PRIVACY POLICY

Last Updated: September 3, 2026

This Privacy Policy for Cannabis Health Dispensary (“Cannabis Health,” “we,” “us,” or “our”) describes how and why we may collect, use, store, disclose, or otherwise process information when you use our websites, mobile application, loyalty program, and related services (collectively, the “Services”).

This Privacy Policy applies when you:

• Visit a Cannabis Health website that links to this Privacy Policy;
• Download, access, or use the Cannabis Health mobile application;
• Create or use a Cannabis Health customer or loyalty account;
• Receive or interact with communications from Cannabis Health; or
• Otherwise interact with our related Services.

Cannabis Health is committed to protecting your privacy and handling personal information responsibly.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law or platform policy, we will request appropriate permission or consent before collecting or using personal or sensitive information.

If you have questions about this Privacy Policy or our privacy practices, you may contact us at:

Cannabis Health
1624 Discovery Circle, Suite 2
Rapid City, South Dakota 57701
Email: info@cannabishealthstores.com

SUMMARY OF KEY POINTS

What information do we collect?
Depending on how you interact with the Services, we may collect information such as your name, email address, phone number, login credentials, date of birth, loyalty information, purchase-related information, device information, app usage information, and certain technical information.

Does the mobile application use location information?
Yes. The mobile application may request access to precise device location for geofencing and other location-based application functionality. On Android devices, granting precise location permission is optional. Precise location accessed for this functionality is not stored by the mobile application and is not used to trigger promotional or advertising notifications.

Does the Cannabis Health application sell cannabis?
No. The Cannabis Health mobile application is informational in nature. Cannabis and controlled-substance products are not sold through the application. Any applicable transactions occur through external third-party systems.

Do we use service providers?
Yes. We use service providers, including Dutchie, to provide technology supporting customer accounts, loyalty functionality, communications, analytics, and other Services.

How do we protect information?
Data transmitted by the Dutchie-powered application is encrypted in transit using HTTPS/TLS. We also use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

Can you delete your account?
Yes. Customers may request deletion of their account and associated personal information, subject to information that must be retained for legitimate legal, regulatory, security, fraud-prevention, recordkeeping, or similar purposes.

1. WHAT INFORMATION DO WE COLLECT?

The information we collect depends on how you interact with Cannabis Health and which features of the Services you use.

Information You Provide to Us

We may collect:

• Name – Your first and last name. Providing your name may be optional depending on the account feature being used.
• Email address – An email address is required to establish and maintain certain customer accounts.
• Phone number – Providing a phone number may be optional and may be used for account and communication purposes.
• Login credentials – Account credentials, including a password, may be required to create and access your account.
• Date of birth – Date of birth may be required for age verification and application age-gating purposes.
• Account information – Information associated with your customer or loyalty account.
• Loyalty information – Loyalty membership status, points, rewards, tier status, qualifying activity, and related information.
• Purchase-related information – Information such as purchase history, products purchased, transaction dates, order status, and related loyalty activity when associated with your account.
• Communication preferences – Your preferences regarding email, SMS/text messaging, push notifications, and other communications.
• Information you voluntarily provide – Information submitted through customer service requests, forms, surveys, or other interactions with Cannabis Health.

Information Collected Automatically

When you use the Services, Cannabis Health and service providers supporting the Services may automatically collect certain technical, device, usage, and performance information.

Depending on the Services and technology used, this may include:

• Device type and model;
• Operating system and version;
• Application version;
• Internet Protocol (IP) address;
• Device or application identifiers;
• Mobile network or Internet service provider information;
• Language and general device settings;
• App usage and interaction information;
• Crash reports;
• Diagnostic information;
• Application performance information; and
• Analytics and telemetry information.

This information may be used to operate the Services, maintain security, diagnose technical issues, understand how the Services are used, analyze application performance, and improve functionality.

2. LOCATION INFORMATION

The Cannabis Health mobile application may request permission to access your device's precise location for geofencing and other location-based application functionality.

Geofencing is a location-based technology that uses a virtual geographic boundary to determine whether a device is within a designated geographic area. Location information may be accessed as necessary to provide applicable location-based functionality.

Precise location is not used to trigger promotional or advertising notifications.

Android Users

On Android devices, sharing precise location with the Cannabis Health mobile application is optional.

If you choose to grant location permission, precise location may be accessed as necessary to provide applicable geofencing or other location-based functionality.

Precise location accessed for this functionality is not stored by the mobile application.

You may deny or revoke location permission through your Android device settings. Disabling location permission may limit certain location-based features but does not prevent general use of the application.

Other Devices

Location permission requirements and functionality may differ depending on the device and operating system.

For example, location permission may be required on iOS in connection with applicable platform requirements or location-based functionality.

IP-Based Location Information

Technical information such as your IP address and Internet service provider information may also be processed in connection with telemetry, analytics, security, and operation of the Services.

An IP address may provide general information regarding the approximate geographic area from which a device connects to the Services.

