This Privacy Policy explains what personal information Levitated Dispensaries collects through this website, why we collect it, who we share it with, and the choices you have. We have written it to describe our actual practices rather than to list every practice the law permits.

1. Who we are

Levitated Dispensaries ("Levitated," "we," "us," "our") is a licensed adult-use cannabis retailer at 4145 Hiawatha Ave, Minneapolis, MN 55406, licensed by the Minnesota Office of Cannabis Management under license OCM #MICRO-L25-000913-01. We are the controller of the personal information described in this policy. You can reach us at info@levitateddisp.com or 612-437-4420.

2. What this policy covers

This policy covers levitateddisp.com and the forms and features on it. It does not cover what happens in our retail store, on our online menu, or on any third-party site we link to. Our online ordering menu is hosted by Flowhub on a separate domain and is governed by Flowhub's own privacy policy together with the notice we provide at checkout. Purchases made in the store are handled under our in-store point-of-sale and identity-verification practices, which are described at the counter and on request.

3. Information we collect

Information you give us.

• Contact form: your name, email address, the topic you select, the message you write, and your confirmation that you are 21 or older.
• Newsletter signup: your email address and your confirmation that you are 21 or older.
• Live chat: whatever you type into the chat widget, plus any name or email you choose to give the agent.
• Anything else you volunteer: if you include a phone number, an order number, or other details in a message, we receive them. We do not ask for them on this site.

Information collected automatically.

• IP address, browser and device type, operating system, screen size, referring page, the pages you view, and how long you spend on them, collected through Google Analytics 4 (see Section 6).
• Approximate location derived from your IP address, at roughly the city level. We do not collect precise GPS location.
• Standard web server logs kept by our hosting provider.

What we do not collect on this website.

• We do not collect or store your date of birth. The age gate is a yes/no confirmation — see Section 5.
• We do not scan, photograph, or store images of your ID through this website.
• We do not process payments on this website, and we never receive your card number here.
• We do not knowingly collect information about anyone under 21.

4. How we use your information

• To answer your questions and respond to messages you send us.
• To confirm that visitors to this site are 21 or older, as required for cannabis businesses in Minnesota.
• To send our email newsletter to people who have asked for it and confirmed they are 21+.
• To understand how the site is used, in aggregate, so we can improve it.
• To keep the site secure and to detect and block spam and abuse.
• To meet our obligations under Minnesota Statutes Chapter 342, the rules of the Office of Cannabis Management, and other applicable law.

We do not use your information to make automated decisions that produce legal or similarly significant effects about you.

5. Age verification

The age gate on this site asks a single question — whether you are over 21 — and records your answer. Choosing "Yes" stores a first-party cookie named levitated_age_verified on your device for 30 days so you are not asked again on every page. The cookie holds the value true and nothing else: no date of birth, no name, no identifier. It is set with SameSite=Lax and is not transmitted to any third party. Choosing "No" sends you away from the site and stores nothing. Clearing your browser cookies will make the gate appear again. Age verification for an actual purchase happens in the store, against a government-issued ID, and is separate from this website.

6. Cookies and analytics

We use Google Analytics 4, deployed through Google Tag Manager (container GTM-T7R48SGP), to understand how visitors use our site. Google Analytics sets cookies and collects your IP address (which Google truncates before storing), device and browser type, the pages you view, how you arrived, and approximate location. We look at this data in aggregate for statistical and site-improvement purposes; we do not use it to identify you personally, and we have not enabled Google Signals, advertising personalization, or cross-device tracking.

The cookies and similar technologies in use on this site are:

Loading this site also requests fonts from Google Fonts and shared code libraries from jsDelivr. Those providers receive your IP address as a normal part of serving the request. They do not set cookies for us and we receive no data back from them.

Your choices. You can block or delete cookies in your browser settings, browse in a private window, or install the Google Analytics Opt-out Browser Add-on to opt out of Google Analytics everywhere. Blocking analytics cookies will not affect your ability to browse or shop. Blocking the age-gate cookie only means you will be asked the age question again.

Global Privacy Control. This site honors the Global Privacy Control (GPC) signal. Because we do not sell personal data or use it for targeted advertising, a GPC or Do Not Track signal does not change what we collect, but we treat it as a valid opt-out request for those purposes. For details on Google's role, see Google's Privacy Policy and how Google uses data from sites that use its services.

