Privacy Policy

The Vault Dispensary, LLC ("The Vault," "we," "our," or "us") operates the website vaultdispensary.com and the retail cannabis dispensary located at 901 N 2nd Street, Millville, NJ 08332. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, use our services, or interact with us in any way.

We collect information you provide directly (name, email, phone, date of birth for age verification and loyalty), information from transactions (purchase history, payment method type), and information collected automatically (IP address, browser type, pages visited, device information). We verify your age via government-issued photo ID as required by New Jersey law. We do not photograph or store images of your ID — we verify the date and document authenticity only.

We use your personal information to: process transactions and fulfill orders; manage your loyalty program account (The Reserve); communicate with you about your orders, account, or inquiries; comply with NJ Cannabis Regulatory Commission requirements; improve our website and services; send marketing communications (only with your explicit opt-in consent); and detect and prevent fraud.

We use cookies for: age verification (vault_age_ok cookie, 30-day expiration); website analytics via Vercel Analytics (anonymized performance data); and session management. We do not use third-party advertising cookies on product-related pages. If we implement Meta Pixel or similar tracking in the future, it will be limited to non-product marketing pages per platform cannabis advertising policies.

We share your information with: Sweed (POS and loyalty management); Aeropay (payment processing); Vercel (website hosting and analytics); and law enforcement or regulators when required by law. We do not sell, rent, or share your personal information with data brokers, advertising networks, or any other third parties for their own marketing purposes. [ATTORNEY REVIEW: Confirm this vendor list matches actual data flows.]

Under the New Jersey Data Privacy Act (NJDPA), you have the right to: know what personal information we collect; access a copy of your data; correct inaccurate information; delete your data (subject to legal retention requirements); port your data to another service; opt out of the sale of your data (we do not sell data); and opt out of profiling (we do not profile). To exercise these rights, visit our Do Not Sell or Share My Info page or email privacy@vaultdispensary.com. We honor Global Privacy Control (GPC) signals as automatic opt-out requests.

Our website and services are intended for adults 21 years of age and older. We do not knowingly collect personal information from individuals under 21. If we learn that we have collected information from someone under 21, we will delete it promptly.

We retain your personal information for as long as necessary to fulfill the purposes described in this policy: transaction records are retained for 5 years per NJ CRC requirements; loyalty program data is retained as long as your account is active, plus 1 year after deactivation; web analytics data is retained for 26 months; and privacy request records are retained for 3 years per NJDPA requirements. [ATTORNEY REVIEW: Confirm 5-year retention period against current NJ CRC rules.]

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including HTTPS encryption for all web traffic, encrypted data storage, access controls limiting employee access to personal data, and regular security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify loyalty program members via the communication method on file. Your continued use of our website and services after changes are posted constitutes your acceptance of the updated policy.