Skyland Cannabis Co.
2 Eagle Street, Asheville, NC 28801
(828) 222-4367
Our online menu needs JavaScript to load. Please switch it on, or call us and we will happily walk you through what is on the shelf today.
last updated September 26, 2026
We do not sell your personal information. We do not give it away or license it either. It stays in house. We never have. We do collect it, because a shop has to: to fill your order, to serve you better the next time you walk in or check out, and to understand what the people who shop here actually buy. Everything below is the long version of that one paragraph.
We never see or store your full card number. Card details are entered directly into our payment gateway’s secure form and are tokenized before they reach us. Our servers hold a payment reference, not a card.
We use a small number of service providers to actually run the shop. They process your information on our behalf, only for the job we hired them to do, and they are not permitted to sell it either:
We may also disclose information where we are legally required to, or to protect our rights, our customers, or our staff.
And separately: the companies your own browser talks to while you are here. Those are not ours and we do not send them anything. Your browser makes the request, so they see your internet address the way any website you visit does. There are five, and none of them happens without you doing something first:
Google. This site does not load anything from Google. It used to ask fonts.googleapis.com for its two typefaces on every page load, which meant every visit to every page, including the age question before you had agreed to anything, told Google your address and which page you were on. Those files are served from this site now. The certificates are kept in a Google Drive folder and the footer links to it, but a link is not a request: nothing is fetched from Google unless you click it, and then you are on Google’s site under Google’s terms. We copy the certificates onto this site so that you do not have to.
If you have found a security problem with this website, /security says what is in scope and how to tell us.
Beyond those working relationships, your information stays in house. We do not sell it, and we also do not give it away, trade it, or license it to anyone, in any form, at any price, including “free.” It is used inside Skyland’s own services and nowhere else, and that holds unless and until this policy itself changes, and what happens then is spelled out under “If this policy changes” below.
When you place an order, look up a rewards account (at the checkout, or on the arcade page to recover your record there), or sign up for our list, we record the internet address you did it from alongside the details you gave us: your email, your phone number, your name, and the postcode on the order.
We do this for two reasons, and we would rather say them plainly than bury them. The first is telling people apart from machines: this site is scanned constantly by automated traffic, and knowing that an address belongs to a real customer rather than a server in a data center is how we avoid blocking you by mistake. The second is our own research: understanding who shops with us, how often, and which products matter to which people.
This means we may end up connecting a person to a data point incidentally. If the same address shows up across an order and a rewards lookup, we will know those were probably the same person. That is a real consequence of doing this and you should know about it.
What we do not do with it: we do not sell it, rent it, trade it, or hand it to data brokers or advertisers. It is used inside this business, by us, and nowhere else. We never see your card number at any point. That goes straight from your browser to our payment processor.
How long. Each address-to-person link is kept for two years from the last time we saw it, then deleted automatically. We also keep a short index of which order reference belongs to which email or phone (not the order itself, which lives with our point-of-sale provider), so that a refund or chargeback can be matched to a customer; that index is kept for two years from the order and then deleted. Both are deleted sooner if you use the erasure form below.
We keep a record of how this website is used, tied to the browser you are using. We would rather set it out plainly than describe it as “analytics” and leave you guessing.
What we record: the pages you open and how long the site is actually in front of you; which categories and products you look at; what goes into your cart and what comes back out; whether you reached the checkout; whether you ordered, and for how much; whether you looked up a rewards balance; which of our hidden features you set off; which radio station you played and for how long; that you used the search box; the website that sent you here; which of the three shelves you started on; whether you are on a phone, a tablet or a computer; and, if you play the hidden arcade games, that you played, how each run ended, and any score you chose to put on a leaderboard.
What we deliberately do not record: what you type into the search box. That box is also where rewards lookups and our hidden codes are entered, so it regularly contains a phone number: we keep the fact that you searched, never the words. We also keep only the name of the site that sent you here, never the full address of the page, and nothing that fingerprints your device beyond those three broad categories.
