The PLUG Privacy Policy

Effective date: September 22, 2026
Website: https://mycannaplug.com

The PLUG (also referred to as “The Plug Wellness,” “we,” “us,” or “our”) operates this website and related stores, accounts, communications, products, services, features, and customer programs (collectively, the “Services”). Our online store is powered by Shopify. We may also use service providers, including customer relationship management and communications platforms, to help us operate the Services.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, make a purchase, create an account, visit one of our stores, join a rewards or marketing program, enter a promotion, communicate with us, or otherwise use the Services.

By using the Services, you acknowledge that you have read this Privacy Policy. Where consent is required by law, we will request it separately. If this Privacy Policy conflicts with our Terms and Conditions regarding the collection, use, or disclosure of personal information, this Privacy Policy controls.

1. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

• Contact information, such as your name, email address, mobile phone number, billing address, shipping address, and other contact details.

• Account and profile information, such as your username, password, preferences, birthday or age-verification information, rewards account information, and saved settings.

• Order and transaction information, such as products viewed, placed in a cart, purchased, returned, exchanged, or canceled; order history; shipping details; and payment confirmation. Payment card information is generally processed by our payment providers rather than stored directly by us.

• Communications and consent records, such as customer-service messages, reviews, survey responses, giveaway entries, marketing preferences, SMS opt-in and opt-out status, the date and method of consent, and records of messages sent or received.

• Device and online activity information, such as IP address, browser type, device identifiers, cookie identifiers, pages viewed, referring pages, interactions with our website, and approximate location derived from an IP address.

• In-store and event information, such as purchases, loyalty activity, sign-up information, and information you provide at a store, event, kiosk, or point of sale.

• Information from service providers and partners, such as Shopify, payment processors, shipping providers, analytics providers, advertising platforms, rewards providers, and communications platforms.

Please do not provide personal information about another person unless you are authorized to do so.

2. How We Collect Personal Information

We may collect personal information:

• Directly from you when you make a purchase, create an account, complete a form, join a program, provide SMS or email consent, contact us, or interact with us in a store or at an event;

• Automatically through cookies, pixels, analytics tools, and similar technologies when you use our website;

• From service providers that help us operate our business and Services; and

• From advertising, social media, business, or marketing partners where permitted by law.

3. How We Use Personal Information

We may use personal information to:

• Provide, operate, personalize, maintain, and improve the Services;

• Process payments, fulfill and ship orders, manage accounts, and administer returns or exchanges under our policies;

• Provide customer service and respond to questions or requests;

• Administer rewards programs, promotions, surveys, giveaways, and events;

• Send transactional or service communications, such as order updates, account notices, requested support, and other non-promotional messages;

• Send marketing or promotional communications by email or text message when you have provided any consent required by law;

• Personalize content, product suggestions, advertising, and offers;

• Measure website use and marketing performance;

• Maintain security, prevent fraud, troubleshoot problems, and protect our customers, business, and Services;

• Maintain records of consent and communication preferences;

• Comply with legal obligations and lawful requests; and

• Establish, exercise, or defend legal claims and enforce our terms and policies.

4. SMS and Mobile Messaging Privacy

When you separately opt in to an SMS program operated by The PLUG, we may use your mobile phone number, consent record, message history, and related information to provide the messages described at the point of sign-up. The program’s Terms and Conditions and the opt-in disclosure presented when you enroll contain additional details about message type and frequency, message and data rates, customer support, and how to opt out.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, messaging delivery, technical support, and platform administration, is permitted. All other use-case categories in this Privacy Policy exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties for their own marketing or promotional purposes.

Your SMS consent is specific to The PLUG and the messaging program for which it was obtained. It is not transferable to another business, and we do not buy, sell, rent, or share SMS opt-in lists.

You may opt out of promotional text messages at any time by replying STOP to a message. We will process reasonable opt-out requests made through other supported words or methods as required by law. You may receive one final confirmation that your opt-out was processed. For help, reply HELP, call (801) 473-3832, or email team@mycannaplug.com. Opting out of marketing texts does not prevent us from sending messages you separately request or non-marketing messages where permitted by law.

Consent to receive marketing text messages is not a condition of making a purchase. Message frequency varies. Message and data rates may apply.

