The THC Shop Privacy Policy

Effective Date: September 15, 2025
Last Updated: September 15, 2025

This Privacy Policy (the “Policy”) governs the collection, use, storage, processing, disclosure, and protection of information by The THC Shop powered by Coastal Herb (the “Company,” “we,” “us,” or “our”), in connection with your access to and use of the website located at https://thcac.com, any subdomains thereof, and all related online and offline services, systems, applications, point-of-sale platforms, delivery systems, loyalty programs, customer interfaces, and business operations (collectively, the “Services”).

ACCESS TO AND USE OF THE SERVICES IS STRICTLY LIMITED TO PERSONS TWENTY-ONE (21) YEARS OF AGE OR OLDER. By accessing or using the Services, you represent, warrant, and covenant that you are at least twenty-one (21) years of age and legally permitted to access cannabis-related services under applicable law.

1. LEGAL EFFECT; ACCEPTANCE OF TERMS

This Policy constitutes a legally binding agreement between you and the Company. By accessing, browsing, purchasing from, or otherwise using the Services, you expressly acknowledge, agree, and consent to the practices described herein. If you do not agree to this Policy in its entirety, you are prohibited from using the Services and must immediately discontinue access.

The Company reserves the unilateral right to modify, amend, or replace this Policy at any time, with or without notice. Continued use of the Services following the posting of any changes constitutes acceptance of such changes.

2. REGULATORY AND JURISDICTIONAL COMPLIANCE

The Company operates in a highly regulated industry. All data collection and processing activities are conducted in compliance with applicable federal, state, and local laws, including but not limited to:

New Jersey cannabis regulations and licensing requirements;
New Jersey Consumer Data Privacy Act (“NJCDPA”);
California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), to the extent applicable;
Applicable consumer protection, anti-fraud, and record-keeping statutes.

Nothing in this Policy shall be construed to create any fiduciary duty, partnership, joint venture, or agency relationship between you and the Company.

3. INFORMATION COLLECTED

3.1 Personally Identifiable Information

The Company may collect, directly or indirectly, the following categories of information:

Full legal name;
Date of birth and age verification data;
Government-issued identification (where required by law);
Physical address and delivery address;
Email address and telephone number;
Account credentials and authentication data;
Purchase history, transaction records, and loyalty program data;
Communications with the Company (including recorded calls);
Device identifiers associated with purchases or access.

3.2 Sensitive and Regulated Information

Where mandated by law or regulation, the Company may collect limited sensitive personal information strictly for compliance, verification, fraud prevention, and security purposes. Such information is never collected for resale or commercial exploitation.

3.3 Automatically Collected Data

The Company may automatically collect information including, without limitation:

IP addresses;
Device type and operating system;
Browser characteristics;
Approximate geolocation;
Session data, logs, and timestamps;
Website interaction metrics.

4. COOKIES AND TRACKING TECHNOLOGIES

The Services utilize cookies, pixels, log files, and similar technologies to ensure functionality, security, analytics, and performance optimization. You acknowledge that disabling cookies may impair functionality and waive any claim arising therefrom.

5. PURPOSES OF USE

The Company processes information for legitimate business and legal purposes, including but not limited to:

Verifying legal age and eligibility;
Completing lawful cannabis transactions;
Processing payments through third-party processors;
Maintaining regulatory compliance and audit records;
Preventing fraud, diversion, or unlawful activity;
Operating, securing, and improving the Services;
Enforcing contractual, legal, and regulatory rights;
Communicating legally required notices and service updates.

6. DISCLOSURE OF INFORMATION

THE COMPANY DOES NOT SELL PERSONAL INFORMATION. Information may be disclosed solely under the following circumstances:

Service Providers: To vendors under binding confidentiality and data-protection obligations;
Legal Compliance: To regulators, law enforcement, or courts as required or permitted by law;
Business Transactions: In connection with mergers, acquisitions, financing, or asset sales;
Protection of Rights: To protect the Company, its license, customers, employees, or the public.

7. DATA RETENTION

Information is retained only for the duration necessary to satisfy legal, regulatory, operational, and risk-management obligations. Retention periods may extend beyond account closure where required by law.

8. DATA SECURITY

The Company employs commercially reasonable administrative, technical, and physical safeguards designed to protect information. NO SYSTEM IS IMPENETRABLE, AND YOU EXPRESSLY ACKNOWLEDGE AND ACCEPT THE INHERENT RISKS OF DATA TRANSMISSION.

9. USER RIGHTS

Subject to verification and applicable law, you may request access, correction, or deletion of personal information by contacting the Company. The Company reserves the right to deny requests that are unlawful, excessive, or technically infeasible.

10. AGE RESTRICTION AND PROHIBITED USE

The Services are STRICTLY 21+. Any access by a minor constitutes unauthorized use and may result in permanent bans, reporting to authorities, and legal action.

11. THIRD-PARTY SERVICES

The Company is not responsible for the privacy practices, security, or content of third-party websites or services. Use of third-party services is at your sole risk.

12. LIMITATION OF LIABILITY

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COMPANY SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES ARISING FROM OR RELATED TO DATA ACCESS, BREACHES, OR SERVICE USE.

13. INDEMNIFICATION

You agree to indemnify, defend, and hold harmless the Company, its owners, officers, employees, affiliates, and licensors from all claims, damages, losses, liabilities, and expenses arising from your use of the Services or violation of this Policy.

14. GOVERNING LAW AND VENUE

This Policy shall be governed exclusively by the laws of the State of New Jersey. Any dispute shall be brought solely in the state or federal courts located within New Jersey, and you irrevocably consent to such jurisdiction.

15. CONTACT INFORMATION

The THC Shop powered by Coastal Herb
1740 Atlantic Avenue
Atlantic City, New Jersey 08401
Email: info@coastalherbco.xyz
Phone: (609) 710-0031