How it is tied together. Your browser is given two random identifiers. One lasts for the tab you have open and disappears when you close it. The other is stored by your browser and lasts between visits, so that three separate evenings of browsing followed by an order can be recognized as one person rather than four strangers, including when your internet address changes, which it does routinely on a phone. Neither is a cookie and neither is sent to anybody but us.
What clearing your browser data does, and what it does not. This page used to say it “starts you over as a new visitor,” and that was not quite true, so here is what actually happens. Clearing this site’s data does give you two new identifiers, and the next thing you do is recorded against those. It does not delete anything already recorded, and it does not make you anonymous: each visit record also carries the internet address it came from, and when we look at a customer’s history those records are gathered up by address as well as by identifier. So on a connection we have seen before, a cleared browser reads as the same person on a new device rather than as a stranger. The way to have the record removed is the erasure form below, which is what it is for.
How long we keep it: six months, after which it is deleted automatically. That includes the internet address: the first and last address each visit was made from is stored on the visit record and goes when the record does, 180 days after the last time that visit was active. Orders themselves are kept longer, because tax and business records must be.
This is used to run and improve the shop and to tell customers apart from the automated traffic that scans this site constantly. As with everything else here, we do not sell it, rent it, trade it, or hand it to data brokers or advertisers.
Separately from anything we hold, this site stores a short list of things in the browser you are reading it on. None of it is a cookie, none of it is sent to anybody but us, and most of it is never sent anywhere at all. It is on your machine, so here is what is in it:
Clearing this site’s data in your browser removes all of it. What clearing it does and does not do to the records we hold is described above. The deletion form below clears the parts of this list that are about you and leaves the rest, and it says which before you confirm.
The shop has an experimental chat bot, and it asks you to accept a notice before the first conversation. If you use it, we retain a record of those conversations: what you typed and what it answered, tied to your internet address, for security and research purposes, for six months, after which it is deleted automatically. Erasing your data through the form below deletes it sooner. It is covered by the same promise as everything else on this page: we do not sell it, rent it, trade it, or hand it to data brokers or advertisers.
The bot is instructed never to ask you for personal details. Please do not type them into it anyway. It is a product guide, and it does not need your name.
Features for user entertainment. Parts of this site exist to be enjoyed rather than to sell you something: hidden features, and one longer interactive feature inside the chat window. If you use them, we record how it went: that you started, roughly how far you got, which of the options the feature offered you took, how long it lasted and how it ended. That sits alongside the same behavioral record described above, is kept for the same six months, and is used the same way: to fix what is broken, to find out which parts people actually enjoy, and for our own research. It is not sold, given away, or licensed, and it never leaves Skyland’s own services.
This site hides a few retro arcade games, opened by typed codes. They are entertainment (fiction, for players 21 and over, separate from the shop), and each one asks for your agreement to exactly that before it will start. That agreement is remembered only by your own browser tab, and only until you close it.
What playing records: that a game was launched, how each run ended and with what score, tied to the same two browser identifiers described above. If you choose to put your initials on a high-score board, the three characters you enter and your score are stored and shown publicly to other players on that board. That is what a leaderboard is. If you skip the board, no initials are kept.
Recovering your record. If you give the arcade the phone number on your VIP Rewards account to recover your scores, we check it against your account and keep the number with the browser identifiers it links, your initials, your scores and the hidden features you have found. It is the same number, kept the same way, as the one a rewards lookup at the checkout records, and the lookup itself is recorded alongside your address as described under “Recognizing you between visits” above. The deletion form below removes all of it. The record exists for one reason, so that a phone and a computer count as one player, and it is not a way into your rewards account or into anything else.
What a score post carries. When you put a score on a board, the page also sends the list of hidden features that browser has found. If that browser is linked to a record you recovered as above, the list and your initials bring the record up to date, so the two halves of it stay in step. If it is not linked to one, nothing is kept from the list and only the score is stored.
What it is used for: running the leaderboards, research into how the site and its games are used, customer service, and security: telling players apart from the automated traffic that pokes at every public endpoint. Like everything else here, it is not sold, rented, or shared with brokers or advertisers, and the deletion form below erases your game records along with the rest.