5. How We Disclose Personal Information

We may disclose personal information in the following circumstances:

• Service providers. We may provide information to vendors that process it on our behalf to support website hosting, ecommerce, payment processing, order fulfillment, shipping, analytics, customer service, fraud prevention, rewards programs, email delivery, SMS delivery, cloud storage, and other business operations. These providers may use the information only to provide services to us or as otherwise permitted by law and their agreements with us.

• Advertising and analytics partners. We may disclose certain online activity, device, and purchase-related information to analytics and advertising partners to measure performance or provide advertising, subject to applicable law and your available choices. This does not include sharing SMS opt-in data or consent for another party’s marketing or promotional purposes.

• At your direction. We may disclose information when you direct us to do so or intentionally interact with a third-party feature, integration, or social platform.

• Affiliates and business transactions. We may disclose information within our corporate organization for legitimate business operations or as part of a merger, financing, reorganization, sale, bankruptcy, or transfer of some or all of our business or assets. SMS opt-in data and consent remain subject to the restrictions stated in Section 4.

• Legal, security, and safety purposes. We may disclose information when reasonably necessary to comply with law or valid legal process, enforce our agreements, investigate fraud or misuse, protect rights or safety, or establish or defend legal claims.

We do not sell mobile phone numbers or SMS opt-in data. Where applicable privacy law defines “sale,” “sharing,” or “targeted advertising” more broadly, you may have the rights described in Section 10.

6. Shopify and Other Service Providers

Our online store is hosted by Shopify, which processes personal information to provide and improve ecommerce services. Information submitted through our store may be transmitted to Shopify and other service providers, including providers located outside your state or country. Shopify’s handling of information is also described in its consumer privacy policy at https://www.shopify.com/legal/privacy/app-users and privacy portal at https://privacy.shopify.com.

We may use other providers, including payment, shipping, analytics, advertising, loyalty, email, and customer communications platforms. Their handling of information may also be governed by their own privacy notices when they act independently from us.

7. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, local storage, and similar technologies to keep the website functioning, remember preferences and cart contents, understand website use, prevent fraud, measure marketing, and personalize content or advertising.

You may be able to manage cookies through our cookie-preference tool, if available, or through your browser settings. Blocking some cookies may affect website functionality. Where required by applicable law, we will obtain consent before using non-essential cookies.

8. Data Security and Retention

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No security measure or method of transmission is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide Services, maintain accounts and consent records, complete transactions, satisfy legal and accounting obligations, resolve disputes, prevent fraud, and enforce agreements. Retention periods vary based on the type of information and our legal and operational needs.

9. Age-Restricted Services and Children’s Privacy

Our Services are intended for adults and are not directed to children under 18. Some products or Services may be limited to persons 21 or older or otherwise subject to age restrictions under applicable law. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and, where required, delete it.

10. Your Privacy Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Request access to or a copy of personal information we maintain about you;

• Request correction or deletion of personal information;

• Request data portability;

• Opt out of certain sales, sharing, or targeted advertising;

• Withdraw consent where processing is based on consent; and

• Appeal a decision we make concerning a privacy request, where applicable.

To submit a privacy request, email team@mycannaplug.com or call (801) 473-3832. We may need to verify your identity and authority before completing a request. You may use an authorized agent where permitted by law. We will not discriminate against you for exercising an applicable privacy right.

To stop promotional emails, use the unsubscribe link in the email. To stop promotional SMS messages, reply STOP. Cookie and advertising choices may be available through our website settings or your browser. We may continue to send non-promotional communications permitted by law, including communications about your orders, account, safety, or requests.

11. Third-Party Websites and Features

The Services may link to third-party websites, platforms, or features that we do not control. Their privacy and security practices are governed by their own policies. We are not responsible for those third parties’ content, privacy practices, or security.

12. International Processing

We and our service providers may process or store personal information in the United States and other countries. Where required, we use legally recognized safeguards for cross-border transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, Services, or legal obligations. We will post the revised policy on this page, update the effective date, and provide any additional notice required by law. Changes do not retroactively change the scope of a previously granted SMS consent.

14. Contact Us

For questions, privacy requests, or concerns about this Privacy Policy, contact:

The PLUG / The Plug Wellness
10450 South State Street
Sandy, Utah 84070
United States
Phone: (801) 473-3832
Email: team@mycannaplug.com