Privacy Policy

The short version

We do not sell your personal information to third parties — and we do not give it away or license it either. It stays in house. We never have. We do collect it — to fill your order, to give you better service the next time you walk in or check out, and to understand which products actually help the people we serve.

What we collect

• Order information — your name, email address, phone number, shipping address, the items you bought, and the amount you paid.
• Loyalty information — if you use VIP Credits, the phone number tied to your rewards account and your points balance and redemption history.
• Age confirmation — that you told us you are 21 or older.
• Discount code use — when you use a discount code, we record the code, the date, how much it saved you, and the email address and phone number from that order. Some codes are limited to a certain number of uses per customer, or a certain total saving, and this record is how we apply that fairly. We match on either your email address or your phone number, so changing one of them does not create a second allowance.
• Technical information — your IP address and basic browser details, used for fraud and bot defense and kept only as long as needed for that purpose.
• Messages you send us — if you use the contact form, the name, email, phone number and message you enter are emailed to us so we can reply. Our security log notes that a message arrived, with your contact details masked; it is kept for sixty days.

We never see or store your full card number. Card details are entered directly into our payment gateway’s secure form and are tokenized before they reach us. Our servers hold a payment reference, not a card.

Why we collect it

• To process, pack, ship, and support your order.
• To send order confirmations, receipts, and shipping updates.
• To run our loyalty program and apply your discounts correctly, including enforcing per-customer limits on promotional codes.
• For customer relationship management — so our team knows your history with us and can serve you well without making you repeat yourself.
• For research — understanding which products and categories serve our customers best, so we buy and stock more intelligently.
• To meet our legal obligations, including age restrictions and tax and accounting records.

Who else touches your information

We use a small number of service providers to actually run the shop. They process your information on our behalf, only for the job we hired them to do, and they are not permitted to sell it either:

• Square — our point of sale and system of record for catalog, inventory, orders, customers, gift cards, and loyalty.
• Our payment gateway — card authorization and capture.
• USPS — delivery address verification and shipping.
• Resend — sending your order confirmation email.
• Cloudflare Turnstile — blocking automated fraud at checkout.

We may also disclose information where we are legally required to, or to protect our rights, our customers, or our staff.

Beyond those working relationships, your information stays in house. We do not sell it — and we also do not give it away, trade it, or license it to anyone, in any form, at any price, including “free.” It is used inside Skyland’s own services and nowhere else, and that holds unless and until this policy itself changes — and what happens then is spelled out under “If this policy changes” below.

Recognising you between visits

When you place an order, look up a rewards balance, or sign up for our list, we record the internet address you did it from alongside the details you gave us — your email, your phone number, your name, and the postcode on the order.

We do this for two reasons, and we would rather say them plainly than bury them. The first is telling people apart from machines: this site is scanned constantly by automated traffic, and knowing that an address belongs to a real customer rather than a server in a data centre is how we avoid blocking you by mistake. The second is our own research — understanding who shops with us, how often, and which products matter to which people.

This means we may end up connecting a person to a data point incidentally. If the same address shows up across an order and a rewards lookup, we will know those were probably the same person. That is a real consequence of doing this and you should know about it.

What we do not do with it: we do not sell it, rent it, trade it, or hand it to data brokers or advertisers. It is used inside this business, by us, and nowhere else. We never see your card number at any point — that goes straight from your browser to our payment processor.

How long. Each address-to-person link is kept for two years from the last time we saw it, then deleted automatically. We also keep a short index of which order reference belongs to which email or phone — not the order itself, which lives with our point-of-sale provider — so that a refund or chargeback can be matched to a customer; that index is kept for two years from the order and then deleted. Both are deleted sooner if you use the erasure form below.

What you do on this site

We keep a record of how this website is used, tied to the browser you are using. We would rather set it out plainly than describe it as “analytics” and leave you guessing.

What we record: the pages you open and how long the site is actually in front of you; which categories and products you look at; what goes into your cart and what comes back out; whether you reached the checkout; whether you ordered, and for how much; whether you looked up a rewards balance; which of our hidden features you set off; which radio station you played and for how long; that you used the search box; the website that sent you here; whether you are on a phone, a tablet or a computer; and, if you play the hidden arcade games, that you played, how each run ended, and any score you chose to put on a leaderboard.

What we deliberately do not record: what you type into the search box. That box is also where rewards lookups and our hidden codes are entered, so it regularly contains a phone number — we keep the fact that you searched, never the words. We also keep only the name of the site that sent you here, never the full address of the page, and nothing that fingerprints your device beyond those three broad categories.

How it is tied together. Your browser is given two random identifiers. One lasts for the tab you have open and disappears when you close it. The other is stored by your browser and lasts between visits, so that three separate evenings of browsing followed by an order can be recognised as one person rather than four strangers — including when your internet address changes, which it does routinely on a phone. Neither is a cookie and neither is sent to anybody but us. Clearing your browser’s site data for this website resets both and starts you over as a new visitor.

How long we keep it: six months, after which it is deleted automatically. Orders themselves are kept longer, because tax and business records must be.

