Riverside Greenery (217 Riverside Drive, Auburn, ME 04210) is a Maine medical cannabis provider. This policy explains what information we collect through this website, why, and how we protect it.

What we collect

• Contact details — name, email, phone number, and date of birth when you place a pickup order or create an account. Your date of birth confirms purchase eligibility and is stored encrypted (AES-256). If SMS verification is enabled, we text you a one-time code to confirm your phone number; we keep only a record that the number was verified, never the code.
• Medical certification info — your certification number, expiration date, issuing state, and (optionally) caregiver ID number, required before we can prepare an order. These numbers are stored encrypted (AES-256) and are visible only to shop staff. You must still present your physical certification at pickup.
• ID photos — a photo of your government-issued photo ID and your medical ID, used by shop staff to confirm purchase eligibility. Photos are stored in a private storage vault with no public access; staff view them through short-lived, expiring links. We strip photo metadata (such as GPS location) before upload.
• Order history — items, quantities, and status of orders you place.
• Favorites and preferences — strains you save and whether you opted in to marketing email.

What we use it for

• Preparing and fulfilling your pickup orders, including verifying patient status.
• Transactional email about your orders (confirmations and status updates).
• Optional marketing email (drops, deals, back-in-stock alerts) — only if you opt in, and every message includes a way to stop.
• Legal record-keeping obligations that apply to Maine medical cannabis providers.

What we never do

• We do not sell or rent your personal information to anyone.
• We do not use your health-related information for advertising.
• We do not process payments online — you pay in person at pickup.

Who can see your information

Shop staff see order details, medical certification info, and ID photos as needed to fulfill your order and verify eligibility. Our service providers process data on our behalf: Supabase (database and file hosting), Netlify (website hosting), Resend (email delivery), and Twilio (SMS verification codes, if enabled). None of them may use your data for their own purposes.

Your choices

• You can order as a guest — an account is optional.
• You can update or replace your saved certification and profile anytime.
• You can ask us to delete your account and associated data from your account settings or by using the contact page. We will honor deletion requests except where cannabis record-keeping law requires retention.

Age

This site and our services are for Maine medical cannabis patients 18 and older. We do not knowingly collect information from anyone under 18.

Questions

Call (207) 956-5837, visit us at 217 Riverside Drive, Auburn, ME 04210, or use the contact page.