Last updated: June 19, 2025
1. Introduction
420HighBud.com (“420 High Bud,” “our,” “we,” or “us”) created this Privacy Notice to explain—in plain English—how we handle information relating to an identified or identifiable person (“personal data”) when you:
- browse or interact with our website,
- purchase or return products,
- subscribe to marketing, or
- otherwise communicate with us (collectively, the “Services”).
By visiting or using any part of the Services you acknowledge that you have read this Notice and consent to the practices it describes. If you disagree, please discontinue use of the Services.
Colorado focus. Because our principal place of business is in Colorado, we comply with the Colorado Privacy Act (“CPA”) as well as applicable U.S. federal rules such as the 2018 Farm Bill and the CAN-SPAM Act.
2. Updates to this Privacy Notice
Laws, technology, and our own offerings change. When they do, we may revise this Notice. The “Effective date” above shows the most recent update. We post changes on this page and, where the CPA or other law requires, provide additional notice or seek renewed consent.
3. Sources of Personal Data
| Source | Examples (non-exhaustive) |
|---|---|
| Information you provide directly | • Name, postal address, e-mail, telephone • Login credentials, security questions • Payment details (handled by our processor) • Order history, wish-lists, loyalty points, reviews • Content of customer-support messages |
| Automatic collection | • IP address, device identifiers, browser type • Pages viewed, referring URLs, time spent • Cookies and similar technologies (see § 7) |
| Third parties | • E-commerce platform (Shopify) • Payment processors and fulfilment partners • Advertising and analytics providers • Social-media networks if you link or log in via those services |
4. Why We Use Personal Data
| Purpose | Legal basis under Colorado law* | Typical examples |
|---|---|---|
| Contract fulfilment | § 6-1-1303(10)(a): “provide goods or services” | Process payments, ship orders, manage returns, maintain your account |
| Service improvement & analytics | Legitimate interests | Diagnose bugs, develop new features, measure campaign effectiveness |
| Marketing & targeted advertising | Consent / Opt-out (§ 6-1-1306) | Newsletters, promotions, personalised ads |
| Fraud & security | Prevent, detect, protect (§ 6-1-1303(10)(c)) | Verify identity, investigate misuse, enforce Terms |
| Legal compliance | Legal obligation | Tax reporting, responding to lawful requests |
*Where other state or federal rules apply (e.g., CCPA, COPPA, CAN-SPAM), we rely on the corresponding legal bases recognised in those statutes.
5. Disclosure of Personal Data
We do not sell sensitive personal information and we do not knowingly process data relating to children under 13. We do share limited categories of data with:
- Service providers – cloud hosting, shipping carriers, payment processors, IT support.
- Business partners & advertising networks – to deliver or measure ads; you may opt out (see § 8).
- Corporate affiliates & successors – in the context of a merger, financing, or asset sale.
- Legal or regulatory bodies – where required to comply with law or protect the rights, property, or safety of 420 High Bud, our users, or others.
All vendors receiving personal data sign agreements restricting them from using that data for purposes other than the tasks we assign.
6. Retention
We keep personal data only as long as reasonably necessary for the purposes outlined in this Notice—usually the longer of: (a) an active customer relationship plus seven years for bookkeeping, or (b) the limitation period required by law for potential claims. When no longer needed, data are deleted or irreversibly anonymised.
7. Cookies & Similar Tracking Tech
We and our partners place small files (Cookies, pixel tags, local storage objects, etc.) on your device to:
- remember preferences,
- keep you logged in,
- analyse site traffic, and
- tailor advertising.
Most browsers let you delete or block Cookies; doing so may degrade certain site features. Our site honours the Global Privacy Control (GPC) signal for opt-out of data “sales” or targeted advertising as defined under the CPA.
For a list of Shopify-specific cookies, visit shopify.com/legal/cookies.
8. Your Colorado Privacy Rights
Colorado residents can, up to twice per year free of charge, exercise the rights below. We will not discriminate against you for doing so.
We respond within 45 days (70 days where reasonably necessary, with notice). For identity verification we may request matching data points (e.g., order number, e-mail on file).
9. Security Measures
We use administrative, technical, and physical safeguards such as TLS encryption, access controls, and vendor due-diligence to protect your data. Nevertheless, no internet transmission or storage system can be guaranteed 100 % secure; use caution when sending sensitive information.
10. Children
Our Services are intended for U.S. adults aged 21 or older. We do not knowingly collect data from minors. If you believe a child has provided data to us, please contact us and we will delete it promptly.
11. International Transfers
420 High Bud is based in the United States. If you are located elsewhere your data will be processed in the U.S., a jurisdiction that may have privacy rules different from your own. Where European or UK data are involved, we rely on Standard Contractual Clauses or equivalent legal mechanisms.
12. External Sites & Social Features
The Services may link to third-party sites or integrate social-media widgets. Interactions with those properties are governed by their own privacy policies, not this Notice. We are not responsible for the practices of unrelated entities.
13. Contact Us
For questions, concerns, or to exercise your privacy rights, reach us at:
Postal: C2X Distribution, 1500 N Grant ST, STE N, Denver CO 80203, US
E-mail: highbud-420@outlook.com