Legal

Privacy Policy

Effective date: June 29, 2026 · Last updated: September 10, 2026

This Privacy Policy explains how Mad Labs ("Mad Labs," "we," "us," or "our") collects, uses, and shares information when you visit this website (the "Site"). Mad Labs is a licensed cannabis brand whose products are sold only through licensed retailers in California and Michigan. This Site is informational and is intended for adults 21 years of age or older.

1. Information we collect

Information you provide

• Newsletter sign-ups: your email address when you subscribe to updates, plus how you interact with the emails we send (see Email communications).
• Wholesale inquiries: your name, business name, email, phone number, and any message you send.
• Job applications: your name, email, phone, location/availability, resume, portfolio or profile links, and any information you include in your application.
• Contact messages: the contents of any message you send us and the details you include.

Information collected automatically

• Usage & device data: pages viewed, referring pages, approximate location, browser and device type, and similar analytics data.
• Cookies and local storage: including a stored flag confirming you passed our age gate, and analytics identifiers. See Cookies & analytics.

We do not knowingly collect sensitive personal information beyond what you choose to submit (for example, in a resume). We do not ask for government ID, health, or biometric data through this Site.

2. How we use information

• Respond to your inquiries and requests, including wholesale and contact messages.
• Review and process job applications.
• Send newsletters and brand updates where you have opted in, and measure whether they are opened and clicked (you can unsubscribe at any time).
• Operate, maintain, secure, and improve the Site.
• Verify that visitors are 21 or older.
• Detect, prevent, and address fraud, abuse, or security issues.
• Comply with legal obligations and enforce our Terms of Use.

3. Cookies & analytics

We use browser storage and cookies to remember that you have confirmed you are 21+ and to understand how the Site is used. We use analytics services (such as Google Analytics / Firebase) that may set cookies and collect usage data on our behalf. You can control cookies through your browser settings; disabling them may affect how the Site works. Where required, we honor recognized opt-out signals such as the Global Privacy Control (GPC).

4. Email communications

If you subscribe to our newsletter, we record your email address, the date you subscribed, the form you subscribed through, and the approximate region (country and state) derived from your IP address at that moment. We do not store your IP address itself.

Our marketing emails contain a small tracking image and links that pass through our own servers before forwarding you to the destination. These let us record, for each individual subscriber, whether a message was opened, which links were clicked, and when. We use this to measure which content is worth sending and to stop emailing people who are not reading them.

Two things worth knowing about that data. Open tracking is unreliable by design: some mail providers, including Apple Mail, load images automatically for every message, which registers as an "open" whether or not a person looked at it. And you can defeat open tracking entirely by disabling remote image loading in your mail app — link tracking only records what you actually click.

Every marketing email includes an unsubscribe link. Unsubscribing is immediate and permanent unless you sign up again; we keep a record of the unsubscribed address for the sole purpose of making sure we do not email it again. We do not sell or share subscriber lists, and we do not use email engagement data for advertising targeting.

Email delivery is handled on our behalf by Twilio SendGrid, which processes your address in order to send the message. To request a copy of your email engagement data, or its deletion, email hello@madlabs.com.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only:

• With service providers who host our Site, store form submissions, send email, or provide analytics — bound to use it only to serve us.
• For legal reasons — to comply with law, respond to lawful requests, or protect the rights, safety, and property of Mad Labs, our users, or the public.
• In a business transfer — in connection with a merger, acquisition, or sale of assets, subject to this policy.
• With your direction or consent.

6. Data retention

We keep personal information only as long as needed for the purposes described here, to comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we delete or de-identify it.

7. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to:

• Know what personal information we collect, use, and disclose.
• Access and obtain a copy of your personal information.
• Correct inaccurate personal information.
• Delete personal information, subject to legal exceptions.
• Opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by law.
• Limit the use of sensitive personal information.
• Non-discrimination for exercising your rights.

To exercise these rights, email hello@madlabs.com with the subject "California Privacy Request." We will verify your request and respond within the timeframes required by law. You may use an authorized agent to submit a request on your behalf.

9. Michigan & other states

Michigan does not currently have a comprehensive consumer data privacy statute, but we extend the core rights above — access, correction, and deletion — to Michigan residents and all users as a matter of practice. Michigan cannabis operations are additionally regulated by the Cannabis Regulatory Agency; retailer point-of-sale data is handled by licensed retailers, not by this Site.

10. Age & minors

This Site is intended only for adults 21 and older. It is not directed to anyone under 21, and we do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes are effective when posted, and we will update the "Last updated" date above. Material changes may be announced on the Site.

12. Contact us

Questions or requests about this policy or your information:

Mad Labs
Email: hello@madlabs.com