Flower Power Maspeth

Privacy Policy

Effective date: September 18, 2026

Green Enterprise Holdings LLC, doing business as Flower Power Maspeth ("Flower Power," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how information is collected, used, retained, and disclosed when you use the Flower Power Maspeth mobile application (the "App").

The App allows eligible users to browse cannabis products, view store information and promotions, create or manage an account, and submit orders for pickup from Flower Power Maspeth.

By using the App, you acknowledge the practices described in this Privacy Policy.

1. Age and Eligibility

The App is intended only for adults who are at least 21 years old.

We may request your date of birth or require you to confirm that you are at least 21. A valid government-issued identification document may be required when you arrive at the dispensary. Confirming your age in the App does not replace the in-person identification requirements applicable to cannabis purchases.

We do not knowingly collect personal information from anyone under 21. If we learn that information was collected from someone under 21, we may delete the information and associated account.

2. Information We Collect

Depending on the features you use, we may collect the following categories of information.

Information You Provide

This may include:

• Name
• Email address
• Telephone number
• Date of birth or age confirmation
• Account login information
• Customer or loyalty account information
• Product selections, cart contents, order history, and pickup preferences
• Promotional preferences
• Information included in messages, support requests, surveys, or other communications with us

Please do not submit information that the App does not request.

Order Information

When you submit a pickup order, we may collect information about:

• Products and quantities selected
• Order date, time, and status
• Discounts, promotions, or loyalty benefits applied
• Selected pickup location or pickup time
• Information necessary to prepare, fulfill, verify, or cancel the order

Submitting an order through the App is not a guarantee that every selected product will remain available. Cannabis purchases remain subject to age verification, inventory availability, purchase limits, and applicable law.

Device and Usage Information

The App and its service providers may automatically collect:

• Internet Protocol address
• Device type and device identifiers
• Operating system and App version
• Language and general device settings
• App interactions, screens viewed, buttons selected, and session activity
• Diagnostic, performance, and crash information
• Date and time of access
• Referring or related technical information

We use this information to operate, secure, maintain, troubleshoot, and improve the App.

Location Information

The App may collect approximate location information, such as location inferred from your IP address.

If you grant device permission, the App may also collect precise or coarse location information to determine whether you are located within an eligible legal jurisdiction, show nearby store information, or support location-related App features.

You can disable location access through your device settings. Certain location-based features may not work after permission is disabled.

Push Notification Information

If you enable push notifications, we may collect a device push token and information about your notification preferences. Notifications may include order updates, store information, product availability, promotions, or other messages permitted by law.

You can disable notifications at any time through your device settings.

Payment Information

The current App is primarily designed to allow customers to submit orders for pickup. If electronic payment functionality is offered, payment information may be collected and processed directly by the applicable payment provider.

Flower Power does not store complete payment-card numbers unless expressly stated at the time of collection. Payment transactions may be governed by the payment provider's own privacy policy and terms.

3. How We Collect Information

We may collect information:

• Directly from you
• Automatically from your device when you use the App
• Through Alleaves, which supports product-menu, account, customer, ordering, point-of-sale, and related functionality
• Through Firebase and related Google services used for App analytics, performance monitoring, crash reporting, messaging, or notifications
• From service providers supporting hosting, security, customer service, communications, and App operations
• When required or permitted by applicable law

4. How We Use Information

We may use information to:

• Provide and operate the App
• Create and manage customer accounts
• Display available cannabis products and store information
• Receive, prepare, fulfill, update, or cancel pickup orders
• Confirm age eligibility and legal-jurisdiction requirements
• Communicate about orders and customer-service requests
• Send notifications and promotional communications when permitted
• Administer loyalty programs, promotions, or discounts
• Understand how users interact with the App
• Diagnose crashes, technical problems, and performance issues
• Improve App functionality and customer experience
• Prevent fraud, unauthorized access, abuse, and security incidents
• Maintain business and transaction records
• Enforce our policies and protect our rights
• Comply with cannabis regulations, lawful requests, court orders, and other legal obligations

We will not use personal information for a materially different purpose without providing appropriate notice or obtaining consent when required.

