Privacy Policy

Last updated: 7/22/26

Nimbus Cannabis Co. ("Nimbus," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit nimbuscannabisco.com and nimbusvaporco.com (the "Sites"), sign up for our communications, enter promotions, contact us, or otherwise interact with us. The Sites are operated by JBA LIcensing LLC., on behalf of the Nimbus Cannabis Co. brand.

This policy covers our marketing Sites only. We do not sell cannabis directly through the Sites; purchases happen at licensed dispensaries, which have their own privacy practices.

1. Age restriction — 21+

The Sites are intended only for adults 21 years of age or older. We use an age-verification gate and do not knowingly collect personal information from anyone under 21. If you believe someone under 21 has provided us information and would like it removed, reach us through our Contact page.

2. Information we collect

Information you provide to us, for example when you join our newsletter (first name, last name, email address, and the state where you purchase — Massachusetts or New Jersey); submit a contact, customer-service, wholesale, or retail-partnership inquiry (name, email, phone, business details, and the contents of your message); enter a giveaway or promotion; or otherwise communicate with us.

Information collected automatically when you use the Sites, through cookies and similar technologies: IP address, device and browser type, operating system, general location (e.g., state/region), pages viewed, links clicked, referring URLs, and dates/times of access.

Information from third parties, such as analytics and advertising providers, and social-media platforms you use to interact with us.

We do not intentionally collect Social Security numbers, financial-account numbers, or government-ID numbers through the Sites. Please do not submit sensitive information through our forms.

3. How we use your information

We use personal information to: operate, maintain, and secure the Sites; respond to your inquiries and provide customer service; send you newsletters, promotions, and other communications you have requested; administer giveaways and promotions; understand and improve how the Sites are used; personalize content; comply with legal, regulatory, and cannabis-compliance obligations; and protect our rights and the safety of our users.

4. Cookies and tracking technologies

Managing your choices. When you first visit (after the age gate), our consent banner lets you accept or reject non-essential cookies and manage categories. You can change your choices anytime using the "Your Privacy Choices" link in our footer.

Global Privacy Control (GPC). We honor recognized universal opt-out signals, including Global Privacy Control. If your browser or extension sends a GPC signal, we treat it as a request to opt out of the sale/sharing of your personal information and targeted advertising, and we will display confirmation that the signal was honored.

Google Consent Mode. We use Google Consent Mode so that Google tags adjust their behavior based on your consent choices.

5. How we disclose information

We may disclose personal information to:

We do not disclose personal information to third parties for their own independent marketing without your consent.

6. Your privacy rights

Depending on your state of residence, you may have the right to: confirm whether we process your personal information and access it; correct inaccuracies; delete personal information we hold about you; obtain a portable copy of personal information you provided; and opt out of (a) the sale of personal information, (b) targeted advertising, and (c) certain profiling that produces legal or similarly significant effects.

How to exercise your rights. To opt out of the sale/sharing of your personal information and targeted advertising, use the consent banner or the "Your Privacy Choices" link in our footer. We will respond to verified requests within 45 days (extendable by an additional 45 days where permitted, with notice). For access, correction, deletion, or portability requests, contact us through our Contact page.

Appeals. If we decline a request you may appeal, and if an appeal is denied you may contact your state Attorney General — the Massachusetts Office of the Attorney General or the New Jersey Division of Consumer Affairs. To submit an appeal, contact us through our Contact page.

Authorized agents. You may use an authorized agent to submit an opt-out or other request, subject to verification. Non-discrimination. We will not discriminate against you for exercising your privacy rights.

7. Marketing communications

You can unsubscribe from marketing emails using the "unsubscribe" link in any message, or by contacting us. Transactional or service messages may still be sent.

8. Data retention

We retain personal information for as long as needed to fulfill the purposes described in this policy, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Third-party links

The Sites may link to third-party websites and platforms (e.g., dispensary menus, social media). We are not responsible for their privacy practices; review their policies before providing information.

11. Children's privacy

The Sites are not directed to, and we do not knowingly collect information from, anyone under 21.

12. Changes to this policy

We may update this policy from time to time. We will post the revised version with a new "Last updated" date and, where required, provide additional notice. Material changes may prompt us to re-request your cookie preferences.