Legal
Privacy Policy
1. Who we are
This Privacy Policy describes how Morabeza LLC ("Morabeza," "we," "our," or "us"), a Massachusetts limited liability company with offices at 393 E Main St., Southbridge, MA 01550, collects, uses, and shares information when you visit www.morabezacannabis.com (the "Site"), submit our waitlist form, or otherwise interact with us.
Morabeza is a provisionally licensed cannabis delivery operator under the Massachusetts Cannabis Control Commission ("CCC"). This Site is a pre-launch marketing site; we do not sell or deliver cannabis through it.
2. Scope
This Policy applies to the Site and to any communications you receive from Morabeza in response to interacting with the Site. It does not apply to (a) the Sweed point-of-sale and ecommerce platform we will eventually link to for ordering and delivery, which is governed by Sweed's own privacy notice and our Terms of Service, or (b) any third-party site we link to.
3. Information we collect
3.1 Information you provide
- Email address, when you submit the waitlist form. We record the email, the date and time you submitted it, and the page on the Site you submitted it from.
- Direct communications, if you email info@morabezacannabis.com or call 774-600-0420, we keep a record of that correspondence to respond and to follow up.
3.2 Information collected automatically
- Server / request data, the standard fields any web server logs: IP address (often truncated by our hosting), user agent, referring URL, and the page or resource requested.
- Browser local storage, when you confirm you are 21 or older, we store a single boolean flag (
morabeza_age_verified) in your browser's local storage so the gate does not re-appear on return visits. We also store your cookie preferences (morabeza_cookie_prefs) when you save them on the Cookies Settings page. None of this leaves your device.
3.3 Information we do not collect
We do not collect Social Security numbers, government ID numbers, payment-card data, precise geolocation, health or medical-cannabis-program data, biometric data, race, religion, sexuality, or other sensitive personal information through this Site.
4. Sources of information
All information we collect about you through the Site comes either directly from you (when you submit a form or contact us) or automatically from your device when you visit. We do not buy or rent personal information from third parties for the Site.
5. How we use information
- To send you launch updates, exclusive first-access invitations, and other communications you opted into when joining the waitlist.
- To respond to questions, customer-service requests, and other communications you initiate.
- To operate, maintain, secure, and improve the Site.
- To comply with Massachusetts CCC regulations, other applicable cannabis law, tax law, and other legal obligations.
- To detect, prevent, or respond to fraud, abuse, security incidents, and violations of our Terms of Service.
We do not use your information for behavioral advertising, profiling, or automated decision-making that produces legal or similarly significant effects.
6. Legal bases for processing (EEA/UK visitors)
If you are visiting from the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal information are: (a) your consent, which you give by submitting the waitlist form (and which you may withdraw at any time); (b) our legitimate interests in operating, securing, and improving the Site; and (c) compliance with legal obligations we are subject to in Massachusetts and the United States.
7. When we share information
We do not sell your personal information. We do not share your information for cross-context behavioral advertising.
We share information only with the following categories of recipients, and only as needed:
- Service providers who help us operate the Site, such as our hosting provider (Cloudflare and/or GitHub Pages), our email-service provider that sends launch updates (e.g., Mailchimp, Beehiiv, or a comparable provider), and security or analytics providers we may engage. These providers are bound by written agreements that restrict them to using your information solely to perform services for us.
- Government and regulatory authorities when required by law, court order, subpoena, or to comply with CCC reporting or investigation requirements.
- Professional advisors such as our auditors, lawyers, accountants, and insurers, as needed for them to provide services to us.
- Acquirers and successors if Morabeza is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which case the recipient will be bound by terms at least as protective as this Policy.
8. How long we keep information
- Waitlist email and submission metadata, kept until you unsubscribe or request deletion, and for up to 30 days after that to honor the deletion and prevent re-add. We may retain a hashed record of removed addresses for suppression-list purposes for as long as we operate the launch list.
- Direct correspondence, kept for as long as needed to respond and follow up, generally no longer than 24 months after our last exchange.
