Grass Valley Provisions - Privacy Policy

Last updated: September 10, 2026

This Privacy Policy explains how Grass Valley Provisions ("GVP," "we," "us," or "our") collects, uses, and shares personal information when you visit gvprovisions.com, use the GV Provisions mobile app for iOS or Android (the "App"), shop with us in store, or otherwise interact with us. It also describes the choices you have about your information.

Our website menu, online ordering, loyalty program, and the App are built and operated for us by Dutchie (Courier Plus, Inc.), our point-of-sale and e-commerce provider. Dutchie processes customer information on our behalf and at our direction. Dutchie's own privacy policy is available at dutchie.com/privacy and applies to the services Dutchie provides directly, such as the dutchie.com marketplace and Pay by Bank.

Information we collect

Information you give us. When you create an account, place an order, join our loyalty program, sign up for emails or texts, or contact us, we may collect your name, email address, phone number, date of birth, mailing address, and the information on your government-issued ID or medical cannabis recommendation. California law requires us to verify that every customer is 21 or older (or 18 or older with a valid medical recommendation) before we can complete a sale.

Order and account information. We keep a record of what you browse, reserve, and purchase, your order history, loyalty points and rewards, discounts applied to your account, and payment-related details needed to complete a transaction. We do not store full payment card or bank account numbers on our own systems. Payments are handled by our payment processors.

Information collected automatically. When you use our website or the App, we and our service providers may collect your IP address, device type and operating system, app version, browser type, pages and products viewed, the date and time of your visit, and general location derived from your IP address or ZIP code. If you allow the App to use your device's location, we use it to show you store information, confirm you are in an area we serve, and support pickup or delivery. You can turn location access off at any time in your device settings.

Push notifications. If you enable push notifications in the App, we collect a device token so we can send you order updates and, if you opt in, offers and announcements. You can turn notifications off in your device settings at any time.

Communications. If you email, call, text, or message us, we keep a record of the conversation so we can respond and improve our service.

How we use your information

We use personal information to:

Verify your age and eligibility to purchase cannabis, as required by California law
Process, fulfill, and communicate about your orders, including pickup and delivery
Operate your account and our loyalty program
Send you order confirmations, receipts, and other transactional messages
Send you marketing emails, text messages, and push notifications if you have opted in
Respond to your questions and requests
Understand how our website and App are used so we can improve them
Detect and prevent fraud, abuse, and security issues
Comply with California cannabis regulations, including recordkeeping and track-and-trace requirements, and with other legal obligations

How we share your information

We do not sell your personal information, and we do not share it with third parties for their own advertising.

We share personal information only in these situations:

Service providers. With companies that help us run our business, including Dutchie (point of sale, online menu, ordering, loyalty, and the App), payment processors, delivery partners, and providers that help us send emails and text messages. These providers may only use your information to provide services to us.
Legal and regulatory. With the California Department of Cannabis Control, the state track-and-trace system, law enforcement, or other government bodies when required by law or license conditions, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfers. If GVP is involved in a merger, acquisition, financing, or sale of some or all of our assets, your information may be transferred as part of that transaction.
With your consent. In any other case where you have given us permission.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

Your choices

Marketing emails. Click the unsubscribe link in any marketing email.
Text messages. Reply STOP to any text message from us.
Push notifications. Turn them off in your device settings.
Location. Turn off location access for the App in your device settings.
Account information. Log in to your account to review or update your information, or contact us using the details below.

Opting out of marketing does not stop transactional messages such as order confirmations.

Deleting your account and data

You can request deletion of your account and personal information at any time by emailing us at the address below. We will delete your information unless we are required to keep it. California cannabis regulations require licensed retailers to retain certain sales and customer records for a set period, and we may also keep information needed to resolve disputes, prevent fraud, or comply with other legal obligations.

Your California privacy rights

If you are a California resident, the California Consumer Privacy Act gives you the right to:

Know what personal information we collect, use, and share, and why
Access a copy of the personal information we hold about you
Correct inaccurate personal information
Delete your personal information, subject to legal exceptions
Opt out of the sale or sharing of your personal information (we do not sell or share personal information as defined by the CCPA)
Limit the use of sensitive personal information (we use ID and medical recommendation information only to verify eligibility and comply with the law)
Not be discriminated against for exercising these rights

Notice at collection. In the past 12 months we have collected the following categories of personal information: identifiers (name, email, phone, address, date of birth, account ID); government ID information; commercial information (purchases, order history, loyalty activity); internet and device activity (IP address, device information, browsing and app usage); approximate geolocation; and communications you send us. We collect this information for the purposes described above and keep it for as long as needed to serve you and meet our legal obligations.

To exercise your rights, email us at the address below with "Privacy Request" in the subject line. We may ask for information to verify your identity before responding. You may also designate an authorized agent to make a request on your behalf.

Security

We use reasonable administrative, technical, and physical safeguards to protect your information, and we require our service providers to do the same. No system is completely secure, so please do not send government ID, medical, or payment information by email.

Age requirement

Our website, App, and services are intended only for adults 21 and older, or 18 and older with a valid medical cannabis recommendation. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

Third-party links and services

Our website and App may link to third-party sites and services we do not control, such as Google Maps, social media, and payment providers. Their privacy practices are governed by their own policies.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy here and change the "Last updated" date at the top. Continued use of our website, App, or services after an update means you accept the revised policy.