Privacy Policy

CJ's Medicine Cabinet ("we," "us," or "our") operates the website at cjsmeds.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

Information We Collect

Information You Provide

When you place an order, create an account, contact us, or subscribe to communications, we may collect:

• Name and contact information (email address, phone number, mailing address)
• Billing and shipping address
• Payment information (processed securely through Authorize.net; we do not store full card numbers)
• Order history and product preferences
• Age verification confirmation (you must be 21 or older to purchase hemp derived THC products)
• Messages you send through our contact or wholesale inquiry forms

Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Cookies section below)

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including shipping and delivery
• Communicate with you about your orders, account, or inquiries
• Send promotional emails about new products, specials, or updates (only with your consent)
• Improve our website, products, and customer experience
• Prevent fraud and maintain the security of our platform
• Comply with legal obligations, including age verification requirements for hemp derived products
• Analyze website traffic and usage patterns through Google Analytics

Cookies and Tracking

Our website uses cookies and similar technologies to:

• Essential cookies: Required for the website to function (shopping cart, authentication, CSRF protection)
• Analytics cookies: Google Analytics helps us understand how visitors use our site. Google Analytics collects anonymized usage data and does not identify you personally.
• Error tracking: Sentry monitors for website errors to help us fix issues quickly

You can control cookies through your browser settings. Disabling cookies may affect some website functionality, such as your shopping cart or account login.

Third Party Services

We share information with the following third party service providers, only as necessary to operate our business:

• Authorize.net: Payment processing (PCI DSS compliant)
• ShipStation: Order fulfillment and shipping label generation
• Supabase: Secure database hosting for account and order data
• Google Analytics: Website traffic analysis
• Sentry: Error monitoring
• Vercel: Website hosting

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including to process orders, maintain your account, and comply with legal obligations. Specifically:

• Order records are retained for 7 years for tax and legal compliance
• Account information is retained until you request deletion
• Contact form submissions are retained for 2 years
• Analytics data is retained in anonymized form

Your Rights

All Customers

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Unsubscribe from promotional emails at any time (every email includes an unsubscribe link)
• Request deletion of your account and personal data

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt out of the sale of your personal information (we do not sell your data)
• Right to non discrimination for exercising your privacy rights

Indiana Residents

Indiana residents may have additional rights under state privacy laws as they take effect. We will update this policy to reflect any new requirements.

Age Verification

Our products containing hemp derived THC are intended for adults aged 21 and older. We verify age at the time of purchase. We do not knowingly collect information from anyone under the age of 21. If we learn that we have collected personal information from someone under 21, we will delete that information promptly.

Data Security

We implement industry standard security measures to protect your personal information, including:

• HTTPS encryption on all pages
• PCI DSS compliant payment processing through Authorize.net
• CSRF protection on all forms
• Rate limiting to prevent abuse
• Secure, encrypted database storage

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.