Privacy policy

Effective Date: April 29th, 2026 Last Updated: April 29th, 2026

This Privacy Policy describes how Dime Bags LLC ("Dime Bags," "we," "us," or "our"), a Michigan limited liability company owned by Liprz Inc., collects, uses, shares, and protects your personal information when you visit dimebagpouches.com (the "Site"), make a purchase, interact with our marketing, or otherwise use our services (collectively, the "Services").

This Privacy Policy is incorporated into and governed by our Terms of Service. By accessing the Site or providing personal information, you agree to the practices described in this Privacy Policy.

1. INFORMATION WE COLLECT

We collect personal information in three ways: information you provide directly, information collected automatically, and information from third parties.

1.1 Information You Provide

Account and Order Information:

  • Full name
  • Billing and shipping addresses
  • Email address
  • Phone number
  • Date of birth (for age verification)
  • Government-issued identification (when age verification requires)
  • Order history and product preferences

Payment Information:

  • Credit/debit card information (processed by our payment processors — we do not store full card numbers)
  • Billing address
  • Transaction history

Communications:

  • Customer service inquiries and support tickets
  • Product reviews and submitted content
  • Email and SMS subscription preferences
  • Survey responses
  • Photos submitted with damage or return claims

Marketing Preferences:

  • Newsletter subscription status
  • Communication preferences
  • Loyalty program enrollment (if applicable)

1.2 Information Collected Automatically

When you visit the Site, we automatically collect:

Device and Connection Data:

  • IP address and approximate geolocation (city/state level)
  • Browser type and version
  • Operating system
  • Device type and identifiers
  • Screen resolution and language settings
  • Referring URL and exit pages

Usage Data:

  • Pages viewed and time spent on each page
  • Click paths and navigation patterns
  • Search queries entered on the Site
  • Products viewed, added to cart, and purchased
  • Date and time of visits
  • Session duration

Cookies and Tracking Technologies: We use cookies, pixels, web beacons, and similar technologies. See Section 8 (Cookies and Tracking) for details.

1.3 Information from Third Parties

We may receive information from:

(a) Age verification services (Veratad, AgeChecker.net, or similar) — verification status and any flagged information; (b) Payment processors (Shopify Payments, Stripe, PayPal) — transaction confirmations, fraud signals; (c) Shipping carriers (UPS, FedEx) — delivery confirmations, address corrections; (d) Marketing platforms (Klaviyo, Meta, Google) — engagement data and audience segments; (e) Analytics providers (Google Analytics, Shopify Analytics) — aggregated usage data; (f) Social media platforms when you interact with us on those platforms; (g) Identity verification and fraud prevention services; (h) Loyalty and referral platforms (if applicable).

1.4 Sensitive Personal Information

We do not knowingly collect sensitive categories of personal information beyond what is necessary for age verification (date of birth, ID images) and order fulfillment. We do not collect:

  • Social Security numbers
  • Health or medical records
  • Biometric data
  • Precise geolocation
  • Information about minors (see Section 14)

2. HOW WE USE YOUR INFORMATION

We use personal information for the following purposes:

2.1 Order Fulfillment and Customer Service

  • Process and ship your orders
  • Verify your age and identity
  • Communicate about orders, shipments, and returns
  • Provide customer support
  • Process refunds and returns
  • Detect and prevent fraud

2.2 Account Management

  • Create and maintain your account
  • Authenticate logins
  • Save preferences and order history
  • Provide saved addresses for future orders

2.3 Marketing and Communications

  • Send transactional emails (order confirmation, shipping updates)
  • Send marketing emails and SMS (if you opt in)
  • Personalize product recommendations
  • Inform you of new products, promotions, and contests
  • Conduct surveys and request reviews
  • Operate referral and loyalty programs

2.4 Site Improvement and Analytics

  • Understand how customers use the Site
  • Improve product offerings, page layout, and checkout flow
  • Test new features and promotions
  • Measure marketing effectiveness
  • Detect technical issues