3. HOW DO WE USE YOUR INFORMATION?

We may process information to:

• Create, authenticate, maintain, and manage customer accounts;
• Verify age or eligibility where applicable;
• Administer Cannabis Health loyalty points, rewards, tiers, and related benefits;
• Maintain purchase-related and loyalty records;
• Provide customer support;
• Provide requested Services and application functionality;
• Send account, transactional, and service-related communications;
• Send promotional emails, text messages, push notifications, or other marketing communications when permitted and consistent with your communication preferences;
• Maintain communication preferences;
• Personalize aspects of the customer experience where applicable;
• Provide geofencing and other location-based application functionality when location permission is granted;
• Understand how customers interact with the application;
• Perform analytics;
• Diagnose crashes, errors, and technical issues;
• Improve application functionality and performance;
• Maintain security;
• Detect, prevent, and investigate fraud, abuse, or security incidents;
• Comply with applicable legal and regulatory requirements; and
• Carry out other purposes disclosed to you when information is collected.

Precise location information used for geofencing is not used to trigger promotional or advertising notifications.

We will not use personal or sensitive information for materially different purposes without providing appropriate notice or obtaining consent where required.

4. CANNABIS HEALTH MOBILE APPLICATION AND TRANSACTIONS

The Cannabis Health mobile application is informational in nature.

Cannabis and other controlled-substance products are not sold through the Cannabis Health mobile application.

The application may provide information or links to services operated by third parties. Any product browsing, ordering, purchasing, payment processing, or other transaction functionality that may be available through an external service occurs outside the Cannabis Health application and is subject to the applicable third party's terms, privacy policy, and legal requirements.

Cannabis Health does not represent that use of the mobile application itself constitutes a purchase, sale, or transaction involving cannabis or another controlled substance.

5. LOYALTY PROGRAM INFORMATION

Cannabis Health may maintain information associated with your loyalty account, including:

• Loyalty membership status;
• Loyalty points;
• Rewards;
• Tier or membership status;
• Qualifying purchase activity;
• Redemption activity; and
• Other information necessary to administer the loyalty program.

We may use this information to calculate and maintain loyalty balances, administer rewards, maintain your account, provide eligible offers, provide customer service, and communicate with you regarding the loyalty program.

6. PUSH NOTIFICATIONS AND COMMUNICATIONS

If you enable push notifications, Cannabis Health may send notifications regarding your account, loyalty program, store information, promotions, or other Services.

Push notifications and promotional communications are not triggered based on your device entering or exiting a geofenced area.

You can control push-notification permissions through your mobile device settings.

If you have consented to receive promotional email communications, you may opt out by following the unsubscribe instructions included in those communications.

If you have consented to receive promotional text messages, you may opt out using the applicable opt-out instructions, such as replying STOP, where supported.

You may also manage applicable communication preferences through your account or by contacting Cannabis Health.

Opting out of promotional communications does not prevent Cannabis Health from sending necessary transactional, account, security, service-related, or other legally permitted communications.

7. THIRD-PARTY SERVICE PROVIDERS

Cannabis Health uses third-party service providers to assist with the operation, maintenance, security, analysis, and improvement of the Services.

Dutchie

Dutchie provides technology and services supporting portions of the Cannabis Health mobile application and related Services.

Dutchie processes information as a service provider on behalf of Cannabis Health.

Depending on the features you use, information processed through Dutchie may include:

• Name;
• Email address;
• Phone number;
• Account information;
• Login and authentication information;
• Date of birth or age-verification information;
• Loyalty information;
• Purchase-related information;
• Communication preferences;
• Device and technical information;
• App usage and interaction information;
• Crash and diagnostic information;
• Device identifiers; and
• Location information when applicable permission is provided.

Dutchie and technology providers or software development kits (“SDKs”) incorporated into the application may process information as necessary to provide application functionality, analytics, diagnostics, communications, security, and related technology services.

Third-party providers and SDK providers may maintain their own privacy policies and data-use terms.

We expect service providers processing information on our behalf to use information only for authorized purposes and to maintain appropriate safeguards.

8. WHEN MAY INFORMATION BE DISCLOSED?

We may disclose information in circumstances including:

• To service providers performing services on our behalf;
• When necessary to provide functionality that you request;
• To comply with applicable laws, regulations, court orders, legal processes, governmental requests, or regulatory requirements;
• To investigate or prevent fraud, misuse, security threats, or violations of our agreements;
• When reasonably necessary to protect the rights, property, or safety of Cannabis Health, our customers, or others; or
• In connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction.

Cannabis Health does not sell personal or sensitive user data to third parties for monetary consideration.

We do not disclose personal or sensitive user data to third parties for purposes unrelated to providing, maintaining, securing, or improving the Services except where permitted by applicable law and appropriately disclosed to you.

9. COOKIES AND SIMILAR TECHNOLOGIES

Cannabis Health websites and web-based portions of the Services may use cookies, pixels, web beacons, and similar technologies.

