Health Data Privacy Notice

1. Overview

This Health Data Privacy Notice applies to the consumer health data collected by Craft Management Inc., New Vansterdam LLC, Craft Andresen, Inc., Harbor Choice LLC, Wenatchee Valley Craft Company LLC, Wenatchee Valley Craft Company 2 LLC, Craft Bottle and Liquor Shop LLC, and Craft Leavenworth LLC (collectively “Craft Cannabis”) through the website at https://craftcannabis.com/, our social media pages, and other digital media we own or operate, as well as through email and telephonic communications with us. This Notice applies only to our services in Washington state. It is designed to inform you of what consumer health data we collect, why we collect such information, how we use the information we collect, and the choices we offer.

2. Our Collection and Use of Health Data

We may collect the following categories of consumer health data:

• Individual health conditions, treatment, diseases, or diagnosis
• Social, psychological, behavioral, and medical interventions
• Health-related surgeries or procedures
• Use or purchase of prescribed medication
• Diagnoses or diagnostic testing, treatment, or medication
• Data that identifies a consumer seeking health care services

We collect and use this health data to deliver services that you requested, such as recommendations on products or information on how to obtain a medical marijuana card. You can choose not to provide certain information to us, but it may delay or prevent us from providing our services to you.

3. Categories of Health Data Shared

We may share the following category of health data:

• Data that identifies a consumer seeking health care services, such as analytics data processed by our analytics service provider and payment information processed by our payment processor.

4. Categories of Third Parties That May Receive Your Health Data

We may share your health data with the following categories of third parties:

• Contractors, service providers, and other third parties we use to support our business, such as to host the Site, design and operate the Site features, support our online reservation system, and perform administrative, analytics, payment processing, and communications services.
• Law enforcement agencies, regulatory bodies, courts, or other public authorities, to comply with our legal and regulatory obligations, to respond to requests from governmental authorities, to protect our rights, to defend against legal claims, or as otherwise required by law.
• Third parties with whom you have granted consent for us to share your health data, such as if you use the Site to select an appointment time to meet with a medical consultant.

5. Your Rights

You have the right to:

• Confirm whether we are collecting, sharing, or selling your health data
• Request access to your health data in our possession
• Withdraw your consent to our collection or sharing of your health data
• Request we delete your health data in our possession

You may exercise your rights by sending a request to management@craftcannabis.com.

If we inform you that we decline to take action regarding your request, you have the right to appeal our decision by contacting us at management@craftcannabis.com within 45 days of receiving our decision.