Contents

Who we are

Our website address is: https://lowkeydispensary.com.

Last updated: June 15, 2026

Privacy Policy

Lowkey 2, LLC under current legislation regarding personal data protection, reports that personal data collected through the forms available on the website: https://lowkeydispensary.com, are included in computerized files for user specific services of Lowkey 2, LLC

Personal data collection and processing are aimed at maintaining business relationship and performance in tasks of information, training, counseling and other activities.

Data only will be transferred to those entities that are necessary for the sole purpose of complying with the purpose stated above.

Lowkey 2, LLC will adopt the necessary measures to ensure the security, integrity and confidentiality for data in accordance with the provisions in the EU General Data Protection Regulation (GDPR).

User may at any time exercise their rights in access, opposition, rectification, limitation, portability and cancellation recognized in Data Protection Regulation. User can exercise these rights free via email to: [email protected] or in the address: 5268 Washington St, West Roxbury, MA 02132

You represent that all information provided by him are true and correct and undertake to keep them updated, communicating changes to Lowkey 2, LLC

Purpose of the personal data treatment

What purpose will we treat your personal data?

In Lowkey 2, LLC, we will treat your personal data collected through the Website: https://www. holyokecannabis.com, with the following purposes:

  1. In case of contracting the goods and services offered through: https://lowkeydispensary.com, to maintain the contractual relationship, as well as the management, administration, information, provision and improvement of the service.
  2. Sending requested information through the forms provided at https://lowkeydispensary.com.
  3. Send newsletters, as well as commercial communications of promotions and/or advertising of Lowkey 2, LLC, and the sector.

We remind you that you can oppose the sending of commercial communications by any means and at any time, by sending an email to the address indicated above.

The fields from these registries are obligatory completion, being impossible to realize the expressed purposes if these data are not provided.

How long are the personal data collected retained?
Personal data provided will be kept as long as the commercial relationship is maintained or you do not request its deletion and during the period for which legal liabilities could arise for the services rendered.

Legitimation

Treatment for your data will be done with following legal bases that legitimize it:

  1. Request for information and/or the contracting of the services of Lowkey 2, LLC, whose terms and conditions will be made available to you in any case, prior to a possible contracting.
  2. Free, specific, informed and unambiguous consent, as we inform you by making available this privacy policy, which after reading the same, if you agree, you can accept by a statement or clear action affirmative, such as the marking of a box provided for this purpose.

In case you do not provide us with your information or you do it in an erroneous or incomplete way, we will not be able to meet your request, since it is impossible to provide you with the information requested or to carry out the contracting of the services.

Recipients

Data will not be communicated to any third party outside Lowkey 2, LLC, except legal obligation.

As treatment managers, we have hired following service providers, having committed to compliance with regulatory provisions, applicable in terms for data protection, at time for hiring:

Data collected by service users

If user includes files that contain personal data on shared hosting servers, Lowkey 2, LLC is not responsible for the breach by the user of Data Protection Regulation.

Data retention in accordance with LSSI

Lowkey 2, LLC reports that, as a hosting service provider and under the provisions contained on Law 34/2002, of July 11th, on the Information Society Services and Electronic Commerce (LSSI), retained in a maximum period for 12 months essential information to identify the source of data stored and the time when service started.

Retention of such data does not affect secret in communications and may only be used within the framework for a criminal investigation or to safeguard public safety, making himself available to the judges and/or courts or the Ministry which thus requires.

Data communication to State Forces will be under legal provisions on personal data protection.

Intellectual Property Rights

Lowkey 2, LLC owns all copyrights, intellectual property, industrial, “know how” and any other rights related to the content from the website https://lowkeydispensary.com and the services offered on it, as well as the programs necessary for its implementation and related information.

No available any reproduction, publication and/or use for the contents strictly private, full or partial, at the website https://lowkeydispensary.com without a prior written consent.

Software Intellectual Property Rights

You should respect other programs made available by Lowkey 2, LLC, while being free and/or publicly available. Lowkey 2, LLC has exploitation rights and intellectual property for software needed.

User does not acquire any right or license by the contracted service, to the software necessary to provide service, or the technical information service trace, except for rights and licenses necessary in the fulfillment at contracted services and only for the duration thereof.

In any action that exceeds the contract performance, user will need written permission from Lowkey 2, LLC, being forbidden to user for access, modify, view the configuration, structure and server’s files property of Lowkey 2, LLC, assuming the civil and criminal liability arising from any incident that might involve on servers and security systems as a direct result for a negligence or malicious on his part.

Intellectual property content hosted
Use contrary to intellectual property law services provided by Lowkey 2, LLC and in particular:

User has full responsibility in the content from its website, the information transmitted and stored, hypertext links, third party claims and legal actions in reference to intellectual property rights and minors protection.

User is responsible regarding laws and regulations in force and rules that have to do with running online service, electronic commerce, copyright, maintain public order, and universal principles at Internet use.

User indemnifies to Lowkey 2, LLC for expenses that generate some cause whose responsibility was attributable to user, including fees and legal expenses, even if a court decision is not final.

Information hosted protection
Lowkey 2, LLC backs content hosted on their servers, however not responsible for loss or accidental deletion data by users. Similarly, replacement does not guarantee total data deleted by users, since such data could have been deleted and/or modified during the period since the last backup.

Services offered, except specific backup services, do not include replacement for the contents stored in the backups made by Lowkey 2, LLC when this loss is attributable to user; at this case, rate will be determined according to the complexity and volume for the recovery, always previous user acceptance.

Replacement for deleted data is only included at cost in service when content loss is due to causes attributable to Lowkey 2, LLC.

Commercial communications

Pursuant to LSSI. Lowkey 2, LLC will not send advertising or promotional communications by email or other means electronic communication that have not been previously requested or expressly authorized by the recipient.

In cases where there are some prior contractual relationships, Lowkey 2, LLC is allowed to send commercial communications relating to products or services which are similar to those initially made a contract with the customer.

In any case, user can request that you do not get more commercial information through channels customer, upon proof of identity.

Mobile App and Storefront Disclosures

The Lowkey shopping experience — on our website and through any associated mobile app or storefront — is powered by Dutchie, our menu, e‑commerce, point‑of‑sale, and loyalty provider. The disclosures below cover the data collected and processed through the Dutchie storefront, the Lowkey website, and the Dutchie‑powered mobile app, in addition to the general policy above.

Data We Collect

Third‑Party Services We Share Data With

To deliver the storefront, app, and related services, we share limited data with the following categories of third‑party providers:

We do not sell your personal data. Beyond the categories of providers listed above, we share data with third parties only when required by law, in response to valid legal process, or with your explicit consent.

Data Retention

We retain personal information for as long as your account is active and for up to 90 days after you request account deletion, to allow for the completion of any pending orders, the resolution of disputes, the enforcement of our agreements, and compliance with our legal obligations under Massachusetts Cannabis Control Commission (CCC) regulations and applicable state and federal law. Aggregated and de‑identified data, and records we are required to retain by law — including transaction and age‑verification records mandated by the CCC — may be kept for longer.

Your Privacy Rights

You may exercise the following rights at any time, free of charge:

How to Request Account Deletion

You can delete your Lowkey / Dutchie storefront account directly on the web at:

https://dutchie.com/stores/lowkey/user/account

You may also email us at [email protected] or write to us at 5268 Washington St, West Roxbury, MA 02132.