These technologies may be used to:

• Maintain website functionality;
• Remember preferences;
• Improve security;
• Understand use of the Services;
• Perform analytics;
• Diagnose technical issues; and
• Improve the customer experience.

Your browser may allow you to control or disable certain cookies.

10. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by applicable law.

Retention periods may depend on the nature of the information and the reason it was collected.

Information may be retained as necessary to:

• Maintain customer accounts;
• Administer loyalty programs;
• Maintain required business or transaction records;
• Comply with legal, regulatory, tax, accounting, or recordkeeping obligations;
• Prevent fraud or security incidents;
• Resolve disputes;
• Enforce agreements; and
• Fulfill other legitimate business or legal purposes.

Precise device location accessed for geofencing functionality is not stored by the mobile application.

When other information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with applicable requirements and practices.

11. HOW DO WE KEEP YOUR INFORMATION SAFE?

Cannabis Health and its service providers use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, or destruction.

Data transmitted by the Dutchie-powered mobile application is encrypted in transit using HTTPS/TLS.

Access to personal information is limited to authorized personnel and service providers who require access to perform their assigned functions.

No electronic transmission or storage method can be guaranteed to be completely secure, and we cannot guarantee absolute security.

12. AGE RESTRICTIONS AND CHILDREN'S PRIVACY

The Cannabis Health mobile application uses date-of-birth information for age verification and maintains a 21+ age gate.

The Services are intended for adults age 21 and older where applicable to the Services being accessed.

Cannabis Health does not knowingly solicit personal information from or direct the mobile application to children.

If we learn that personal information has been collected from a child in violation of applicable law, we will take appropriate steps to delete or otherwise address the information as required.

Access to cannabis-related products and services remains subject to applicable laws, regulations, eligibility requirements, and restrictions independently of access to the informational mobile application.

13. YOUR PRIVACY RIGHTS

Depending on applicable law, you may have rights regarding personal information maintained about you.

These may include the ability to request:

• Access to certain personal information;
• Correction of inaccurate or incomplete personal information; or
• Deletion of certain personal information.

You may also be able to review or update certain account information directly through your customer account.

Cannabis Health may need to verify your identity before completing certain requests in order to prevent unauthorized access, alteration, or deletion.

We will process applicable privacy requests in accordance with applicable law.

14. ACCOUNT AND DATA DELETION

If you have created an account associated with Cannabis Health, you may request deletion of your account and associated personal information.

Delete Your Account Online

You may access your account at:

dutchie.com/stores/cc-health/user/account

Navigate to:

Account > Details > Delete Account

and follow the applicable instructions.

Contact Cannabis Health

You may also contact Cannabis Health regarding an account or personal-data deletion request:

Cannabis Health
1624 Discovery Circle, Suite 2
Rapid City, South Dakota 57701
Email: info@cannabishealthstores.com

Upon receiving and verifying a valid deletion request, information associated with the account will be deleted except for information Cannabis Health or its service providers are required or permitted to retain for legitimate legal, regulatory, security, fraud-prevention, recordkeeping, dispute-resolution, or similar purposes.

Where information must be retained, it will be retained only for as long as reasonably necessary for the applicable purpose.

Deleting an account may result in the permanent loss of:

• Account access;
• Loyalty points;
• Rewards;
• Loyalty status;
• Account preferences;
• Account-related history; and
• Other account-related features.

Information That May Be Retained

Certain information may need to be retained after an account-deletion request when necessary to:

• Comply with legal or regulatory requirements;
• Satisfy tax, accounting, or recordkeeping obligations;
• Maintain records of transactions completed before deletion;
• Detect or prevent fraud, abuse, or security incidents;
• Resolve disputes;
• Enforce agreements; or
• Comply with another lawful obligation.

15. THIRD-PARTY LINKS AND SERVICES

The Services may contain links to websites, applications, platforms, or services operated by third parties.

Cannabis Health does not control the privacy practices of independent third parties.

When you leave the Cannabis Health application or website and interact directly with a third-party service, information you provide to that third party is subject to that provider's applicable privacy policy and terms.

We encourage you to review the privacy policies of third-party services before providing personal information.

16. BUSINESS TRANSFERS

If Cannabis Health is involved in a merger, acquisition, restructuring, financing, sale of assets, bankruptcy, or similar business transaction, information may be transferred as part of that transaction where permitted by law.

Any such transfer will be handled in accordance with applicable legal requirements and appropriate privacy protections.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our Services, technology, legal requirements, or privacy practices.

When we update this Privacy Policy, we will revise the Last Updated date at the top of the policy.

Where required by applicable law, we will provide additional notice or obtain consent before making material changes affecting how personal information is handled.

We encourage you to review this Privacy Policy periodically.

18. HOW TO CONTACT US

If you have questions or concerns about this Privacy Policy, our privacy practices, or information associated with your Cannabis Health account, please contact:

Cannabis Health
1624 Discovery Circle, Suite 2
Rapid City, South Dakota 57701

Email: info@cannabishealthstores.com

You may also use this contact information to request access to, correction of, or deletion of personal information where applicable.