Privacy policy - ERBA Markets

Who we are

ERBA Markets operates two licensed cannabis retailers in Los Angeles, California: ERBA Sawtelle at 2304 Sawtelle Blvd (licence C10-0000626-LIC) and ERBA West LA at 12320 W Pico Blvd (licence C10-0000383-LIC). In this policy, "we", "us" and "our" mean ERBA Markets, and "you" means the person using this website. This policy covers www.erbamarkets.com and the ordering, delivery and tracking that runs on it.

What we collect

Information you give us

To place an order: your name, mobile number, and - for delivery - your street address, unit and ZIP code, plus any note you leave for the driver.
To create an account: your email address and a password, which is stored only as a hash.
To join the VIP list: your email address.
To contact us or apply for a job: whatever you put in the form, which is your name, email, phone and message.

Information collected automatically

Usage data: your IP address, browser and version, which pages you visited, when, and for how long. On a phone, this also includes the device type and operating system.
Order records: what you bought, from which room, and when. California requires licensed retailers to keep sales records, so this is not optional for either of us.

Age verification

Before showing a menu we ask whether you are 21 or older, and we record your answer. In store and at the door on a delivery, we check valid government issued photo identification. We check it, we do not photograph or store it.

Cookies and similar technology

We use a small number of first-party cookies and browser storage entries, and each one does a job:

Age confirmation: Records that you confirmed you are 21 or older, so you are not asked again on every visit. Expires after thirty days.
Bag token: An opaque, randomly generated identifier held in your browser that links you to your shopping bag on our server. It contains no personal information and exists so you can fill a bag without signing in.
Theme: Remembers whether you chose the light or the dark theme.
Session and security: Keeps you signed in if you have an account, and carries the cross-site request forgery token that protects form submissions.

You can refuse or delete cookies in your browser settings. If you do, the bag, the age gate and staying signed in will stop working.

How we use it

To take, pack, deliver and account for your order, and to reach you if something about it changes.
To let you follow a delivery, which means sharing your delivery address with the driver assigned to it.
To run and secure the website, including detecting fraud and abuse.
To meet our obligations as a licensed California retailer, including sales and inventory records.
To send you the VIP emails, if you asked for them. Every one of those has an unsubscribe link, and using it takes you off the list immediately.

We do not sell your personal information, and we do not share it with anyone for their own advertising.

Who else sees it

Delivery drivers, who see the name, address, phone number and note for the stop they are running.
Payment processors, who handle the card transaction. Card numbers do not reach us or this website.
Service providers who host the site and send our email, bound by contract to use your information only to provide that service.
Regulators and law enforcement, where the law requires it or a valid legal request compels it.
An acquirer, if the business is ever merged or sold. We would tell you before your information moved under a different policy.

How long we keep it

Order and transaction records are kept for as long as California cannabis regulations require and no longer. Marketing preferences are kept until you unsubscribe. Contact form messages and job applications are kept for up to twelve months. Usage data is kept in a shortened form for security and diagnostics.

Your rights in California

Under the California Consumer Privacy Act as amended, you can ask us what personal information we hold about you, ask for a copy of it, ask us to correct it, and ask us to delete it. You can also ask us not to sell or share it, though we do neither. Exercising any of these rights will never get you worse service or a worse price.

Some information we have to keep even after a deletion request, because a licensed retailer is legally required to retain sales records. Where that applies we will tell you exactly what is being kept and why.

To make a request, email info@erbamarkets.com or use the contact form. We answer within forty-five days.

Security

Traffic to this site is encrypted in transit. Passwords are stored as hashes and never in a readable form. Access to customer records is limited to staff who need it to do their job. No method of transmission or storage is completely secure, and we will not pretend otherwise, but we treat your address and phone number as the sensitive information they are.

Children

This is a cannabis retailer. Nothing here is directed at anyone under 21, and we do not knowingly collect information from anyone under 21. If you believe a minor has given us personal information, contact us and we will delete it.

Other websites

Some pages link out - Matterport for the 360 tours, Birchmount for gift cards, Google Maps for directions. Following one of those takes you onto a service we do not control, under its own privacy policy. We suggest reading it.

Changes to this policy

If we change this policy we will post the new version here and move the date at the top. Where a change is significant we will say so prominently before it takes effect.

Contact

Questions about this policy, or about anything we hold on you: info@erbamarkets.com, or write to ERBA Markets, 2304 Sawtelle Blvd, Los Angeles, CA 90064.