1. Overview

Cafe Canna LLC ("Cafe Canna," "we," "us," or "our") operates this website to share information about our upcoming cannabis retail brand and cafe in Virginia. This site is currently informational and pre-launch: it does not process orders, payments, or sell any product. This Privacy Policy describes what information the site collects, how it is used, and the choices available to you.

2. Information We Collect

At this stage, the site collects only the following:

• Age verification status. A cookie confirming you acknowledged our 21+ age gate (see Section 3).
• Waitlist sign-up information. If you use the "Join the Waitlist" form, we collect the email address (and optional first name) you provide.
• Contact form information. If you use the contact form on our Location page, we collect the name, email address, and message you submit.

We do not currently collect payment information, government identification, or precise location data through this website.

3. Cookies

This site uses one functional cookie:

• age_verified — set only after you confirm you are 21 or older on our age verification screen. It is a session cookie, meaning it is automatically deleted when you close your browser, and it exists solely to avoid re-asking the age question on every page during the same visit. It does not identify you personally and is not used for tracking or advertising.

We do not currently use analytics, advertising, or third-party tracking cookies. Placeholder: if we add an analytics tool (such as a privacy-focused, cookie-based or cookieless analytics service) in the future, this section will be updated to name the provider, describe what it collects, and explain your opt-out options before it is enabled.

4. Waitlist & Contact Form Data

If you join our waitlist, your name (if provided) and email address are recorded in a Google Sheet using Google's infrastructure (via a Google Apps Script integration) and used only to send updates about our launch timeline, licensing status, and opening details. Contact form submissions are forwarded through Formspree, a third-party form-processing service, directly to our team's email inbox, and are used solely to respond to your inquiry. Neither service is used for advertising, and neither adds you to a marketing list unless you separately opt in. We do not currently use a dedicated email marketing platform (e.g. for newsletters); if we add one, this policy will be updated to name the provider and describe how you can unsubscribe.

5. How We Use Information

Information collected through this site is used only to: (a) remember your age-gate confirmation for your current session; (b) send you requested launch updates, if you opted in; and (c) respond to messages submitted through our contact form. We do not sell personal information to third parties.

6. Data Sharing

We share the limited information described above only with the service providers that operate this site's waitlist and contact form — Google (Google Sheets / Apps Script) and Formspree (form processing and forwarding) — solely to operate those features, plus as required by law or to operate core site functionality such as our website host. We do not sell personal information, and we do not share it for advertising purposes. Google's and Formspree's own privacy policies govern their handling of data while it passes through their systems.

7. Data Retention

The age verification cookie is session-based and expires automatically when you close your browser. Waitlist and contact form submissions are retained only as long as reasonably necessary to fulfill the purposes described above, or until you request deletion.

8. Your Choices & Rights

You may decline the age verification cookie, but doing so means you will not be able to access the site's content, which is restricted to adults 21 and older. You may also request that we delete any waitlist or contact information we hold about you by reaching out using the contact form on our Location page.

9. Children's Privacy

This website is restricted to adults age 21 and older and is not directed to, and does not knowingly collect information from, anyone under 21.

10. Changes to This Policy

We may update this Privacy Policy as our website and business evolve — particularly as we approach our July 2027 retail launch and add features like e-commerce, analytics, or email marketing. Material changes will be reflected by updating the effective date above.

11. Contact Us

Questions about this Privacy Policy can be sent through the contact form on our Location page.