Legal
Privacy Policy
Who we are
Your privacy is important to us. This Privacy Policy describes how The Vault Dispensary, LLC (“The Vault,” “we,” “our,” or “us”) collects, uses, shares, and protects your personal information when you visit vaultdispensary.com (the “Website”), shop at our retail location at 901 N 2nd Street, Millville, NJ (the “Store”), participate in The Reserve loyalty program, or place orders through our cannabis ordering platform powered by our technology partner SD Technologies, Inc. (“Sweed”).
Sweed operates our point-of-sale system and the customer-facing ordering platform, and hosts the underlying database that stores customer records, transactions, and loyalty information. When Sweed processes personal data in connection with our Solution, it does so on our behalf as our service provider, under contract, and is not authorized to use that data for its own marketing or other purposes. The Website, the Store, the loyalty program, and the ordering platform are collectively referred to as the “Solution.”
Information we collect
We collect personal information in four contexts: when you use the Website, when you order through our ordering platform, when you visit the Store, and when you enroll in The Reserve. Personal information is information that identifies, relates to, or could reasonably be linked with a particular person.
A. Through the Website
| What we collect | How we collect it | Why we collect it |
|---|---|---|
| IP address, browser type, device identifiers, pages viewed, and session data. | Automatically recorded when you visit vaultdispensary.com. | To operate the site, troubleshoot issues, and understand how the site is used. |
| Age verification (a yes/no confirmation that you are 21 or older). | You confirm directly when you first visit the site. | Required by New Jersey law for cannabis-related websites. |
| Information you submit through contact forms or inquiries. | You provide it directly when you reach out to us. | To respond to your question or request. |
B. Through the ordering platform (powered by Sweed)
| What we collect | How we collect it | Why we collect it |
|---|---|---|
| Personal identifiers: name, email, phone number, date of birth, and pickup-location preference. | You provide them directly when you create an account or place an order through our ordering platform (powered by our POS partner, Sweed). | To create and maintain your account, process your order, and confirm your eligibility under New Jersey law. |
| Order details: products selected, quantities, and reservation/pickup time. | You provide them directly when you submit an order. | To fulfill your order at our Millville store. |
| Government-issued ID information. We verify the document and the date — we do not photograph or store images of your ID. | Presented at pickup or upon account creation. | To verify your age as required by the New Jersey Cannabis Regulatory Commission (NJ CRC). |
| Order history and product preferences. | Recorded automatically as you use the ordering platform. | To process your orders and improve our menu and recommendations. |
C. During in-store visits
| What we collect | How we collect it | Why we collect it |
|---|---|---|
| Age verification. We check your government-issued ID — we do not photograph or store images of it. | Presented at entry or at the point of sale. | Required by NJ CRC rules and applicable state law. |
| Purchase details: products, quantities, and amount paid. | Recorded at the point of sale (our POS is operated by Sweed on our behalf). | To complete the transaction, generate receipts, and meet New Jersey recordkeeping requirements. |
| Loyalty member identifier (if you choose to use The Reserve). | You provide your phone number or scan your loyalty profile at checkout. | To credit points to your loyalty account. |
D. Through The Reserve loyalty program
| What we collect | How we collect it | Why we collect it |
|---|---|---|
| Name, phone number, optional email address, and birthday. | You provide them directly at enrollment in The Reserve. | To track your points and tier, verify enrollment, and send you account-related messages. |
| Purchase history and tier status. | Recorded automatically as you make qualifying purchases. | To calculate points, manage your tier, and personalize loyalty offers. |
| Communication preferences (transactional vs. marketing opt-in). | You select them at enrollment or in your account. | To respect your consent choices for marketing messages. |
How we use your information
We use your personal information to:
- Process transactions and fulfill orders, whether placed online for pickup or in person at the Store;
- Create and service your account in The Reserve loyalty program (calculate points, manage tier, send you transactional notifications about your account);
- Communicate with you about your orders, your account, or inquiries you submit;
- Verify your age and eligibility to purchase cannabis under New Jersey law;
- Comply with our obligations under the New Jersey Cannabis Regulatory Commission (NJ CRC) and other applicable laws;
- Operate, troubleshoot, and improve the Website and the ordering platform;
- Detect, prevent, and respond to fraud, security incidents, or abuse of the Solution; and
- Send marketing communications — but only if you have given us explicit opt-in consent. You can withdraw consent at any time.