This is used to run and improve the shop and to tell customers apart from the automated traffic that scans this site constantly. As with everything else here, we do not sell it, rent it, trade it, or hand it to data brokers or advertisers.

Talking to the chat bot

The shop has an experimental chat bot, and it asks you to accept a notice before the first conversation. If you use it, we retain a record of those conversations — what you typed and what it answered, tied to your internet address — for security and research purposes, for six months, after which it is deleted automatically. Erasing your data through the form below deletes it sooner. It is covered by the same promise as everything else on this page: we do not sell it, rent it, trade it, or hand it to data brokers or advertisers.

The bot is instructed never to ask you for personal details. Please do not type them into it anyway — it is a product guide, and it does not need your name.

Features for user entertainment. Parts of this site exist to be enjoyed rather than to sell you something — hidden features, and one longer interactive feature inside the chat window. If you use them, we record how it went: that you started, roughly how far you got, which of the options the feature offered you took, how long it lasted and how it ended. That sits alongside the same behavioural record described above, is kept for the same six months, and is used the same way — to fix what is broken, to find out which parts people actually enjoy, and for our own research. It is not sold, given away, or licensed, and it never leaves Skyland’s own services.

The arcade games

This site hides a few retro arcade games, opened by typed codes. They are entertainment — fiction, for players 21 and over, separate from the shop — and each one asks for your agreement to exactly that before it will start. That agreement is remembered only by your own browser tab, and only until you close it.

What playing records: that a game was launched, how each run ended and with what score, tied to the same two browser identifiers described above. If you choose to put your initials on a high-score board, the three characters you enter and your score are stored and shown publicly to other players on that board — that is what a leaderboard is. If you skip the board, no initials are kept.

What it is used for: running the leaderboards, research into how the site and its games are used, customer service, and security — telling players apart from the automated traffic that pokes at every public endpoint. Like everything else here, it is not sold, rented, or shared with brokers or advertisers, and the deletion form below erases your game records along with the rest.

Deleting what we hold

You can erase the information described above yourself, right here, without emailing anyone or waiting on us. Enter either the email address or the phone number you used with us. We will send a six-digit code to an email address we hold for you (we cannot send text messages, so a phone number on its own only works if we already have an email alongside it — otherwise the form will tell you to call us). Once you confirm the code, everything linking you to an address is deleted from our systems: the address book described above, what you did on the site, your arcade scores, your sweepstakes entry, your chat bot conversations, the order index, and any stored copy of your checkout receipt.

Four honest limits. Completed sales are kept: tax and business record-keeping law requires it, and a deletion request does not override that. Older backups of our systems may still contain your details for a period after deletion — those exist so we can recover from a disaster, they are not searched, and they are never used for research or any future project.

Third, two small records are kept on purpose. The record of which discount codes you have used stays, because a “one per customer” code is only fair if a customer cannot reset their allowance by erasing themselves; it holds the code, the date, the saving and the email and phone from that order, and nothing else. And any note our staff have written about an order — a chargeback, a delivery problem, a conversation we had with you — is our own business record and stays with us. Neither is used for anything beyond those purposes.

And the fourth: data flagged as a security risk cannot be deleted through this website. If activity from your connection has been flagged — attempting to break into our systems, forging requests, or other conduct that breaches our Terms of Service — the form above will not send you a code, and will tell you so. Those records are kept while the matter is dealt with. To discuss it, contact Skyland management directly at info@skylandcannabis.com or (828) 222-4367. Please understand that any damage caused to this website or this business is a separate matter from your data request, and may be pursued, including through litigation.

Ordinary shopping problems are not what this means. A declined card, a promo code that did not work, an address our shipping validator rejected, or a failed “are you human” check will never flag you, however many times they happen.

If you would rather a person handled it, or you no longer have access to the email or phone you used, call (828) 222-4367 or email info@skylandcannabis.com. You can also ask us what we hold, or ask us to correct it, the same way.

Your other choices

You can unsubscribe from any marketing email using the link in that email. Transactional messages like order receipts are part of buying something and are not marketing.

If this policy changes

We may update this policy. When we do, we will change the date at the top of this page, and the new version applies from the moment it is posted. Continuing to use the site after that means you accept the updated terms.

Changes apply going forward. If we ever want to use information we already collected in a way this policy does not currently describe, we will ask you first. We are not reserving the right to quietly repurpose what you have already given us on the strength of a page you may never read again.

This era’s data does not cross into the next one. If this policy ever changes in a way that would govern your information differently, Skyland Cannabis will erase its logs on previous users — the live website’s records and the research collected under this version — rather than carry them forward under new rules. Nothing collected while this version is in force will be used outside Skyland’s own services, with one narrow exception: security analysis of attacks on this shop, which remains confidential.

Children

This is a 21+ store. We do not knowingly collect information from anyone under 21. If you believe a minor has given us information, contact us and we will remove it.

Contact

Skyland Cannabis Company LLC
2 Eagle Street, Asheville, NC 28801
info@skylandcannabis.com · (828) 222-HEMP