2.5 Legal and Compliance

  • Comply with age verification requirements under hemp regulations
  • Comply with tax, financial reporting, and recordkeeping obligations
  • Respond to legal process (subpoenas, warrants, court orders)
  • Enforce our Terms of Service
  • Detect, investigate, and prevent fraud or unauthorized access
  • Comply with FDA and state hemp/cannabis labeling and reporting requirements
  • Protect the rights, safety, and property of Dime Bags, our customers, and others

2.6 Business Operations

  • Conduct internal audits, financial reporting, and corporate governance
  • Manage relationships with vendors, partners, and D2R wholesale accounts
  • Facilitate corporate transactions (mergers, acquisitions, financing)
  • Conduct risk assessments and insurance underwriting

3. LEGAL BASIS FOR PROCESSING

We process personal information based on:

(a) Contract performance — to fulfill your orders and provide customer service; (b) Legal obligation — to comply with age verification, tax, and hemp regulatory requirements; (c) Legitimate business interest — to operate, secure, and improve our business; (d) Consent — for marketing communications, optional cookies, and certain data sharing (you can withdraw consent at any time).

4. HOW WE SHARE YOUR INFORMATION

We do not sell personal information for monetary consideration. We share information only as described below.

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

  • E-commerce platform: Shopify Inc.
  • Payment processors: Shopify Payments, Stripe, PayPal
  • Shipping carriers: UPS, FedEx, regional carriers
  • Email and SMS marketing: Klaviyo, Postscript, or similar
  • Age verification: Veratad, AgeChecker.net, or similar
  • Analytics: Google Analytics, Shopify Analytics
  • Customer service tools: Gorgias, Zendesk, or similar (if applicable)
  • Fraud prevention: Signifyd, Riskified, or similar
  • Cloud hosting and storage providers
  • Tax compliance services
  • Returns and reverse logistics processors

These service providers are bound by contractual obligations to protect your information and use it only as directed by us.

4.2 Affiliates

We may share information with Liprz Inc. (our parent company), Direct2Retailers, Inc. (D2R) (our distribution affiliate), and other affiliated entities for legitimate business purposes consistent with this Privacy Policy.

4.3 Marketing and Advertising Partners

With your consent or as permitted by law, we may share limited information (typically hashed email addresses and order data) with:

  • Meta (Facebook/Instagram) — for ad targeting, audience matching, and conversion measurement
  • Google — for advertising, remarketing, and conversion tracking
  • TikTok, X (Twitter), LinkedIn — for advertising and analytics
  • Affiliate program partners
  • Influencer marketing platforms

You can opt out of much of this sharing through the methods in Section 11.

4.4 Legal Disclosures

We may disclose information when we believe in good faith that disclosure is:

(a) Required by law, regulation, or legal process; (b) Necessary to comply with a subpoena, warrant, or court order; (c) Necessary to protect the rights, safety, or property of Dime Bags, our customers, or others; (d) Necessary to detect or prevent fraud or security issues; (e) Required by tax, hemp regulatory, or law enforcement authorities.

4.5 Business Transfers

If Dime Bags or Liprz Inc. is involved in a merger, acquisition, financing, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you (and where required, obtain your consent) before your information becomes subject to a different privacy policy.

4.6 With Your Consent

We may share information for any other purpose with your specific consent.

4.7 Aggregated and De-identified Data

We may share aggregated or de-identified data (which cannot reasonably be used to identify you) for any purpose without restriction.

5. DATA RETENTION

We retain personal information for as long as necessary to:

(a) Fulfill the purposes for which it was collected; (b) Comply with legal, tax, and regulatory obligations (typically 7 years for financial records); (c) Enforce our Terms of Service; (d) Resolve disputes and protect our rights.

Specific retention periods:

  • Order and transaction records: 7 years (tax/financial recordkeeping)
  • Age verification records: Duration of customer relationship plus 4 years
  • Customer service inquiries: 3 years from last contact
  • Marketing email lists: Until you unsubscribe, then up to 12 months for compliance
  • Analytics and behavioral data: Up to 26 months
  • Account information: Until account deletion plus 30 days
  • Cookies: Per Section 8

After applicable retention periods, we either delete or de-identify the information.