If you decline to provide personal information that we need to deliver the Solution (for example, the contact details required to process a pickup order), we may not be able to provide that part of the service.
We do not sell your data
We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising. We do not engage in profiling that produces legal or similarly significant effects.
We honor the Global Privacy Control (GPC) browser signal as an automatic opt-out request. If your browser sends a GPC signal when you visit our Website, we treat it as a request to opt out of any sale or sharing of your personal information, even though we do not engage in either. You can also submit a formal opt-out request through our Do Not Sell or Share My Info page.
Messaging
By providing your mobile phone number or email address through the ordering platform or at loyalty enrollment, you consent to receive informational and transactional messages from us (and from Sweed on our behalf) — for example, order confirmations, pickup-ready notifications, and account-related notices. Standard message and data rates may apply.
Marketing messages (promotions, new product announcements) require a separate, explicit opt-in at enrollment. You may opt out of marketing messages at any time by replying STOP to any marketing text, using the unsubscribe link in any marketing email, or contacting info@vaultdispensary.com.
Your rights under the NJDPA
Under the New Jersey Data Privacy Act (NJDPA), you have the right to:
- Confirm whether we are processing your personal information and access a copy of that information;
- Correct inaccurate personal information about you;
- Delete your personal information, subject to legal retention obligations (see Section 10);
- Port your personal information to another service in a portable, readily usable format;
- Opt out of the sale of your personal information (we do not sell);
- Opt out of the processing of your personal information for targeted advertising (we do not engage in targeted advertising); and
- Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in such profiling).
To exercise these rights, visit our Do Not Sell or Share My Info page or email info@vaultdispensary.com. We will respond within 45 days; if more time is required, we will let you know and may take up to an additional 45 days. If we decline a request, you have the right to appeal that decision — instructions will be included in our response.
Security
We and our service providers implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, or accidental loss. These include HTTPS encryption for all web traffic, encrypted storage at rest within Sweed’s AWS-hosted infrastructure, access controls limiting employee access to personal data on a need-to-know basis, and periodic security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Some information may also be stored on your own device (for example, age-gate confirmation in a cookie). You are responsible for maintaining the security of your device and accounts.
Data retention
We retain your personal information only as long as necessary to fulfill the purposes described in this policy:
- Transaction records — 5 years, per NJ CRC requirements.
- Loyalty program data — for as long as your account is active, plus 1 year after deactivation.
- Web analytics data — 14 months.
- Privacy request records — 3 years, per NJDPA requirements.
Children's privacy
Our Solution is intended for adults 21 years of age and older only. We do not knowingly collect personal information from individuals under 21. If we learn that we have collected personal information from someone under 21, we will delete it promptly. If you believe a child under 21 has provided personal information to us, please contact info@vaultdispensary.com.
Compliance with New Jersey law
Our collection, use, sharing, and protection of personal information is subject to New Jersey state law and regulation, including the New Jersey Data Privacy Act and rules issued by the New Jersey Cannabis Regulatory Commission. In the event of any conflict between this Privacy Policy and an applicable New Jersey statute or regulation, the statute or regulation controls.
Users outside New Jersey or the United States
The Solution and the servers that support it are located in the United States and are intended only for use by individuals in New Jersey and elsewhere in the United States. Personal information you submit using the Solution will be transferred to and stored in the United States. The Solution is not directed to, or designed for, users in the European Union or the United Kingdom.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and notify members of The Reserve via the communication method on file. Your continued use of the Solution after changes are posted constitutes your acceptance of the updated policy.
Contact us
For privacy-related questions or to exercise your rights: info@vaultdispensary.com
The Vault Dispensary, LLC · 901 N 2nd Street, Millville, NJ 08332