Privacy Policy

Introduction

Riverside Farm LLC ("Riverside Farm") operates as a Utah medical cannabis cultivator and brand. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit riversidefarm.co, contact us, register for the patient portal, or otherwise interact with our Services.

Riverside Farm sells medical cannabis products through licensed Utah pharmacies. We do not operate a retail dispensary on this website. Pharmacy partners handle patient purchases at their locations under separate policies.

We are generally not a HIPAA-covered entity for routine website and patient portal operations. We still apply strong administrative and technical safeguards, especially for Utah medical cannabis patient card numbers and account data.

Information we collect

The information we collect depends on how you interact with us:

Information you provide

• Name, email address, and account credentials for the patient portal.
• Utah medical cannabis patient card number and related verification details.
• Communications you send us (email, forms, support requests).
• Portal preferences such as strain votes, notification settings, and engagement activity.

Information from pharmacies and partners

• Limited business contact information for licensed pharmacy partners (wholesale ordering uses a separate pharmacy portal).
• We do not receive your in-store pharmacy purchase history through this website unless you separately provide it to us or law/regulation requires a specific report.

Information collected automatically

• IP address, browser type, device identifiers, and pages viewed.
• Log data for security, fraud prevention, and troubleshooting.
• Cookie and similar technologies data (see Cookies & Tracking below).

How we use your information

We use personal information to:

• Operate and improve our website and patient portal.
• Verify Utah medical cannabis patient eligibility before approving portal accounts.
• Provide portal features (voting, strain library, grow tracking, notifications).
• Communicate with you about your account (approvals, security, service messages).
• Support wholesale relationships with licensed pharmacies where applicable.
• Comply with Utah medical cannabis laws, Utah Admin. Code R384-201 and related rules, and other legal obligations.
• Protect the security and integrity of our systems and users.

We do not sell your personal information.

Sharing of information

We may share personal information in these situations:

• Service providers: hosting, email, security, analytics, and IT vendors under confidentiality obligations.
• Licensed pharmacies and supply chain partners: only as needed for lawful distribution, compliance, recalls, or product safety—not for unrelated marketing of your patient card number.
• Legal and regulatory requirements: Utah Department of Health and Human Services, law enforcement, courts, or auditors when required by law or valid legal process.
• Business transfers: merger, acquisition, or asset sale, with notice where required.
• With your direction: when you ask us to or consent to a specific disclosure.

Data security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data we hold, including HTTPS for authentication, access controls for staff, and rate limiting on login endpoints. No method of transmission or storage is 100% secure.

We retain personal information while your account is active and as needed for compliance, dispute resolution, and enforcement of our agreements. When you request deletion, we will remove or anonymize data where we are not legally required to retain it.

Patient rights (access, correction, deletion)

Depending on applicable law, you may request:

• Access to personal information we hold about you.
• Correction of inaccurate information.
• Deletion of information you provided, subject to legal exceptions.
• A portable copy of certain information you previously provided.

Utah residents may also exercise rights under the Utah Consumer Privacy Act (UCPA), including opting out of sale (we do not sell data) and certain targeted advertising. Submit requests to info@riversidefarm.co. We may need to verify your identity before responding.

Cookies & tracking

We use cookies and similar technologies to keep you signed in, remember preferences, measure site performance, and protect against abuse. You can control cookies through your browser settings. Disabling cookies may prevent login or portal features from working.

We do not knowingly use cookies to sell personal information.

Children’s privacy

Our Services are directed to Utah medical cannabis patients who meet minimum age requirements under state law. We do not knowingly collect personal information from children who are not eligible for a medical cannabis patient card. If you believe we have collected information from an ineligible minor, contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest version. Material changes may be noted on the Site. Continued use after changes take effect means you accept the updated Policy.

Utah compliance notes

Utah regulates medical cannabis under the Utah Medical Cannabis Act and rules such as Utah Admin. Code R384-201. Consistent with those frameworks we:

• Support medical use only—not recreational use.
• Verify patient card status before granting portal access.
• Limit data use to lawful cultivation, distribution, patient engagement, and compliance purposes.
• Honor applicable UCPA rights for Utah consumers.
• Apply voluntary best practices for patient-related data even when HIPAA does not apply to a given activity.

Contact us

Questions about this Privacy Policy or your data: info@riversidefarm.co

Riverside Farm LLC · Utah, United States