6. DATA SECURITY

We implement reasonable technical and organizational safeguards to protect personal information, including:

  • Encryption of data in transit (TLS/SSL) and sensitive data at rest
  • Payment Card Industry Data Security Standard (PCI-DSS) compliance through our payment processors
  • Access controls limiting employee access to personal information on a need-to-know basis
  • Regular security assessments and vulnerability testing
  • Secure cloud hosting with reputable providers
  • Multi-factor authentication for administrative access

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6.1 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law (typically within 30–60 days of discovery, or sooner where required).

7. YOUR RIGHTS AND CHOICES

Depending on your jurisdiction, you may have rights regarding your personal information.

7.1 Universal Rights

All customers may:

(a) Access the personal information we hold about you; (b) Correct inaccurate or incomplete information; (c) Delete your account and personal information (subject to legal retention requirements); (d) Opt out of marketing communications at any time; (e) Object to certain processing activities; (f) Receive a copy of your personal information in a portable format.

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

(a) Right to Know — what personal information we collect, use, share, and sell/disclose; (b) Right to Delete — request deletion of your personal information; (c) Right to Correct — request correction of inaccurate personal information; (d) Right to Opt Out — of the sale or sharing of personal information; (e) Right to Limit — use of sensitive personal information; (f) Right to Non-Discrimination — for exercising your CCPA rights.

Categories of Personal Information Collected (Past 12 Months): Identifiers, customer records, commercial information, internet activity, geolocation (general), inferences drawn from the above.

Sale/Sharing Disclosure: We do not sell personal information for monetary consideration. We may share certain personal information with advertising partners for cross-context behavioral advertising, which may constitute "sharing" under CPRA. You can opt out via the methods in Section 11.

Note: Currently, we do not ship products to California, so most California consumer interactions are limited to Site visits.

7.3 Other State Privacy Laws

Residents of states with consumer privacy laws (including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others) may have similar rights. To exercise these rights, contact us per Section 16.

7.4 European Economic Area, UK, and Switzerland

We do not target or knowingly serve customers in the EEA, UK, or Switzerland. If you are located in these regions, do not provide personal information through the Site. If we identify EEA/UK/Swiss data, we will delete it.

7.5 How to Exercise Your Rights

To exercise any of these rights, email privacy@dimebagpouches.com or mike@dimebagpouches.com with:

(a) Your full name and email address used for account/orders; (b) The specific right you wish to exercise; (c) Description of the request.

We will respond within 45 days (extendable to 90 days for complex requests) and may require identity verification before processing.

7.6 Authorized Agent

You may designate an authorized agent to make requests on your behalf. We may require written authorization and identity verification.

7.7 Appeals

If we deny your request, you may appeal by emailing privacy@dimebagpouches.com with "Privacy Appeal" in the subject line.

8. COOKIES AND TRACKING TECHNOLOGIES

8.1 What We Use

We use the following technologies on the Site:

Strictly Necessary Cookies: Required for the Site to function (shopping cart, login session, fraud prevention). Cannot be disabled.

Performance and Analytics Cookies: Help us understand how the Site is used (Google Analytics, Shopify Analytics, Hotjar or similar).

Functional Cookies: Remember your preferences (language, region, recently viewed products).

Advertising and Targeting Cookies: Track activity across sites to deliver relevant ads (Meta Pixel, Google Ads, TikTok Pixel).

Pixels and Web Beacons: Embedded in emails and pages to measure engagement.

Local Storage and Session Storage: Browser-based storage for site functionality.

8.2 Managing Cookies

You can control cookies through:

(a) Browser settings — most browsers allow you to block or delete cookies; (b) Cookie consent banner on our Site (where applicable); (c) Industry opt-out tools:

Disabling certain cookies may impact Site functionality.

