Who we are

CBD Restaurant (“we,” “us,” “our”) is a brand operated by Life Candles LLC. We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit www.cbd.restaurant, purchase our products, or interact with our SMS messaging program.

Our operations comply with applicable U.S. laws, including the Agricultural Improvement Act of 2018 (the “2018 Farm Bill”), which governs the production and sale of hemp and hemp-derived products containing less than 0.3% delta-9 THC by dry weight. By using our website or messaging program, you agree to the practices described below.

What we collect

Information you provide directly:

Contact details — name, email, phone, and shipping/billing address at order, contact form, or SMS opt-in.
Payment information — processed by our PCI-compliant payment processor. We do not store full card numbers.
Order history — products, quantities, dates, shipping info.
Communication preferences — whether you have opted in to marketing SMS, marketing email, or both.
Customer service records — messages, complaints, return requests, and other inquiries.

Collected automatically: device and usage data (IP address, browser type, pages viewed, timestamps) via cookies and analytics tools.

How we use it

Process and fulfill your orders, including shipping and order-confirmation messaging.
Respond to inquiries, including refund and customer service requests.
Send transactional messages (order confirmations, shipping updates, pickup-ready alerts) via email and SMS.
Send marketing messages only to customers who have provided express written consent through our double opt-in process.
Improve our website, products, and customer experience.
Detect and prevent fraud and security incidents.
Comply with legal obligations.

SMS / Mobile Messaging Program

If you opt in to receive SMS messages, the following applies. Full program terms at /sms-terms/.

Consent: Reply YES to our confirmation message after providing verbal consent in person, or by submitting your phone number through our opt-in form and confirming via SMS reply.
Frequency: ~4 messages per month.
Cost: Message and data rates may apply.
Opt-out: Reply STOP to any message to unsubscribe immediately and permanently.
Help: Reply HELP for assistance.
Carriers: All major U.S. carriers supported.

No Mobile Information Sharing. Mobile phone numbers and SMS opt-in information collected for the CBD Restaurant SMS program will not be sold, rented, or shared with any third parties or affiliates for marketing or promotional purposes. This information is shared only with our SMS service provider (Twilio) and only to the extent necessary to deliver the messages you have requested.

How we share information

We share your information with service providers as needed: BigCommerce (ecommerce platform), Twilio (SMS), Resend (transactional email), Google Analytics, our payment processor, and shipping carriers. We share with law enforcement when legally required.

We do not sell your personal information.

Cookies and tracking

We use cookies to operate the website, remember your cart, analyze usage, and (with your consent where required) deliver relevant marketing. You can disable cookies in your browser settings.

Data retention

We retain information for as long as your account is active or as required to fulfill orders, comply with legal obligations, and resolve disputes. SMS opt-in consent records are retained at least four (4) years for regulatory compliance.

Security

We use industry-standard administrative, technical, and physical safeguards to protect your information. No method of transmission over the Internet is 100% secure, however, and we cannot guarantee absolute security.

Your privacy rights

California Residents (CCPA / CPRA): You have the right to (a) know what personal information we collect, (b) request deletion, (c) opt out of the sale or sharing of personal information (we do not sell), and (d) be free from discrimination for exercising these rights. Contact privacy@cbd.restaurant.

Other U.S. Residents: Residents of states with comprehensive privacy laws (Colorado, Connecticut, Utah, Virginia, and others) have similar rights and may contact us at the same address.

All Users: Opt out of marketing emails by clicking unsubscribe in any email, and out of marketing SMS by replying STOP.

Age restriction

CBD Restaurant is intended only for users 21 years of age or older. We do not knowingly collect information from anyone under 18. If we learn we have collected information from a person under 18, we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated Last Updated date.