Health Data Policy

Craft Cannabis, Inc. – Health Data Privacy Notice

  1. Overview

This Health Data Privacy Notice describes how Craft Cannabis, Inc. (“Craft Cannabis,” “we,” “us,” and “our”) treats certain health data collected or provided in connection with your use of our website, https://craftcannabis.com/, and any other website social media pages, or other digital medium owned or operated by us. This Health Data Privacy Notice also applies to any health data collected, stored, or used by use, such as information you provide us through the above mediums, by email, or telephonic communications (collectively, the “Site”). 

The information provided in this Health Data Privacy Notice is designed to inform you of what consumer health data we collect, why we collect such information, how we use the information we collect, and the choices we offer, including how to access and update information.

This Health Data Privacy Notice applies to our services in Washington.

Please read this Privacy Notice carefully.

  1. Our Collection and Use of Health Data

We may collect the following categories of health data from you:

  • Individual health conditions, treatment, diseases, or diagnosis;
  • Social, psychological, behavioral, and medical interventions;
  • Health-related surgeries or procedures;
  • Use or purchase of prescribed medication;
  • Diagnoses or diagnostic testing, treatment, or medication; and
  • Data that identifies a consumer seeking health care services.

We may collect health data to deliver services that you requested, such as recommendations on products or information on how to obtain a medical marijuana card. 

You can choose not to provide certain information to us but it may delay or prevent us from providing our services to you.

  1. Categories of Health Data Shared

We share the following categories of health data with third parties:

 

  • Data that identifies a consumer seeking health care services, such as analytics data processed by our analytics service provider and payment information processed by our payment processor.

 

  1. Categories of Third Parties That May Receive Your Health Data

In order to provide the services you have requested, we may disclose health data to:

 

  • Our contractors, service providers, and other third parties we use to support our business, such as to host the Site, design and operate the Site features, support our online reservation system, and perform administrative, analytics, payment processing, and communications services.
  • Law enforcement agencies, regulatory bodies, courts, or other public authorities, to comply with our legal and regulatory obligations, to respond to requests from governmental authorities, to protect our rights, to defend against legal claims, or as otherwise required by law.
  • Third parties with whom you have granted consent for us to share your health data, such as if you use the Site to select an appointment time to meet with a medical consultant.

 

  1. Your Rights 

 

You have the following rights:

 

  • You have the right to confirm whether we are collecting, sharing, or selling your health data.
  • You have the right to request access to your health data in our possession.
  • You have the right to withdraw your consent to our collection or sharing of your health data.
  • You have the right to request we delete your health data in our possession.

 

You may exercise your rights by sending a request to management@craftcannabis.com. If we inform you that we decline to take action regarding your request, you have the right to appeal our decision by contacting us at management@craftcannabis.com within 45 days of receiving our decision.

 

The effective date of this Health Data Privacy Notice is November 2025.