Privacy Policy

Who we are

This Privacy Policy explains how NYsweets LLC (“Sweet's,” “we,” “us”) collects, uses, shares and protects information when you visit sweetsny.com or ny-sweets.com or any page that links to this policy (together, the “Site”), buy merchandise from us, or receive our emails.

Sweet's is a New York State–licensed adult-use cannabis brand. The Site is intended only for adults 21 years of age and older.

What this policy covers

This policy covers the Site, our online merch store and the emails we send. It does not cover:

• Licensed dispensaries. Sweet's cannabis products are sold only by independent, New York State–licensed adult-use dispensaries. Any information a dispensary collects — including ID checks and purchase records — is governed by that dispensary’s own privacy policy and New York law.
• Third-party sites and services we link to or rely on, such as our merch checkout provider, social media platforms and dispensary menus. Their own privacy policies apply.

Information we collect

Information you give us

• Contact form. The topic you choose, your name, email address, phone number (optional), your message and your confirmation that you are 21 or older. For wholesale inquiries we also ask for your company name and, if you have one, your dispensary license number. For merch support we may ask for your order number.
• The Drop List (our email newsletter). Your email address, your confirmation that you are 21 or older and your consent to receive marketing emails.
• Merch orders. Your name, email, phone number, shipping and billing address and the items you buy. Orders are placed through our third-party e-commerce and payment providers. Payment card details are collected and processed directly by the payment processor — we never see or store your full card number.
• Emails you send us and anything you choose to include in them.

The Site is self-hosted: contact messages and Drop List signups are stored on servers we operate ourselves — not with a third-party form or newsletter service. The store-finder map is served from our own servers too.

Information collected automatically

• Server logs. Like nearly every website, our web server records technical information when you load a page: IP address, browser and device type, the page requested, the referring page and the date and time. We use these logs to keep the Site secure and running, and older logs are automatically rotated out.
• Browser storage. A small amount of information is kept in your own browser — see “Cookies & local storage” below.
• Site analytics. Our own analytics — running on our servers, never shared with an analytics or ad company — records how the Site is used: pages viewed, time on page and how far you scroll, links and buttons clicked (not what you type), the site or campaign that referred you, device and browser type, approximate location (city, from your IP address, which we store only as a scrambled hash), page-speed measurements and script errors. See Site analytics below for the details and how to turn it off.

Information we don’t collect

• We don’t ask for your date of birth or government ID on the Site — the age gate is a simple confirmation.
• We don’t collect information about cannabis purchases you make at dispensaries.
• We don’t ask for health information. Please don’t send it to us.

Site analytics

We use first-party analytics to understand which pages and products people find useful, where visitors come from and whether the Site is fast and working. It runs entirely on servers we operate; the data is not sold, not shared with advertising or analytics companies, and not used to follow you on other websites.

• No identifier until you confirm you’re 21+. Before that, a visit is counted only within the open browser tab.
• A random visitor ID (the sw_vid cookie) lets us tell new visits from return visits. It’s a random string — not your name, email or device fingerprint.
• We never record what you type into forms — only that a form was started or sent.
• Global Privacy Control or “Do Not Track” turns the visitor ID off automatically.
• Retention: visit-level analytics are deleted after 13 months; we keep only aggregated totals after that.
• Wholesale portal and team accounts are covered by their own terms and notices, which describe the activity log for those accounts.

Age verification

Before you can view the Site, we ask you to confirm that you are 21 or older. When you confirm, we save a single timestamp in your browser’s local storage so you aren’t asked again for 30 days. That timestamp stays on your device — it isn’t sent to us. If you are under 21, you may not use the Site.

Cookies & local storage

We keep browser storage to the minimum the Site needs to work. We don’t use advertising cookies, tracking pixels or cross-site trackers.

You can clear this information at any time with your browser’s “clear site data” setting. Doing so will show the age gate again and empty your bag.