You can erase the information described above yourself, right here, without emailing anyone or waiting on us. Enter either the email address or the phone number you used with us. We will send a six-digit code to an email address we hold for you (we cannot send text messages, so a phone number on its own only works if we already have an email alongside it, or the form will tell you to call us). Once you confirm the code, everything linking you to an address is deleted from our systems: the address book described above, what you did on the site, your arcade scores, the arcade’s record of you, any restock request under that email address, your product reviews (the ones waiting to be read and the ones on the shop), your chat bot conversations, the order index, and any stored copy of your checkout receipt.
It clears this browser as well. Separately from anything we hold, the browser you are reading this on keeps the short list described under “What your own browser keeps” above. Confirming the code clears the parts of that list that are about you: the hidden features you had found, the arcade initials this browser was remembering, the record of what was ordered from this browser, the rewards phone number this tab was holding, and the two identifiers, so this browser is not recognized as the same one afterwards. Any other tab of the shop you have open in this browser forgets the same things at the same moment, and to make sure a tab that was open all along cannot put any of it back, this browser keeps one small note of when it happened, which says nothing else. What is in your cart, your answer at the age door and the settings you have chosen, including calm mode and the reduced-flashing setting, are left exactly as they are, and so are two tallies kept for the hidden features: how far this browser has got toward earning the visualizer, and which endings of the game in the chat window it has seen. You can clear any of those yourself at any time by clearing this site’s data in your browser.
or
Confirming also clears what this browser had remembered: the hidden features you had found, your arcade initials, what was ordered from this browser, and the identifiers that link this browser to the records above. Your cart, your age answer and your settings stay.
Start over
Four honest limits. They are numbered here so you can count them.
First, completed sales are kept. Tax and business record-keeping law requires it, and a deletion request does not override that.
Second, older backups may still hold your details for a period after deletion. Those exist so we can recover from a disaster, they are not searched, and they are never used for research or any future project.
Third, two small records are kept on purpose. The record of which discount codes you have used stays, because a “one per customer” code is only fair if a customer cannot reset their allowance by erasing themselves; it holds the code, the date, the saving and the email and phone from that order, and nothing else. And any note our staff have written about an order (a chargeback, a delivery problem, a conversation we had with you) is our own business record and stays with us. Neither is used for anything beyond those purposes.
Fourth, data flagged as a security risk cannot be deleted through this website. If activity from your connection has been flagged (attempting to break into our systems, forging requests, or other conduct that breaches our Terms of Service), the form above will not send you a code, and will tell you so. Those records are kept while the matter is dealt with. To discuss it, contact Skyland management directly at info@skylandcannabis.com or (828) 222-4367. Please understand that any damage caused to this website or this business is a separate matter from your data request, and may be pursued, including through litigation.
Ordinary shopping problems are not what this means. A declined card, a promo code that did not work, an address our shipping validator rejected, or a failed “are you human” check will never flag you, however many times they happen.
If you would rather a person handled it, or you no longer have access to the email or phone you used, call (828) 222-4367 or email info@skylandcannabis.com. You can also ask us what we hold, or ask us to correct it, the same way.
You can unsubscribe from any marketing email using the link in that email. Transactional messages like order receipts are part of buying something and are not marketing.
We may update this policy. When we do, we will change the date at the top of this page, and the new version applies from the moment it is posted. Continuing to use the site after that means you accept the updated terms.
Changes apply going forward. If we ever want to use information we already collected in a way this policy does not currently describe, we will ask you first. We are not reserving the right to quietly repurpose what you have already given us on the strength of a page you may never read again.
This era’s data does not cross into the next one. If this policy ever changes in a way that would govern your information differently, Skyland Cannabis will erase its logs on previous users (the live website’s records and the research collected under this version) rather than carry them forward under new rules. Nothing collected while this version is in force will be used outside Skyland’s own services, with one narrow exception: security analysis of attacks on this shop, which remains confidential.
This is a 21+ store. We do not knowingly collect information from anyone under 21. If you believe a minor has given us information, contact us and we will remove it.
Skyland Cannabis Company LLC 2 Eagle Street, Asheville, NC 28801 info@skylandcannabis.com · (828) 222-HEMP
Shop with us →
