Privacy Policy

Introduction

Riverside Farm LLC ("Riverside Farm") operates as a Utah medical cannabis cultivator and brand. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit riversidefarm.co, contact us, register for the patient portal, use pharmacy wholesale ordering or consignment tools, or otherwise interact with our Services.

Riverside Farm sells medical cannabis products through licensed Utah pharmacies. We do not operate a retail dispensary on this website. Pharmacy partners handle patient purchases at their locations under separate policies.

We are generally not a HIPAA-covered entity for routine website, patient portal, or pharmacy wholesale portal operations. We still apply strong administrative and technical safeguards, especially for Utah medical cannabis patient card numbers, patient account data, and pharmacy compliance records.

Information we collect

The information we collect depends on how you interact with us:

Patient portal users

• Name, email address, and account credentials.
• Utah medical cannabis patient card number and related verification details.
• Account status (pending, approved, or denied) and registration date.
• Strain votes, optional vote comments, and voting-cycle participation.
• Strain suggestions you submit (proposed strain name and description).
• Notification preferences (email, optional SMS, and categories such as strain updates, voting updates, and general news).
• Optional phone number if you enable SMS notifications.
• Communications you send us (email, forms, support requests).

Voting results shown on the Site are aggregated counts and do not publicly display your name or individual vote comments.

Pharmacy wholesale ordering users

• Business and contact information for licensed pharmacy accounts (pharmacy name, address, phone, and authorized user names and email addresses).
• Wholesale order details (products, quantities, pricing, discounts, delivery preferences, and order status).
• Regulatory identifiers needed for lawful distribution (such as track-and-trace or licensing IDs associated with your pharmacy account).
• Staff sub-accounts created by a primary pharmacy account holder, including the sub-account holder’s name and email.
• Login timestamps, IP address, and browser user agent for pharmacy accounts (used for security and operational analytics; retention is configurable and old records are deleted automatically).

Pharmacy consignment & promotions users

Available only to participating pharmacy partners:

• Sales reports and uploads you submit (product sales, quantities, dates, and related POS or inventory export data).
• Inventory snapshots and facility-mapping information used to reconcile consignment stock.
• Promotion proposals, credit estimates, and related business correspondence.
• Data retrieved from authorized third-party systems (such as POS or inventory platforms) when you connect or authorize an integration.

Website visitors

• Information you submit through contact forms, email, or other voluntary communications.
• We do not receive your in-store pharmacy purchase history through this website unless you separately provide it to us or law/regulation requires a specific report.

Information collected automatically

• IP address, browser type, device identifiers, and pages viewed.
• Log data for security, fraud prevention, and troubleshooting.
• Cookie and similar technologies data (see Cookies & Tracking below).

How we use your information

We use information to:

• Operate and improve our website, patient portal, pharmacy ordering tools, and consignment features.
• Verify Utah medical cannabis patient eligibility before approving portal accounts.
• Provide patient portal features (catalog, voting, results, strain suggestions, grow/batch tracking, dashboard, and notifications).
• Send optional email or SMS updates about voting, strains, and grow milestones according to your notification preferences.
• Process and fulfill wholesale pharmacy orders, manage accounts, and communicate about orders.
• Generate consignment reports, reconcile inventory, calculate promotions and credits, and support pharmacy partner analytics.
• Monitor pharmacy portal usage for security, support, and internal business analytics (aggregated where practical).
• Communicate with you about your account (approvals, security, service messages, and operational notices).
• Comply with Utah medical cannabis laws, Utah Admin. Code R384-201 and related rules, and other legal obligations.
• Protect the security and integrity of our systems and users.

We do not sell your personal information. We do not use patient card numbers or patient portal activity for unrelated third-party marketing.

Sharing of information

We may share information in these situations:

• Service providers: hosting, email, security, analytics, and IT vendors under confidentiality obligations.
• Licensed pharmacies and supply chain partners: as needed for lawful distribution, order fulfillment, consignment settlement, compliance, recalls, or product safety—not for unrelated marketing of your patient card number.
• Authorized integrations: track-and-trace, POS, or inventory platforms when you or your pharmacy authorize a connection for reporting or compliance.
• Legal and regulatory requirements: Utah Department of Health and Human Services, law enforcement, courts, or auditors when required by law or valid legal process.
• Business transfers: merger, acquisition, or asset sale, with notice where required.
• With your direction: when you ask us to or consent to a specific disclosure.

Data security & retention

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data we hold, including HTTPS for authentication, access controls for staff, and rate limiting on login endpoints. No method of transmission or storage is 100% secure.

We retain information while your account is active and as needed for compliance, consignment settlement, order records, dispute resolution, and enforcement of our agreements. Pharmacy login activity is retained for a limited period (typically up to twelve months unless configured otherwise) and then deleted automatically. When you request deletion, we will remove or anonymize data where we are not legally required to retain it.

Your privacy rights

Depending on applicable law and your relationship with us (patient, pharmacy contact, or website visitor), you may request:

• Access to personal information we hold about you.
• Correction of inaccurate information.
• Deletion of information you provided, subject to legal exceptions.
• A portable copy of certain information you previously provided.

Utah residents may also exercise rights under the Utah Consumer Privacy Act (UCPA), including opting out of sale (we do not sell data) and certain targeted advertising. Submit requests to info@riversidefarm.co. We may need to verify your identity before responding.

Cookies & tracking

We use cookies and similar technologies to keep you signed in, remember preferences, measure site performance, and protect against abuse on our website, patient portal, and pharmacy tools. You can control cookies through your browser settings. Disabling cookies may prevent login or portal features from working.

Pharmacy portal login activity may be logged separately for security and operational analytics as described above. We do not knowingly use cookies to sell personal information.

Children’s privacy

Our Services are directed to Utah medical cannabis patients who meet minimum age requirements under state law. We do not knowingly collect personal information from children who are not eligible for a medical cannabis patient card. If you believe we have collected information from an ineligible minor, contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest version. Material changes may be noted on the Site. Continued use after changes take effect means you accept the updated Policy.

Utah compliance notes

Utah regulates medical cannabis under the Utah Medical Cannabis Act and rules such as Utah Admin. Code R384-201. Consistent with those frameworks we:

• Support medical use only—not recreational use.
• Verify patient card status before granting portal access.
• Limit pharmacy and patient data use to lawful cultivation, distribution, consignment settlement, patient engagement, and compliance purposes.
• Honor applicable UCPA rights for Utah consumers.
• Apply voluntary best practices for patient-related data even when HIPAA does not apply to a given activity.

Contact us

Questions about this Privacy Policy or your data: info@riversidefarm.co

Riverside Farm LLC · Utah, United States