Privacy Policy

Shanti's Lounge (“we,” “us,” or “our”) is a veteran-owned, New York State Licensed hemp and CBD retailer based in Peekskill, NY. We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website, make a purchase, or interact with us in any way.

By using our website or purchasing our products, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

1. Information We Collect

We collect information in the following ways:

Information You Provide Directly

• Order Information: Name, email address, shipping address, billing address, phone number, and payment details when you place an order.
• Account Information: Email address and password if you create an account.
• Contact Forms: Name, email, phone number, and any message content you submit through our contact forms.
• Newsletter Subscriptions: Email address when you subscribe to our newsletter or mailing list.
• Age Verification: Date of birth or age confirmation to verify you are 21 years of age or older, as required by New York State law.
• Military Discount Verification: Proof of military service or veteran status when applying for our military discount.

Information Collected Automatically

• Device & Browser Data: IP address, browser type, operating system, and device identifiers.
• Usage Data: Pages visited, time spent on pages, referring URLs, and click patterns.
• Location Data: General geographic location based on your IP address (used to verify shipping eligibility).

2. How We Use Your Information

• Order Fulfillment: Processing, shipping, and delivering your purchases.
• Communication: Sending order confirmations, shipping updates, and responding to your inquiries.
• Age & Identity Verification: Confirming you meet the 21+ age requirement for purchasing hemp-derived CBD products.
• Marketing: Sending promotional emails, newsletters, and product updates (only with your consent — you may opt out at any time).
• Website Improvement: Analyzing usage patterns to improve our website, product offerings, and customer experience.
• Legal Compliance: Meeting our obligations under New York State and federal law, including hemp product regulations.
• Fraud Prevention: Detecting and preventing fraudulent transactions and unauthorized access.

3. How We Share Your Information

We do not sell your personal information. We may share your data with trusted third parties only as needed to operate our business:

• Payment Processors: Stripe and/or Authorize.net process your payment information securely. We do not store your full credit card details on our servers.
• Shipping Partners: Carriers such as USPS, UPS, or FedEx receive your shipping address to deliver your order.
• Analytics Providers: Services like Google Analytics help us understand website traffic and user behavior (data is aggregated and anonymized where possible).
• Email Marketing: Our email service provider processes your email address to deliver newsletters and promotional content you've opted into.
• Legal Requirements: We may disclose information if required by law, court order, or government regulation.

4. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for the website to function properly (e.g., shopping cart, login sessions, age verification).
• Analytics Cookies: Help us understand how visitors interact with our website so we can improve it.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign performance.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

5. Data Security

We take the security of your information seriously and implement industry-standard measures to protect it:

• SSL/TLS encryption on all pages and during all transactions.
• PCI-compliant payment processing through our third-party payment providers.
• Regular security audits and monitoring.
• Restricted access to personal data on a need-to-know basis.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and safeguard your account credentials.

6. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request corrections to inaccurate or incomplete data.
• Deletion: Request that we delete your personal information, subject to legal retention requirements.
• Opt-Out: Unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in any email, or by contacting us directly.
• Data Portability: Request your data in a structured, commonly used format.

To exercise any of these rights, please contact us at support@shantislounge.com. We will respond to your request within 30 days.

7. Children's Privacy & Age Requirement

Our products are intended for adults aged 21 and older only. We do not knowingly collect personal information from individuals under the age of 21. If we learn that we have inadvertently collected data from someone under 21, we will delete it promptly.

If you believe a minor has provided us with personal information, please contact us immediately at support@shantislounge.com.

8. New York State Compliance

As a New York State Licensed hemp retailer, we comply with all applicable state regulations regarding the sale and distribution of hemp-derived CBD products. This includes adherence to the New York State Office of Cannabis Management regulations and all relevant consumer protection laws.

New York residents may have additional rights under the New York SHIELD Act regarding data breach notification and data security requirements. We maintain compliance with these provisions.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please reach out: