Privacy Policy

We collect the following, depending on how you use the site:

• Account information — your email address, a securely hashed password, your display name, and your role (patient, dispensary owner, or physician). If you sign in using a third-party single sign-on option, we receive your name, email, and profile photo from that provider.
• Profile & content you provide — for dispensaries: business name, address, hours, phone, menu items, prices, photos, and deals. For physicians: name, location, services, and photo. For patients: favorites, reviews, and the details attached to a pickup order (display name, phone, pickup time, notes).
• Verification documents — patients may optionally upload a medical-card image and a government photo ID (driver's license or state ID). See § 05 for how these are handled.
• Payment information — we do not take card payments on the site, so we never collect or store card numbers. If you buy a paid upgrade, we arrange payment directly and keep only your subscription status and basic billing records (term, amount, and dates).
• Technical & usage data — login/session cookies, IP address, and basic browser/device information, used to keep you signed in, secure the site, and prevent abuse.
• Communications — messages you send us through the contact or report-a-problem forms, or by email.

We use the information above only to operate and improve the service, specifically to:

• Create and secure your account and keep you signed in.
• Display dispensary and physician listings and let patients browse the directory.
• Route a pickup order to the dispensary you choose so the shop can confirm and fulfill it.
• Arrange any paid upgrade directly with you and send account, order, and (if you opt in) newsletter emails.
• Respond to your messages, prevent fraud and abuse, and comply with the law.

We rely on a small set of trusted, industry-standard service providers that process data on our behalf, under their own privacy and security terms:

• Hosting & infrastructure providers — to run and deliver the website.
• A database, authentication & file-storage provider — to securely store your account, listing, and uploaded files.
• An optional single sign-on provider — if you choose to sign in with a third-party account instead of a password.
• An email delivery provider — to send account, receipt, order, and newsletter messages.

One more, by design: when you place a pickup order, the order details you provide (your name, phone, the items, pickup time, and any context flags) are shared with the dispensary you chose so it can confirm and fulfill your order. That is the entire point of placing the order, and it only happens when you choose to place one.

If you choose to upload a medical-card or government photo-ID image, it is stored in a private, access-restricted location — it is never shown publicly and is not part of any public listing. These documents are used only for the purpose for which you provided them (such as keeping your verification on file), are visible only to you and to authorized staff for support, and can be deleted by you at any time from your account. Uploading them is entirely optional.

We use cookies and similar technologies for essential purposes: keeping you signed in (authentication and session tokens), remembering basic preferences such as your age-gate confirmation and selected city, and keeping the site secure. We do not use them to sell your data or to build advertising profiles about you.

We keep your account information for as long as your account is active. When you close your account or ask us to delete your data, we remove your personal information and any uploaded documents, except where we are required to keep certain records to comply with the law. Routine technical logs are kept only for a limited time.

You can, at any time:

• Access and update your account information and profile from your dashboard.
• Delete uploaded documents, or ask us to delete your account and personal data entirely.
• Unsubscribe from newsletter emails with one click (transactional emails like receipts and order updates are part of the service).

To make a request, write to us at okcannabisdirectory@gmail.com or use our contact page.

We protect your information with industry-standard safeguards: encryption in transit (HTTPS), access controls and row-level security on our database, private storage for sensitive documents, and PCI-compliant payment handling through our processor. No method of transmission or storage is ever 100% secure, but we work to protect your information and to respond quickly if an issue arises.

OK Cannabis Directory is intended for adults. The medical cannabis information and services here are for OMMA patients and the businesses that serve them, and the site is not directed to children. By using the site you confirm you are old enough to do so under Oklahoma law.

We may update this policy as the service evolves or the law changes. When we do, we'll revise the "last updated" date above. Significant changes will be communicated where appropriate. Your continued use of the site after an update means you accept the revised policy.

Questions about this policy or your data? Reach us at okcannabisdirectory@gmail.com or through our contact page. See also our Terms of Service and Our Legal Rights.