Last updated: 20 July 2026

This policy explains how CBD on Broadway LLC, trading as CBD on Broadway (“we”, “us”, “our”), handles personal information. It covers our store at 5809 S. Broadway, Ste C, Littleton, CO 80121 and this website.

If anything here is unclear, ask us. You can reach us at Privacy@cbdonbroadway.com, on (720) 999-3989, or through our contact page.

Information we collect

We only collect what we need to sell you something, get it to you, and answer your questions.

Contact details. Your name, email address and phone number when you place an order, sign up for our list, or send us a message.
Order details. What you bought, when, how much you paid, and your order history with us.
Delivery details. Your shipping address and any delivery instructions you give us.
Payment information. Card and payment details are entered directly into our payment processor’s system. We do not see or store your full card number. What comes back to us is confirmation that a payment succeeded, plus a masked reference such as the last four digits and the card type.
Newsletter email. If you sign up for specials and new arrivals, we store the email address you gave us and the fact that you opted in.
Website usage. Standard analytics data — pages viewed, roughly where in the world the visit came from, what device and browser were used, and how you arrived at the site. This is collected through cookies and similar technologies. See Cookies and analytics below.
In-store security cameras. Our shop is covered by CCTV for the safety of customers and staff and for the prevention of theft. Footage may record you while you are on the premises. It is kept for 30 days and then overwritten automatically, and it is only reviewed if there is a specific security or safety incident.
Loyalty program. If you join our loyalty program, we and our loyalty provider, Fivestars, hold your name, phone number and a record of your purchases so that rewards can be tracked. Joining is optional and you can ask us to remove you at any time.
In-store purchases. Our point-of-sale system keeps a record of a transaction linked to you where you have given us details — for example an emailed or texted receipt, or a card profile saved with Square. If you pay cash, decline a receipt and are not in the loyalty program, we hold no record of that purchase against your name. The camera footage described above still applies.

We do not ask for and do not want sensitive information such as health conditions, medical history or government ID numbers. Please do not send us any.

How we use your information

To take, process and fulfill your order, and to handle returns or refunds.
To contact you about an order — a confirmation, a shipping update, or a question about something you bought.
To answer messages you send us through the contact form, by email or by phone.
To send you our newsletter, if and only if you asked for it. Every one of those emails has an unsubscribe link.
To keep the accounting, tax and sales records the law requires us to keep.
To understand how the site is used so we can fix what is broken and improve what is not.
To protect the shop against fraud and to enforce our Terms & Conditions, including our 21+ age requirement.

Who we share information with

We do not sell your personal information. We share it only with the service providers we need in order to run the business, and only the part of it they need:

Our payment processor, Square. Handles card payments and holds your payment details under their own privacy policy and security standards.
Our shipping carrier, USPS, FedEx or UPS. Receives your name, delivery address and phone number so a parcel can reach you.
Our email provider, GoDaddy. Stores the list of subscribers and sends the newsletter on our behalf.
Our analytics provider, Google Analytics. Receives website usage data as described below.
Our website host, GoDaddy. Stores the site and its data.
Our loyalty provider, Fivestars. Holds the name, phone number and purchase history of customers who join the loyalty program.
Professional advisers such as our accountant, where needed for tax and bookkeeping.
Law enforcement or regulators, where we are legally required to hand information over.

If the business is ever sold or transferred, customer records may transfer with it. If that happens we will say so on this page beforehand.

Cookies and analytics

Cookies are small files a website stores in your browser. We use them for two things:

Essential. Keeping your shopping cart filled as you move between pages, and remembering basic preferences. The site does not work properly without these. Our cart is stored locally in your own browser.
Analytics. Counting visits and seeing which pages get read, through Google Analytics (loaded via Google Site Kit). This tells us that a page was viewed and how the visitor reached it.
Advertising. We run the Meta (Facebook) pixel, which sets an _fbp cookie, and Google Ads and Merchant Center tags connected to our product listings. These measure whether an advert led to a visit or a sale, and they can be used to show you our adverts elsewhere. This counts as targeted advertising under Colorado law, and you have the right to opt out of it — see Your privacy rights below.