8.3 Do Not Track

Most browsers offer a "Do Not Track" (DNT) signal. We do not currently respond to DNT signals as there is no industry standard. We do honor Global Privacy Control (GPC) signals where required by law.

9. MARKETING COMMUNICATIONS

9.1 Email Marketing

You will receive marketing emails only if you opt in. To unsubscribe:

(a) Click the "unsubscribe" link in any marketing email; (b) Update your account preferences; (c) Email us at privacy@dimebagpouches.com.

You will continue to receive transactional emails (order confirmations, shipping updates) regardless of marketing preferences.

9.2 SMS Marketing

SMS Consent: By providing your mobile number and opting in, you consent to receive promotional SMS messages from Dime Bags. Message frequency varies. Message and data rates may apply.

SMS Opt-Out: Reply STOP to unsubscribe. Reply HELP for assistance. Or email privacy@dimebagpouches.com.

9.3 Direct Mail

We do not currently engage in direct mail marketing.

9.4 Push Notifications

If we offer push notifications, you can disable them through your browser or device settings.

10. THIRD-PARTY LINKS AND SERVICES

The Site may link to third-party sites (social media, manufacturers, retailers). We are not responsible for the privacy practices of third parties. Review their privacy policies before providing information.

11. ADVERTISING AND BEHAVIORAL TRACKING

11.1 Interest-Based Advertising

We participate in interest-based advertising. This means our partners (Meta, Google, TikTok, etc.) may show you Dime Bags ads on other sites based on your activity on our Site.

11.2 Opting Out

You can opt out of interest-based advertising via:

Opting out does not eliminate ads — it makes them less personalized.

12. PAYMENT INFORMATION

We do not store full payment card details. Payment is processed by Shopify Payments, Stripe, PayPal, or other PCI-DSS compliant processors. These processors maintain their own privacy practices governed by their privacy policies.

13. CALIFORNIA "SHINE THE LIGHT" LAW

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing. We do not currently disclose personal information to third parties for their direct marketing purposes.

14. CHILDREN'S PRIVACY

The Site is not intended for children under 21 (or the legal age in your jurisdiction). We do not knowingly collect personal information from anyone under 21. If we discover we have collected information from a person under 21, we will delete it promptly. Parents or guardians who believe their minor child has provided information should contact privacy@dimebagpouches.com immediately.

We comply with the Children's Online Privacy Protection Act (COPPA) by taking steps to prevent collection of information from children under 13.

15. INTERNATIONAL DATA TRANSFERS

We operate in the United States. If you access the Site from outside the United States, your information will be processed in the U.S., where data protection laws may differ from your country. By using the Site, you consent to this transfer and processing.

16. CONTACT US

For privacy-related questions, requests, or concerns:

Privacy Officer Dime Bags LLC 23205 Gratiot Ave PMB 374 Eastpointe, MI 48021 USA

Email: privacy@dimebagpouches.com (recommended) Alternate: mike@dimebagpouches.com General Customer Service: support@dimebagpouches.com

For privacy-rights requests, please use the subject line: "Privacy Rights Request"

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the current version. Material changes will be communicated through:

(a) A notice on the Site; (b) Email notification (where appropriate); (c) Updated "Effective Date."

Continued use of the Services after changes constitutes acceptance.

18. SUPPLEMENTAL DISCLOSURES BY STATE

18.1 Virginia (VCDPA)

Virginia residents have rights similar to those in Section 7.2. To appeal a denial, contact privacy@dimebagpouches.com with "Virginia Privacy Appeal" in the subject line.

18.2 Colorado (CPA)

Colorado residents have rights similar to those in Section 7.2. We honor universal opt-out mechanisms (e.g., Global Privacy Control).

18.3 Connecticut (CTDPA)

Connecticut residents have rights similar to those in Section 7.2.

18.4 Texas (TDPSA)

Texas residents have rights similar to those in Section 7.2.

18.5 Other States

Residents of other states with comprehensive privacy laws have similar rights. Contact us to exercise them.