Who We Are and Scope

The House of Gremory Consulting (“Gremory,” “we,” “us,” or “our”) is a California-based consulting firm that helps cannabis businesses navigate licensing, compliance, inspections, METRC onboarding, and operational readiness. This Privacy Policy explains how we handle personal information collected through our website houseofgremory.com, our contact channels, and in the course of providing services to prospective and current clients and their personnel.

We are a “business” under the California Consumer Privacy Act as amended by the CPRA (collectively, “CCPA”). For some activities, we act as a “service provider” or “contractor” to our clients—when that is the case, we process personal information under our client’s instructions and our client’s privacy policy applies.

Information We Collect

We do not intentionally collect biometric data, precise (GPS-level) geolocation, or protected health information through this website. We do not request medical information and are not a health-care provider or HIPAA covered entity.

Cookies, Analytics & Advertising

We use first-party and third-party cookies and similar technologies to operate the site, keep it secure, measure audience engagement, and—where allowed—improve or advertise our services. You can control cookies in your browser settings. If you enable a Global Privacy Control (GPC) signal in your browser, we treat it as a valid request to opt out of sale/sharing for that browser.

How We Disclose Personal Information

We disclose personal information to the following categories of recipients for the purposes described above:

• Service Providers/Contractors who process data under written contracts, including web hosting, cloud storage, email and productivity tools, CRM/project management, analytics, age/ID-verification vendors, background-check vendors (when authorized), e-signature providers, accounting and billing providers, and security vendors.
• Regulatory Agencies (e.g., LA DCR, CA DCC) when you engage us to assist with applications, inspections, or compliance, and only with your authorization or as required by law or your contract with us.
• Advisors and Professional Services such as attorneys, auditors, and insurers, as needed for our legitimate business purposes and legal obligations.
• Business Transfers in connection with a merger, acquisition, or similar event.
• Law Enforcement or Government when we believe disclosure is required or appropriate to comply with law, court order, or protect rights, safety, and compliance.

Sale/Sharing: We do not sell personal information for money. We may share limited identifiers and internet activity with advertising/analytics partners for cross-context behavioral advertising; you may opt out (see below).

Retention

We retain personal information for no longer than necessary for the purposes described in this Policy, unless a longer period is required by law, contract, or to establish/defend legal rights. Typical periods are:

• General inquiries and website logs: 12–24 months.
• Client files (including licensing records): for the term of the engagement plus at least 4 years, or longer where required by regulator record-keeping rules or our contracts.
• Billing and tax records: 4–7 years.
• Job applicant materials: up to 3 years (longer if hired or required by law).

Your California Privacy Rights

Subject to certain exceptions, California residents may exercise the following rights:

• Right to Know/Access & Portability: Request the categories and specific pieces of personal information we collected about you, the sources, purposes, categories of third parties, and whether we sold or shared information.
• Right to Delete: Ask us to delete personal information, subject to legal exceptions (e.g., required recordkeeping, security, or exercising legal claims).
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: Opt out of the sale or sharing of personal information for cross-context behavioral advertising.
• Right to Limit Use and Disclosure of Sensitive Personal Information: We use sensitive personal information only for permitted purposes (e.g., to perform services you requested, detect security incidents, or comply with law). If you believe we use it beyond those purposes, you may request limitation.
• Non-Discrimination: We will not discriminate against you for exercising your rights.

How to Submit a Request

Opt Out of Sale/Sharing

To opt out of sale/sharing of personal information for cross-context behavioral advertising:

• Use your browser’s Global Privacy Control (GPC) signal (we honor it), and
• Contact us via the methods above and indicate “CCPA Opt-Out.”

Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information (e.g., access controls, encryption in transit, least-privilege practices, and vendor diligence). No system is perfectly secure, and we cannot guarantee absolute security. If we discover a security incident affecting your information, we will notify you and/or regulators when required by law.

Do Not Track & International Users

Our site does not respond to non-standard “Do Not Track” signals. We recognize the Global Privacy Control as described above.

Our services are intended for use in the United States. If you are accessing from outside the U.S., you understand your information may be processed in the U.S. and other jurisdictions with different data-protection laws.

Changes to This Policy

We may update this Policy from time to time. The “Last updated” date at the top indicates the effective date. Material changes will be posted on this page and, where appropriate, we will notify you by additional means.

Contact Us

If you have questions about this Policy or our privacy practices, contact:

This Privacy Policy is provided for general informational purposes and does not constitute legal advice. Cannabis regulations vary by jurisdiction; you are responsible for complying with the laws that apply to you.