You can block or delete cookies in your browser settings at any time. Blocking essential cookies will break the cart and checkout. Most browsers also offer a “Do Not Track” or Global Privacy Control setting; we honor Global Privacy Control signals as an opt-out request where the law requires it.

To opt out of targeted advertising, email us at Privacy@cbdonbroadway.com, turn on Global Privacy Control in your browser, or block advertising cookies in your browser settings.

How long we keep it

Order and payment records: kept for as long as tax and accounting law requires — generally at least three years.
Contact form messages: kept while we deal with your query and for a reasonable period after, then deleted.
Newsletter subscriptions: kept until you unsubscribe, then removed from the active list.
Analytics data: kept for 14 months and held in aggregate rather than by name.
CCTV footage: kept for 30 days, then overwritten automatically.
Loyalty program records: kept while your account is active, and removed on request.

When we no longer have a reason to keep something, we delete it or strip out anything that identifies you.

Your privacy rights

If you are a Colorado resident, the Colorado Privacy Act gives you the following rights over personal data we hold about you:

Access. Ask us to confirm whether we hold your data, and to give you a copy of it in a portable format.
Correction. Ask us to fix anything that is wrong or out of date.
Deletion. Ask us to delete your data. We may have to keep some records — a completed sale, for example — where the law requires it, and we will tell you if that applies.
Opt out of targeted advertising. Tell us not to use your data for targeted advertising.
Opt out of sale. Tell us not to sell your data. We do not sell it in any case.
Opt out of profiling that produces legal or similarly significant effects. We do not carry out this kind of profiling.
Appeal. If we turn down a request, you can appeal. See below.

Depending on where you live, other state laws may give you similar or additional rights. Ask us and we will treat your request under whichever law applies to you.

How to make a request

Email Privacy@cbdonbroadway.com or write to us at 5809 S. Broadway, Ste C, Littleton, CO 80121. Tell us what you want and give us enough information to find your records — usually the email address or phone number you used when you ordered.

We will respond within 45 days. If the request is complicated we may take a further 45 days, and we will tell you before we do. We will not charge you for a reasonable request, and we will not treat you any differently for making one.

We may need to verify who you are before we act, so that we are not handing your data to somebody else.

If we say no — your right to appeal

If we refuse your request, we will explain why in writing. You can appeal by replying to that message or by emailing Privacy@cbdonbroadway.com with “Privacy appeal” in the subject line. We will respond to an appeal within 45 days. If we turn the appeal down too, we will give you a way to contact the Colorado Attorney General to complain.

Age restriction — 21 and over only

Our store, our products and this website are for adults aged 21 or over. We do not knowingly collect personal information from anyone under 21, and we do not knowingly sell to them.

If we find out that we have collected information from someone under 21, we will delete it. If you believe a minor has given us their information, contact us at Privacy@cbdonbroadway.com and we will remove it promptly.

Keeping your information secure

We take reasonable technical and organizational steps to protect the information we hold — the site is served over an encrypted connection, payment details go straight to our processor rather than through us, and access to customer records is limited to the people who need it. No system is perfectly secure, and we cannot guarantee absolute security, but we take it seriously and we would tell you promptly if something went wrong.

Links to other websites

This site links out to other places — brand websites, Google Maps, our Facebook page, lab documents. Once you follow a link, you are on someone else’s site under someone else’s privacy policy. We are not responsible for how they handle your data.

Changes to this policy

If we change how we handle information, we will update this page and change the “Last updated” date at the top. If the change is significant, we will make that clear rather than quietly editing the text.

Contact us

Questions about this policy, or about anything we hold on you:

Email: Privacy@cbdonbroadway.com
Phone: (720) 999-3989 — Monday to Saturday, 10am to 6pm; Sunday, 11am to 5pm.
In person or by post: CBD on Broadway, 5809 S. Broadway, Ste C, Littleton, CO 80121
Online: our contact form

Privacy Policy