages visited, referring URL, and site usage data
- Age-verification cookies to remember your 21+ status
2. How We Use Your Information
We use your information to:
- Verify your identity and age as required by Massachusetts cannabis regulations (935 CMR 500.000)
- Process and fulfill your orders
- Communicate with you about your orders and provide support
- Improve our website and services
- Detect, investigate, and prevent fraud and unauthorized access
- Comply with legal obligations, including record-keeping requirements of the Massachusetts Cannabis Control Commission
- Send marketing messages only where you have opted in, and only until you opt out
3. Third-Party Services We Use
We use the following third-party services to operate our website. Each service operates under its own privacy policy:
- E-commerce & POS Platform — powers our online menu, customer accounts, ordering, and point-of-sale. This service processes your account details, age verification information, order history, and payment information.
- Payment Processors — used to authorize and settle payments. Card details are handled by the processor; we do not store full card numbers.
- Website Analytics — website and app analytics to understand how visitors use our site
- Website Hosting — stores website data and server logs on our behalf
- Loyalty Programs — if you choose to join our rewards program
We require these providers to protect your information and to use it only to provide services to us — not for their own independent marketing purposes.
4. How We Share Your Information
We do not sell your personal information, and we do not share it with advertising networks for targeted advertising.
We share personal information only in these circumstances:
- With service providers — strictly to operate our services on our behalf
- To comply with the law — including reporting and record-keeping required by the Massachusetts Cannabis Control Commission, state and federal tax authorities, and lawful requests from law enforcement or court orders
- To protect rights and safety — where we believe in good faith that disclosure is necessary to prevent fraud or enforce our Terms and Conditions
- In a business transfer — if we are involved in a merger, acquisition, or sale of assets, your information may be transferred, subject to this Policy and required regulatory approval
- With your consent — where you have asked us to share information with a third party
5. Age Verification
We are required by Massachusetts law to verify that all customers are 21 years of age or older. We collect age verification data, including a copy of your government-issued ID, to comply with this requirement.
Age and identification verification records are retained only as long as required to demonstrate compliance with Massachusetts age-verification requirements, then securely deleted.
6. Data Security
We use industry-standard encryption and security measures to protect your personal information. Our website is served over HTTPS with secure socket layer (SSL) encryption.
No website is perfectly secure. If we ever experience a breach affecting your personal data, we will notify you as required by Massachusetts law.
7. Data Retention — How Long We Keep Your Information
We keep personal information only as long as we need it for the purposes described in this Policy, and then delete it.
- Account data (name, email, phone, date of birth, account credentials, saved preferences) — retained while your account is active. If you delete your account, this data is deleted within 30 days.
- Order and purchase history — retained while your account is active and, after account deletion, deleted within 30 days, except for transaction records required by law
- Age and identification verification records — retained only as long as required to demonstrate compliance with Massachusetts age-verification requirements, then deleted
- Website analytics data — retained in identifiable form for no more than 14 months, after which it is deleted or retained only in aggregate, non-identifiable form
- Marketing preferences and opt-out records — retained permanently to honor your preferences
Important: Data required by Massachusetts cannabis regulations (including transaction records) is retained for the duration required by law — currently 5 years — and cannot be deleted prior to the retention period.
8. Your Rights
- Opt out of marketing communications — you can unsubscribe at any time
- Request access to your personal data — we will respond within 30 days
- Request correction of your data — if any information is inaccurate
- Request deletion of your data — note that data required by Massachusetts cannabis regulations cannot be deleted prior to its retention period
To exercise any of these rights, contact us at: [Insert your email address]
9. Cookies
We use first-party cookies for essential site functions, such as remembering your age-verification status.
- Age-gate cookies — remember your 21+ verification for 30 days
- Essential site cookies — enable core website functionality
- Analytics cookies — help us understand how visitors use our site (anonymized data)
We do not use third-party advertising cookies.
10. Children
Our site and services are for adults 21 and older. We do not knowingly collect information from anyone under 21. If you are a parent or guardian and believe a minor has provided us data, contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy. The “Last Updated” date at the top reflects the most recent change. Material changes will be communicated by email or posted here.
12. Contact Us
For privacy-related questions or to exercise your rights, contact us at:
Email: [sales@muncheas]