Privacy Policy

1. Scope and Controller

LTRMN Inc, an Oregon corporation and operator of the STICKS Cannabis brand, is the controller of personal information covered by this policy. This policy applies to sticksss.com, its pages, and related communications (the “Site”). It does not govern third-party sites linked from the Site.

Privacy questions and requests may be sent to info@ltrmn.com with “Privacy Request” in the subject line. Please identify your jurisdiction, the right you wish to exercise, and enough information for us to locate the relevant records.

2. Information We Collect, Sources, and Purposes

Information you provide

• Contact details and message content when you email us or otherwise contact us, used to respond, provide support, and keep business records.
• Email address, mobile number, and marketing choices if you separately enroll in a marketing program, used to send communications you requested and manage opt-outs. The current Site does not load an email- or SMS-marketing script.
• Information included in a privacy request, used to verify and fulfill the request and maintain legally required records.

Information collected automatically

• Request and device data such as IP address, approximate country or region, browser and device type, operating system, requested URL, referrer, and timestamps, sourced from your browser and hosting infrastructure and used to deliver, secure, troubleshoot, and measure the Site.
• Usage data such as page views and navigation events, collected by Vercel Analytics only when our consent rules allow it and used to understand aggregate Site performance and use.
• Cookie-consent status stored in a first-party cookie and age-gate status stored in local storage, sourced from your choices and used to remember them.
• Dealer-locator interaction and request data when you visit the Dealers page, processed through LTRMN's embedded map service to provide nearby retailer information.

We also use this information to prevent abuse, comply with law, enforce our terms, protect rights and safety, and establish or defend legal claims. Where required, our legal bases include consent, legitimate interests in operating and securing the Site, performance of requested services, and legal obligations.

3. Cookies and Similar Technologies

• Necessary. sticks_cookie_consent stores “accepted” or “rejected” for about six months with SameSite=Lax. The age gate uses age-verified in local storage. These choices support compliance and requested Site operation and are not used for cross-site advertising.
• Analytics. Vercel Analytics is the only analytics provider currently implemented. It measures page views and Site usage. Vercel Analytics is configured to load only when tracking is allowed. Its current service is designed without cookies, but we still treat it as optional analytics and apply the same consent controls.
• Advertising. No advertising pixel, advertising network, or targeted-advertising provider is currently active on the Site. If one is added, it will remain blocked in prior-consent regions until acceptance and will be covered by the choices described here before use.

The Site also uses necessary delivery requests to Vercel and retrieves images and data from Supabase. The dealer locator is an LTRMN-hosted iframe. These services may receive ordinary request data such as IP address and user-agent in order to return content; they are not loaded as advertising pixels by this Site.

4. Your Cookie Choices

In regions requiring prior consent, optional analytics and advertising are blocked until you select Accept. Closing the notice with the × rejects non-essential cookies. In the United States and other opt-out regions, the notice is not shown automatically and optional analytics may operate unless you reject.

You can accept, reject, withdraw consent, or change a previous choice at any time by selecting Cookies in the footer and then choosing Accept or ×. Rejecting removes known first-party tracking cookies where technically possible. Browser controls may also delete stored data.

Global Privacy Control. We treat an enabled GPC signal as an immediate opt-out from optional analytics and advertising, including when an earlier Site choice says accepted. GPC remains controlling while the signal is enabled. Learn more at globalprivacycontrol.org.

5. Advertising, Sale, and Sharing

We do not currently operate targeted advertising on the Site and do not knowingly sell personal information for money. Some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly enough to include disclosing identifiers or online activity to advertising partners in exchange for analytics, advertising, or other value. If we begin such activity, rejection through the Cookies link and a recognized GPC signal will opt you out, and this policy will identify the actual provider.

We do not knowingly sell or share personal information of people under 21.

6. Service Providers and Other Disclosures

We disclose information as needed to service providers acting for us: Vercel provides hosting, security, delivery, and analytics; Supabase provides database and file-storage infrastructure; and LTRMN's map service provides the dealer locator. Their handling is governed by their agreements and privacy notices.

We may also disclose information to professional advisers; regulators, courts, law enforcement, or other parties when required by law or necessary to protect rights and safety; and a buyer, successor, or adviser in connection with a merger, financing, reorganization, or sale of assets. We may disclose aggregated or deidentified information that cannot reasonably identify you.

7. Retention, Security, and International Processing

We keep personal information only as long as reasonably necessary for the purposes above, including legal, accounting, security, and dispute-resolution needs. The consent cookie expires after about six months; age-gate local storage remains until you clear it. Service request logs and analytics are retained according to our configured provider settings, and correspondence is retained as needed to handle the request and maintain business records.

We use reasonable administrative, technical, and organizational safeguards. No method of storage or transmission is completely secure. Our providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, we use recognized contractual or other transfer safeguards.

8. Regional Privacy Rights

Depending on where you live and subject to legal exceptions, you may have rights to access or know, correct, delete, or obtain a portable copy of personal information; object to or restrict processing; withdraw consent; and opt out of sale, sharing, targeted advertising, or certain profiling. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

Submit a request using the contact instructions in Section 1. We may need to verify your identity and authority. An authorized agent may submit a request where permitted by law. If we deny a request, reply to our decision with “Privacy Appeal” to appeal. You may also complain to your state attorney general, the UK Information Commissioner, an EU/EEA data protection authority, or another competent privacy regulator. We will respond within the period required by applicable law.

9. Children

The Site and STICKS products are intended only for adults 21 and older. We do not knowingly collect personal information from children or anyone under 21. If you believe a person under 21 provided information, contact us so we can investigate and delete it as appropriate.

10. Changes to This Policy

We may update this policy to reflect changes in our practices, providers, or legal obligations. We will post the revised version here and update the date above. If changes materially affect previously collected information, we will provide any additional notice or choice required by law.

11. Contact