Effective Date: November 20, 2025
Last Updated: November 20, 2025

1. Introduction

Backpack Boyz East (“we,” “us,” “our”) values your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit https://backpackboyzeast.com (the “Site”) and interact with our services.

Our practices are designed to comply with:

  • General Data Protection Regulation (GDPR)
  • New York SHIELD Act
  • New York Data Breach Notification Law
  • New Jersey Identity Theft Prevention Act
  • Relevant U.S. privacy standards
  • New York & New Jersey cannabis regulations
  • Age-restricted marketing rules

By using the Site, you agree to this Privacy Policy.

2. Scope of This Policy

This Policy applies to:
 • Site visitors
 • Customers and prospective customers
 • Marketing subscribers
 • Individuals who contact us
 • Users in the U.S., New York, New Jersey, UK, and EEA

We are the data controller for personal data collected through the Site.

3. Information We Collect

3.1 Information You Provide

  • Name
     • Email address
     • Phone number
     • Billing/shipping address
     • Payment information (processed securely by third-party platforms)
     • Account details (if applicable)
     • Customer service communications
     • Newsletter sign-ups and marketing preferences

3.2 Automatically Collected Information

  • IP address
     • Device identifiers
     • Browser type
     • Operating system
     • Pages viewed, links clicked, and Site activity
     • Cookie data
     • Analytical data (traffic, performance metrics, etc.)

3.3 Sensitive Data

We do not collect healthcare, medical cannabis, or prescription-related information.
 We do not intentionally collect information from anyone under 21 years of age.

4. Legal Basis for Processing (GDPR – EEA/UK Residents)

We process personal data based on:
 • Your consent
 • Performance of a contract
 • Legitimate interests (e.g., analytics, site optimization, fraud prevention)
 • Legal obligations

5. How We Use Personal Information

We use your data to:
 • Provide and improve our services
 • Process and fulfill orders
 • Communicate about services, purchases, or updates
 • Personalize user experience
 • Send marketing communications (with appropriate consent)
 • Support compliance with cannabis advertising and age-restriction laws
 • Prevent fraud, maintain security, and comply with regulations
 • Maintain business records and legal compliance obligations

We do not use your data for medical targeting or health-based segmentation.

6. Cookies and Tracking Technologies

We use cookies to:
 • Enable essential site functionality
 • Analyze traffic and performance
 • Personalize content
 • Support marketing (in accordance with applicable law)

Where required (such as for EEA/UK residents), we use opt-in cookie consent.

7. How We Share Information

We may share personal information with:
 • Service providers (hosting, analytics, payment processing, email services)
 • Business partners or affiliates
 • Legal authorities when required
 • Successors in the event of a merger, sale, or business transfer

We do not sell personal information.

8. International Data Transfers

Data may be transferred to countries outside your residence.
 If transferred from the EEA/UK, we rely on lawful transfer mechanisms such as:
 • Contractual clauses
 • Adequacy decisions
 • Necessary protections for data processing

9. Data Retention

We retain personal data only as long as needed to:
 • Provide services
 • Meet legal, tax, and regulatory obligations
 • Maintain business records
 • Enforce rights and agreements
 • Support cannabis-industry compliance

When no longer needed, data is deleted or anonymized.

10. Your Rights (EEA/UK)

You have the right to:
 • Access your data
 • Correct inaccuracies
 • Request deletion
 • Restrict processing
 • Object to processing
 • Request portability
 • Withdraw consent
 • File complaints with a supervisory authority

11. U.S. Compliance (Including New York & New Jersey)

11.1 Age and Cannabis-Industry Compliance

We comply with state cannabis laws in New York and New Jersey by ensuring that:
 • The Site is for 21+ adults only
 • We do not market to minors
 • We do not use images, messaging, or segments intended for underage audiences
 • We do not make medical claims
 • We avoid collecting unnecessary personal identifiers
 • We employ reasonable consumer data protections

11.2 New York SHIELD Act Compliance

We maintain reasonable administrative, technical, and physical safeguards as required by the NY SHIELD Act, including:
 • Access controls
 • Encryption where appropriate
 • Secure data storage and monitoring
 • Risk assessments
 • Employee training
 • Data minimization practices

11.3 New York Breach Notification Compliance

In accordance with New York law, if personal information is compromised, we will:
 • Investigate promptly
 • Notify affected individuals without unreasonable delay
 • Notify the New York Attorney General, Department of State, and NY State Police when required
 • Cooperate with all mandated procedures

11.4 New Jersey Data Breach Compliance

Under New Jersey’s Identity Theft Prevention Act, we will:
 • Investigate any breach involving personal information
 • Notify affected New Jersey residents
 • Notify the New Jersey State Police as required
 • Provide a description of the breach and remediation steps

11.5 Consumer Rights (NY/NJ Best Practice)

While neither New York nor New Jersey currently offers California-style privacy rights, we voluntarily allow residents to:
 • Request access to the data we hold
 • Request correction
 • Request deletion where legally permissible
 • Request that we stop marketing communications
 • Opt out of non-essential data uses

12. Security Measures

We utilize reasonable and appropriate security measures, including:
 • Encryption
 • Secure servers
 • Firewalls
 • Monitoring and intrusion detection
 • Access controls
 • Staff training
 • Incident response protocols

No system is 100% secure, but we work to protect your data to the highest reasonable standard.

13. Minors’ Privacy (Strict Cannabis Compliance)

The Site is for adults 21+ only.
 We do not knowingly collect data from anyone under 21.
 If such data is discovered, it will be deleted immediately.

14. Third-Party Websites

The Site may link to external websites with separate privacy practices.
 We are not responsible for third-party policies or actions.

15. Changes to This Policy

We may update this Privacy Policy at any time.
 The “Last Updated” date will reflect the most recent change.

16. Contact Information

For questions or to exercise your privacy rights:

Backpack Boyz East
 Email: info@backpackboyzeast.com
 Address: 5410 Bergenline Ave, West New York, NJ 07093

We will respond within the time required by applicable law.