7. Email newsletter

Our newsletter is managed through Ghost, which stores subscriber email addresses on our behalf. We send it only to people who entered their email themselves and confirmed they are 21 or older. Every message includes a one-click unsubscribe link, and unsubscribing takes effect immediately. You can also ask us to remove you by emailing info@levitateddisp.com.

Text messages. We do not send SMS or text-message marketing from this website, and this site does not collect mobile numbers for that purpose. If we introduce text messaging later, we will collect your number only with your express opt-in, confirm you are 21+, honor STOP replies immediately, and update this policy before the first message goes out.

8. Who we share information with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done so. We share information only with service providers who process it on our instructions, and only for the purposes below:

We may also disclose information when we are legally required to — in response to a lawful subpoena, court order, or regulatory request from the Office of Cannabis Management or another agency — or where disclosure is necessary to protect our rights, our staff, or public safety. If our business is ever sold or merged, personal information may transfer to the acquiring party, and we will post notice here before that happens.

9. How long we keep information

• Contact form messages: up to 24 months from your last contact with us, then deleted.
• Newsletter subscriptions: until you unsubscribe or ask us to delete your record.
• Chat transcripts: up to 24 months.
• Analytics data: retained by Google for 14 months, then automatically deleted.
• Age-gate cookie: 30 days on your own device; nothing is retained by us.
• Records we are required to keep under cannabis, tax, or employment law are kept for the period the law specifies.

10. Your privacy rights

The Minnesota Consumer Data Privacy Act (Minn. Stat. § 325M.10 et seq.), which took effect July 31, 2025, gives Minnesota residents a set of rights over their personal data. That law applies to businesses above defined size thresholds and exempts small businesses as defined by the U.S. Small Business Administration. As a single-location retailer, Levitated does not currently meet those thresholds. We honor the following requests anyway, from any visitor, regardless of where you live:

• Know and access — confirm whether we hold personal information about you and get a copy of it.
• Correct — fix information about you that is inaccurate.
• Delete — have us delete information you have given us.
• Take it with you — receive your data in a portable, machine-readable format.
• Know who received it — get a list of the specific third parties we have disclosed your personal data to.
• Opt out — of any sale of your personal data, targeted advertising, or profiling. We do not do any of these, so there is nothing to opt out of today, but the right stands if that ever changes.

How to make a request. Email info@levitateddisp.com with the subject line "Privacy Request," or use our contact form and select "Other." Tell us which right you want to exercise. We will ask for enough information to confirm you are the person the data belongs to — usually the email address you originally used — and we will not use what you send us for verification for any other purpose.

Our response. We respond within 45 days. If a request is complex we may take one additional 45-day period and will tell you why before we do. Requests are free once every 12 months. If we decline a request, we will explain why, and you may appeal by replying to our decision; we will answer the appeal within 45 days. An authorized agent may submit a request on your behalf with written permission from you.

If you are unsatisfied with how we handled your request, you may contact the Minnesota Attorney General's Office at ag.state.mn.us or 651-296-3353.

11. Sensitive data

We do not ask for sensitive personal data on this website — no health or medical information, no government identification numbers, no precise location, no biometric data. Please do not include such details in a contact form message or chat. We do not sell sensitive data under any circumstances.

12. Data security

This site is served over HTTPS, and we limit access to the accounts and inboxes that receive form submissions to staff who need it. Our service providers maintain their own security programs. That said, no method of transmitting or storing information is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the appropriate authorities as required by Minnesota law.

13. Age restriction

This site is for adults 21 and older. We do not knowingly collect personal information from anyone under 21, and we do not direct any marketing to them. If you believe someone under 21 has given us personal information, email info@levitateddisp.com and we will delete it promptly.

14. Links to other sites

This site links to other places — our online menu, our social media accounts, government resources, and health information such as the SAMHSA helpline. Once you follow a link, this policy no longer applies. We encourage you to read the privacy policy of any site you visit.

15. Changes to this policy

We may update this policy as our practices or the law change. The "Last updated" date at the top always reflects the current version. If we make a change that materially affects how we handle information we have already collected, we will give notice on this page before it takes effect.

16. Contact us

Privacy questions or requests:
info@levitateddisp.com  ·  612-437-4420
Levitated Dispensaries, 4145 Hiawatha Ave, Minneapolis, MN 55406
Or use our contact form.