5. How We Disclose Information

Service Providers

We may provide information to companies that perform services on our behalf, including:

• Alleaves for e-commerce, customer, ordering, inventory, and point-of-sale functionality
• Google Firebase for analytics, messaging, diagnostics, performance monitoring, and crash reporting
• Apple for mobile-platform and push-notification services
• Hosting, security, customer-support, communications, and technical-service providers
• Payment processors if electronic payments become available

These providers may process information only as necessary to provide their services or as otherwise permitted by their agreements and applicable law.

Legal and Regulatory Disclosures

We may disclose information when reasonably necessary to:

• Comply with applicable laws and cannabis regulations
• Respond to a subpoena, court order, warrant, or lawful government request
• Cooperate with regulators or law-enforcement authorities
• Protect the safety, rights, and property of users, Flower Power, or others
• Investigate fraud, abuse, security incidents, or violations of our policies

Business Transactions

Information may be disclosed as part of a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar business transaction. Any successor handling personal information will be subject to applicable privacy obligations.

With Your Direction or Consent

We may disclose information when you direct us to do so or provide consent.

6. Sale of Personal Information and Advertising

We do not sell personal information for money.

We do not share personal information for cross-context behavioral advertising or permit third-party advertising networks to track your activity across unrelated apps and websites unless we first provide any notice and choice required by applicable law.

Firebase information is used for App functionality, analytics, diagnostics, performance, security, and communications—not to advertise cannabis products to underage individuals.

7. Data Retention

We retain information only for as long as reasonably necessary to:

• Provide the App and requested services
• Maintain an active customer account
• Process and document orders
• Meet cannabis, tax, accounting, and other legal recordkeeping obligations
• Resolve disputes and customer-service matters
• Protect the App against fraud, abuse, and security threats
• Enforce agreements and protect legal rights

Retention periods depend on the type of information, how it is used, and applicable legal requirements.

Deleting an account may not result in the immediate deletion of every record. We may retain transaction, compliance, security, backup, or legal records when required or permitted by law. Information that is no longer required will be deleted, de-identified, or securely disposed of.

8. Your Choices and Privacy Requests

Depending on applicable law, you may request that we:

• Provide access to certain personal information
• Correct inaccurate personal information
• Delete certain personal information
• Close your account
• Explain how certain information is used or disclosed
• Withdraw consent where processing is based on consent

You may submit a privacy request by emailing [PRIVACY EMAIL].

We may need to verify your identity before completing a request. We may deny or limit a request when retaining or using the information is required by law, necessary to complete an order, necessary for security or fraud prevention, or otherwise permitted by applicable law.

If the App allows users to create an account, an account-deletion option should also be available from the App's account or settings area.

You may separately:

• Disable push notifications through your device settings
• Disable location access through your device settings
• Unsubscribe from eligible promotional emails by using the unsubscribe link
• Request removal from eligible promotional text messages by replying STOP

Transactional communications concerning an active order may continue even after you opt out of promotional messages.

9. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

However, no mobile application, network, or storage system can be guaranteed to be completely secure. You are responsible for protecting your account credentials and notifying us if you believe your account has been accessed without authorization.

10. Third-Party Services and Links

The App may contain links to websites or services operated by third parties. Their information practices are governed by their own privacy policies, not this Privacy Policy.

Third-party services used by the App may include Alleaves and Google Firebase. We encourage you to review their privacy information before using features provided by those services.

11. Cannabis Information

Information displayed in the App is provided for general product and shopping purposes. It is not medical advice and should not be used to diagnose, treat, cure, or prevent any disease or medical condition.

Cannabis products may only be purchased and possessed as permitted by applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy when our App features, vendors, information practices, or legal obligations change.

The revised policy will be posted with an updated effective date. If a change materially affects how we use personal information, we may provide additional notice through the App or another appropriate method.

Continued use of the App after the effective date of an updated policy constitutes acknowledgment of the revised policy.

13. Contact Us

For privacy questions, account-deletion requests, or concerns about this Privacy Policy, contact: