Privacy Policy

Effective Date: August 26, 2026

Last Updated: August 26, 2026

East River Farms ("we," "our," or "us") operates a state-licensed medical cannabis dispensary in South Dakota. We are committed to safeguarding the privacy, confidentiality, and security of our qualifying patients and app users.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, place online pre-orders, or use our mobile applications across iOS and Android. Our practices comply with South Dakota Codified Law (SDCL § 34-20G), South Dakota Department of Health (DOH) regulations (ARSD 44:90), the Apple App Store Review Guidelines (Guideline 5.1 - Privacy), and Google Play Developer Policies.

1. Information We Collect

We collect only data necessary to fulfill medical pre-orders, verify legal qualification, ensure application functionality, and comply with South Dakota statutory requirements:

  • Personal Identifiers: Full name, date of birth, phone number, email address, and physical residential address.

  • South Dakota Medical Cannabis Patient Data: South Dakota Department of Health Medical Cannabis Registry ID card number, card expiration date, and designated caregiver authorization details.

  • Order & Transaction Records: Secure records of cannabis quantities dispensed, product categories, transaction totals, and timestamps pursuant to SDCL § 34-20G-71. (Payment processing is executed via encrypted third-party merchant gateways; we do not store full payment card numbers on our servers).

  • Device & App Performance Data: Device model, operating system version, crash logs, IP address, and unique application instance identifiers to maintain performance and debug technical issues.

  • Precise Geolocation Data: Collected only with your explicit runtime permission to confirm you are within South Dakota for localized dispensary inventory, store locator features, or pickup routing.

2. How We Use Your Information

We process personal data solely for legitimate business operations and state compliance:

  • Processing and managing in-store pickup pre-orders via our Dutchie-integrated platform.

  • Verifying qualifying patient eligibility and enforcing the 14-day statutory purchase limits mandated by South Dakota medical cannabis regulations.

  • Fulfilling required seed-to-sale tracking and reporting obligations through the state tracking system (Metrc).

  • Sending transactional notifications (order confirmation, ready-for-pickup alerts via SMS/Email).

  • Managing opt-in loyalty rewards and dispensary announcements (which you can opt out of anytime).

3. Patient Confidentiality & Third-Party Disclosure

Under SDCL § 34-20G-71, § 34-20G-79, and § 34-20G-89, patient medical records are kept strictly confidential. We do not sell, rent, or monetize your personal data. We share information only with:

  • Dispensary Technology & Service Providers: Trusted partners that power our ordering workflow—specifically Dutchie (e-commerce & POS platform), cloud infrastructure hosts, and transactional communication services. All partners are contractually bound to provide equal or greater privacy and security protections matching this policy (in compliance with Apple Guideline 5.1.1 and Google Play standards).

  • State Regulatory & Legal Authorities: The South Dakota Department of Health or law enforcement entities strictly when required by statutory audits, court orders, or subpoenas under SDCL § 34-20G.

  • Patient-Authorized Disclosures: Retained and utilized strictly with patient consent pursuant to SDCL § 34-20G-89.

4. Apple App Store Disclosures & iOS User Rights

In accordance with Apple App Store Review Guidelines (Section 5.1):

  • In-App Account Deletion (Guideline 5.1.1(v)): If you create an account in our iOS App, you can initiate complete account and associated data deletion directly within the App's Account Settings menu. Upon request, all personal identifiers and account credentials will be permanently erased, except for transaction records we are legally required to retain under South Dakota cannabis compliance statutes.

  • Data Minimization & Purpose Strings: The App requests access only to device features strictly necessary for core functionality (e.g., Location for store proximity, Camera for scanning check-in QR codes). Every permission prompt displays a clear, specific purpose string.

  • Tracking & Advertising (ATT): We do not track users across apps and websites owned by other companies for advertising purposes, nor do we share your data with data brokers.

  • Revocation of Consent: You may revoke location access or notification permissions at any time through your iOS device settings (Settings > East River Farms).

5. Google Play Developer Disclosures

In accordance with Google Play's User Data policy:

  • All communications between the mobile application and our backend servers are encrypted in transit using industry-standard TLS/HTTPS protocols.

  • Runtime permissions are requested contextually and are never required for non-essential features.

  • Account deletion requests submitted via the Android app or our web portal are processed in accordance with Google Play deletion requirements.

6. Data Retention & Secure Destruction

  • Compliance Retention: Internal medical order records are retained only for the duration mandated by South Dakota Department of Health regulations and relevant commercial statutes.

  • Data Sanitization: Expired records and deleted patient accounts are securely wiped or shredded in accordance with SDCL § 34-20G-91.

7. Age Restriction & Eligibility

Our mobile apps, website, and medical dispensary products are strictly restricted to qualified South Dakota medical cannabis patients and designated caregivers aged 21 or older (or registered qualifying patients aged 18–20 with valid state registry documentation for non-inhalable products under ARSD 44:90:02:16.01). We do not knowingly collect personal data from unauthorized minors.

8. Contact Us & Data Requests

To exercise your privacy rights, request data deletion, or ask questions regarding this policy, contact us: