privacy
policy

table of contents

1. who this applies to

smoove is a brand of Cali Banger Inc ("smoove," "we," "us," "our"), headquartered in Los Angeles, California. This Privacy Policy describes how we collect, use, share, and protect personal information collected through ilikesmoove.com and any related smoove-branded properties (the "Site"). It does not apply to third-party websites we link to, including weedmaps.com, dispensary websites, or social media platforms.

By using the Site, you agree to the practices described in this Policy and to our Terms of Service.

2. what we collect

information you give us

• email and phone number when you join smoove insiders
• zip code, city, or address when you use the locator or sign up for state-targeted drops
• cannabis license number, business name, contact name, and shop address if you submit the wholesale request form (licensed California retailers only)
• communications — anything you email us at info@calibanger.com or messages you send via the wholesale or insider forms
• survey responses if we run product or brand surveys

information collected automatically

• device and browser information (type, version, screen size, language, OS)
• IP address and approximate geographic location derived from IP
• referring URL and search terms (if you came from a search engine)
• pages you visit, time on page, scroll depth, click events, form interactions
• age-verification status (stored locally on your device via cookie)
• spin-the-wheel result and discount code claimed (stored locally)

information from third parties

• analytics providers — Google Analytics, Microsoft Clarity (session recording + heatmaps)
• email and SMS — Klaviyo (sends our marketing on our behalf and reports opens, clicks, deliverability)
• dispensary locator — Weedmaps (handles the actual dispensary search when you use the locator)
• advertising partners — when relevant, we receive aggregated reporting from cannabis-permitted ad networks (Mantis, StackAdapt, equivalent)

3. CCPA categories of personal information collected

For California residents, here is what we collect by CCPA category. We have not sold any personal information in the preceding 12 months. We may share categories marked "Yes" with vetted service providers for business purposes only.

Cat.	Category	Examples	Collected
A	Identifiers	Real name, alias, postal address, IP address, email address, account name, phone, or similar identifiers	Yes
B	California Customer Records (Cal. Civ. Code § 1798.80(e))	Name, signature, address, phone, license/government ID number (wholesale only)	Yes
C	Protected classification characteristics	Age (21+ verification), state of residence	Yes (age only)
D	Commercial information	Records of products viewed, locator searches, links clicked	Yes
E	Biometric information	Fingerprints, faceprints, voice or retina scans	No
F	Internet / network activity	Browsing history on Site, search history, interactions with site features, ads	Yes
G	Geolocation data	Approximate location from IP, zip code, or address you provide	Yes
H	Sensory data	Audio, visual, thermal, or similar information	No
I	Professional / employment-related information	Job title, employer (wholesale form only — licensed retail buyers)	Yes (B2B only)
J	Non-public education information	Education records (FERPA)	No
K	Inferences drawn from other personal information	Customer segments and preferences derived from your interactions	Yes

4. how we use information

• to send marketing email and SMS you opted into ("smoove insiders")
• to route you to the closest licensed California dispensary carrying smoove
• to verify licensed cannabis retailer eligibility for the wholesale program (CDPH database lookup)
• to improve the site — measure traffic, identify bugs, A/B test layouts
• to prevent fraud, abuse, scraping, and unauthorized access
• to comply with California cannabis regulation, applicable law, court orders, and government requests
• to administer promotional contests, sweepstakes, and the spin-to-win discount mechanic
• to respond to customer inquiries sent to info@calibanger.com
• to evaluate and conduct corporate transactions (merger, sale, restructuring)

5. how we share it

We share data with the following categories of recipients under contract:

• Service providers — Klaviyo (email/SMS), Google (analytics), Microsoft (Clarity session recording), our hosting providers, and other vetted vendors. These parties are contractually prohibited from using your data for their own marketing.
• Weedmaps — when you use our locator, your zip code is passed to weedmaps.com to surface nearby dispensaries. Weedmaps' privacy policy governs their handling of that data.
• Government and regulators — when required by California cannabis law (e.g., CDPH and DCC compliance), subpoena, court order, or legal process.
• Corporate transaction parties — if we sell, merge, or transfer business assets, your data may be included as part of the transaction.
• Affiliates and subsidiaries — including parent company Cali Banger Inc and any related cannabis brand entities under common ownership.

6. we don't sell or share for cross-context behavioral advertising

We do not sell your personal information for monetary consideration. Under California's CPRA definition of "share," we do not share personal information for cross-context behavioral advertising as that term is defined.

If you would like to formally opt out anyway — for example to limit any third-party cookie tracking that may exist as we add new tools — email info@calibanger.com with the subject line "Do Not Sell or Share My Personal Information." We will honor your request within 15 business days and will not discriminate against you for exercising this right.

7. sensitive personal information

Under CPRA, we collect the following categories of sensitive personal information:

• geolocation (your approximate location derived from IP and zip code)
• contents of communications you send us via email or form (only as needed to respond)

We use sensitive personal information only to provide the Site and Services you requested, prevent fraud, comply with law, and route you to dispensaries. We do not use sensitive personal information to infer characteristics about you for targeting.

California residents have the right to limit our use and disclosure of sensitive personal information to the purposes described above. To exercise this right, email info@calibanger.com with "Limit Use of Sensitive Personal Information" in the subject line.

8. AI and machine learning

We and our service providers may use artificial intelligence and machine learning, including generative AI, to:

• analyze site analytics and identify patterns in customer behavior
• segment audiences for marketing (e.g., grouping subscribers by zip code or interest)
• draft and personalize email and SMS marketing content
• moderate and respond to customer inquiries

We do not make significant decisions about you (such as creditworthiness or denial of service) solely on the basis of automated AI processing.

9. your california rights (CCPA / CPRA)

If you are a California resident, you have the right to:

• know what personal information we collect, use, share, and sell about you, and the categories of sources and third parties
• access the specific pieces of personal information we have collected about you in the prior 12 months
• delete your personal information (subject to legal exceptions, such as retaining information for legal or compliance purposes)
• correct inaccurate personal information
• opt out of sale or sharing for cross-context behavioral advertising (we don't currently do either, but you can pre-emptively opt out)
• limit the use of sensitive personal information
• data portability — receive your information in a structured, machine-readable format
• not be discriminated against for exercising any of these rights — we will not deny you the Site, charge a different price, or provide a lower level of service
• designate an authorized agent to make a request on your behalf with proper written authorization

10. how to submit a request (verifiable consumer request)

To exercise any right described above, email info@calibanger.com with one of these subject lines:

• "CCPA: Right to Know"
• "CCPA: Right to Delete"
• "CCPA: Right to Correct"
• "CCPA: Do Not Sell or Share"
• "CCPA: Limit Use of Sensitive PI"

In your request, include enough information for us to verify your identity — typically: full name, email address used with smoove, zip code, and at least one other identifier we have on file. We may follow up to confirm your identity.

Response timeline: we will acknowledge your request within 10 business days and substantively respond within 45 days. We may extend the response window by an additional 45 days if necessary, and will notify you in writing of the reason.

You may make a Right to Know or data portability request twice in any 12-month period at no charge. If a request is excessive, repetitive, or manifestly unfounded, we may charge a reasonable fee or decline — we will explain the reason in writing.

You have the right to appeal any denial. If you believe we have not appropriately responded, you may contact the California Privacy Protection Agency at cppa.ca.gov.

11. minors and medical marijuana patients

The Site is intended for adults 21 years of age or older. We do not knowingly collect personal information from anyone under 21.

If smoove offers products or services to California medical marijuana patients ages 18-20 holding a valid Medical Marijuana Identification Card (MMIC) issued under California Health & Safety Code § 11362.71, additional collection of medical card numbers, recommending physician details, and patient identification may apply through licensed retailer flows — never directly on this Site. Any such collection is governed by HIPAA-aware practices and CDPH regulations.

If we learn that we have collected information from a person under 21 without proper authorization, we will delete that information promptly. If you believe a minor has provided information to us, contact us at info@calibanger.com.

12. cookies and Do Not Track signals

We use cookies and similar technologies (pixels, web beacons, local storage) for:

• essential functions — age verification persistence, spin-wheel state, session management
• analytics — Google Analytics, Microsoft Clarity for site usage and session recordings
• marketing — Klaviyo onsite forms, identification of returning visitors for personalization
• advertising — when we run paid campaigns, Meta Pixel, Twitter/X Pixel, or cannabis-permitted ad-network pixels may be present

Most browsers allow you to block or delete cookies. Doing so may break parts of the Site, including age-gate persistence (you may need to re-verify your age on each visit).

Do Not Track: some browsers transmit a Do Not Track ("DNT") signal. There is no industry consensus on how to interpret DNT, and we currently do not respond to DNT signals. We will revisit this if a clear standard emerges.

Global Privacy Control (GPC): we honor browser-level GPC signals as an opt-out of sale/share where applicable under CCPA/CPRA.

13. interest-based advertising

When we run paid campaigns, our advertising partners may use cookies to deliver targeted ads. You can opt out of interest-based advertising from participating Network Advertising Initiative members at optout.networkadvertising.org or from Digital Advertising Alliance members at optout.aboutads.info.

For mobile devices, you can use the AppChoices app at youradchoices.com/appchoices or limit ad tracking in your device's settings.

14. California's Shine the Light Law

Under California Civil Code § 1798.83 ("Shine the Light"), California residents may request information about personal information we have disclosed to third parties for those third parties' direct marketing purposes during the preceding calendar year.

As of the effective date above, smoove does not share personal information with third parties for those third parties' direct marketing purposes. If our practices change, this section will be updated.

To submit a Shine the Light request anyway, email info@calibanger.com with the subject line "Shine the Light Request" and include your full name and California mailing address.

15. data retention

We retain personal information as follows:

• email and SMS subscribers — for as long as you remain subscribed plus 24 months after unsubscribe
• wholesale buyer applications — 5 years (for tax, compliance, and CDPH audit purposes)
• customer support inquiries — 3 years
• analytics data — Google Analytics: 26 months (default); Microsoft Clarity: 90 days
• age-verification cookies — 30 days (so you don't have to re-verify every visit)

We may retain de-identified or aggregated data indefinitely. If you exercise your right to delete, we will delete information except where retention is required by law or for legitimate business purposes (such as preventing fraud or completing transactions you requested).

16. security

We use industry-standard security practices to protect your data, including HTTPS encryption in transit, encrypted storage at rest where applicable, limited employee access on a need-to-know basis, and regular security reviews of our service providers.

No system is 100% secure. We cannot guarantee absolute security. If we become aware of a security breach affecting your personal information, we will notify you in accordance with California's data breach notification law (Cal. Civ. Code § 1798.82).

17. users outside the United States

The Site is hosted in the United States and is intended only for users in the United States. If you access the Site from outside the U.S., your information will be transferred to and stored in the U.S., where data-protection laws may differ from those in your country. We do not actively market to users outside the U.S., do not sell or ship cannabis products outside California, and our cannabis-licensed products are governed exclusively by California state law.

18. changes to this policy

We may update this Policy at any time. When we do, we will update the "last updated" date at the top of the page. Material changes will be communicated by email to active smoove insiders and, where required by law, by additional notice. Your continued use of the Site after changes constitutes acceptance.

19. contact us

Questions, complaints, or to submit a CCPA/CPRA request:

• email: info@calibanger.com
• mailing address: Cali Banger Inc · 9074 De Garmo Ave · Los Angeles, CA 91352

For external complaints, you may contact:

• California Privacy Protection Agency — cppa.ca.gov
• California Attorney General — oag.ca.gov

Cali Banger Inc · Los Angeles, CA · CDPH Lic. #C11-0001985-LIC