- Server logs, retained for security and abuse-prevention purposes, typically for 30 to 90 days, then deleted or aggregated.
- Records we are required to keep, retained for the period required by Massachusetts law and CCC regulations.
9. Your choices and rights
Regardless of where you live, you can email info@morabezacannabis.com at any time to ask us to access, correct, or delete the information we hold about you, or to unsubscribe from launch updates. We will respond within 30 days (or as required by applicable law). We may need to verify your identity before acting on a request.
9.1 Massachusetts residents
Massachusetts law protects your personal information against unauthorized use, including under M.G.L. c. 93H and 201 CMR 17.00. You may report concerns about misuse of your information to the Massachusetts Office of the Attorney General.
9.2 California residents (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect, the sources, purposes, and recipients of that information.
- Access a copy of the personal information we hold about you.
- Correct inaccurate personal information.
- Delete personal information we hold about you, subject to limited exceptions.
- Opt out of any "sale" or "sharing" of personal information (we do not sell or share, but we honor the right).
- Limit our use of any sensitive personal information (we do not collect sensitive personal information through this Site).
- Non-discrimination, we will not deny services, charge a different price, or provide a lower quality of service because you exercised these rights.
To exercise these rights, email info@morabezacannabis.com with the subject line "California Privacy Request." You may also designate an authorized agent to submit a request on your behalf with written authorization.
9.3 Visitors from the EEA, UK, or Switzerland (GDPR)
You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with your local data protection authority.
9.4 "Do Not Track" signals
Some browsers send a "Do Not Track" signal. There is no industry standard for honoring those signals, but as a matter of practice we do not engage in cross-site tracking on this Site, so the signal has no behavior to change here.
9.5 Global Privacy Control
If your browser sends a Global Privacy Control ("GPC") signal, we treat that as a valid opt-out of any "sale" or "sharing" of your personal information under California law.
10. Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, and destruction. The Site is served over HTTPS; access to our backend systems is limited to authorized personnel and protected by strong authentication. No method of transmission over the internet or method of electronic storage is 100% secure, so we cannot guarantee absolute security.
11. Data breach notification
If we discover a security incident that involves the unauthorized acquisition of personal information we hold about you, we will notify you and the appropriate authorities as required by applicable law, including the Massachusetts data-breach notification statute (M.G.L. c. 93H). We will describe what happened, what information was involved, what we are doing in response, and what steps you can take to protect yourself.
12. Children's privacy
This Site is intended exclusively for adults 21 years of age or older. We do not knowingly collect personal information from anyone under 21, and the age-confirmation gate is designed to prevent that. If you believe a person under 21 has provided us with information, please contact us at info@morabezacannabis.com and we will delete it. We comply with the Children's Online Privacy Protection Act ("COPPA"); we do not knowingly collect personal information from anyone under 13.
13. International transfers
Morabeza operates in Massachusetts. If you access the Site from outside the United States, the information you provide will be transferred to and processed in the United States, which may have different data-protection rules than your country of residence. Where required, we rely on appropriate transfer mechanisms (for example, the European Commission's Standard Contractual Clauses) for transfers from the EEA, UK, or Switzerland.
14. Third-party links
The Site may link to third-party sites, services, or resources we do not control. This Policy does not apply to those third parties. We encourage you to read each third party's privacy notice before providing information to them.
15. Cookies and similar technologies
Our use of cookies and browser local storage is described in our separate Cookies Settings page, which is incorporated into this Policy by reference. You can manage your preferences there.
16. Updates to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make a material change (for example, beginning to share information with a new category of recipients), we will provide additional prominent notice, including, where appropriate, an email to people on our launch list, at least 14 days before the change takes effect.
17. Contact us
Questions, comments, or requests under this Policy should be sent to:
Morabeza LLC
Attention: Privacy
393 E Main St., Southbridge, MA 01550
info@morabezacannabis.com · 774-600-0420
This Policy is provided for general informational purposes and is not legal advice. It will be reviewed by counsel and may be revised before the Site goes live at morabezacannabis.com.