How we use information

• To answer your messages and handle wholesale inquiries — including checking a dispensary’s license against public New York State records.
• To process, ship and support merch orders, including returns and exchanges.
• To send the Drop List emails you asked for.
• To operate, secure and improve the Site, and to prevent spam, fraud and abuse.
• To comply with the law, including New York’s adult-use cannabis rules and requests from regulators.

We don’t use your information to make automated decisions that have legal or similarly significant effects on you.

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. We share information only as follows:

• Service providers that help us run the business — the network and security provider that routes traffic to our self-hosted servers (such as Cloudflare), email delivery, our merch e-commerce platform, payment processors and shipping carriers. They may use your information only to provide services to us.
• Legal and safety reasons — to comply with a law, court order or valid request from a government agency or regulator (such as the New York State Office of Cannabis Management), or to protect the rights, property or safety of our customers, our company or others.
• Business transfers — if NYsweets LLC is involved in a merger, acquisition or sale of assets, subject to this policy.
• With your consent — or at your direction.

Marketing emails

We send marketing emails only to people who sign up and confirm they are 21 or older. Every email includes an unsubscribe link, or you can email hello@sweetsny.com to be removed. Even after you unsubscribe, we may still send messages about a merch order you placed.

How long we keep information

• Contact messages: up to 24 months after our last exchange, or longer if they relate to an ongoing business relationship such as a wholesale account.
• Drop List: until you unsubscribe. We then keep only your email address on a suppression list so we don’t email you again.
• Merch orders: as long as required for tax, accounting and legal purposes.
• Server logs: up to 90 days, unless we need them longer to investigate a security issue.
• Site analytics: visit-level records for 13 months, then only aggregated totals.

How we protect information

We maintain reasonable administrative, technical and physical safeguards designed to protect personal information, consistent with New York’s SHIELD Act (General Business Law § 899-bb). These include encrypting every page in transit (HTTPS), limiting access to people who need it, using multi-factor authentication on the accounts that hold your information, choosing service providers with strong security practices, and regularly reviewing what we collect and how long we keep it.

No system is perfectly secure. If a breach affects your private information, we will notify you and the appropriate authorities as required by New York General Business Law § 899-aa and other applicable laws.

Your choices & rights

Depending on where you live, privacy laws (such as California’s CCPA/CPRA) give you specific rights over your personal information. We extend the following rights to every visitor, wherever you live:

• Access — ask what personal information we hold about you and get a copy.
• Correction — ask us to fix information that’s wrong.
• Deletion — ask us to delete your information, subject to records we must keep by law.
• Opt out of marketing — unsubscribe at any time.
• Opt out of sale or sharing — we don’t sell or share personal information, but you can still make this request.

To make a request, email hello@sweetsny.com with “Privacy request” in the subject line. We’ll confirm your request by matching it to the email address or order details we have on file, and we’ll respond within 45 days. You may use an authorized agent; we may ask for proof that they’re acting for you. We will never treat you differently for exercising your rights.

Global Privacy Control. We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of any sale or sharing of your personal information. Because there is no common standard for “Do Not Track” signals, we honor both the same way: no analytics visitor ID is set while either is on.

Minors

The Site is for adults 21 and older only. We don’t knowingly collect personal information from anyone under 21, including children under 13. If you believe someone under 21 has given us information, email hello@sweetsny.com and we will delete it.

Links & third-party services

The Site links to services we don’t control — including our merch checkout provider, licensed dispensaries’ websites and menus, map and directions services, social media and New York State agencies. When you use them, their own terms and privacy policies apply.

Where we operate

We are based in New York, NY. The Site is intended for adults in New York State, and merch ships within the United States. Information we collect is stored and processed in the United States.

Changes to this policy

We may update this policy as the Site or the law changes. When we do, we’ll change the “Last updated” date at the top of this page, and for significant changes we’ll give more prominent notice — for example, a notice on the Site or an email to Drop List subscribers.

Contact us

Questions or requests about your privacy? Get in touch: