When you visit our website (including OLCC.online and all subdomains, collectively “Website”), you share your personal information with us in various ways. This policy (“Privacy Policy”) is intended to provide you with information about how OLCC collects, manages, shares, and secures your personal information as well as describing what tools and options you have to manage your personal information. This Privacy Policy applies to our Website, collection of personal information associated with licensing applications or permits, and any sites or products that display these terms (collectively “Services”).
By using our Services, you understand and agree to our use of your personal information in accordance with this Privacy Policy. Please visit our Terms of Service for more information on terms associated with the services offered by OLCC.
1. Introduction
The Oregon Liquor & Cannabis Commission (“OLCC”) is the agency responsible for regulating the sale and service of alcoholic beverages in Oregon by administering the state's Liquor Control Act and regulating the production, processing, and sale of recreational marijuana in Oregon through the Control, Regulation and Taxation of Marijuana and Industrial Hemp Act. The agency also regulates the production, processing and sale of medical products sold to Oregon Medical Marijuana Program cardholders in OLCC licensed marijuana retail shops.
As part of OLCC’s mission to support businesses, public safety, and community livability through education and the enforcement of liquor and marijuana laws, OLCC offers various services, including our Website and other electronic offerings comprising our Services. Some of the Services require you to provide personal information directly, such as your name and contact information, and some of the Services may automatically collect information from your device, such as geolocation and browser information.
Personal information is collected when consistent with the intent of statute, state policies, and business needs. We will only provide it to third parties (1) as stated in this notice; (2) to provide you with Services or products you order; and (3) as permitted or required by law.
As used in this Privacy Policy, the term “personal information” applies only to information that alone, or in combination with other information in our possession, can identify you individually. Your personal information may be collected when you use our Websites, including OLCC.online.
This Privacy Policy does not apply to information collected by any third party. Certain OLCC Services and regulatory activities may have requirements applicable to OLCC’s collection and use of information, including personal information, that are different in scope and purpose than this policy. To the extent there is a conflict, applicable laws, and rules control.
2. Information Collected
2.1. Account Information
When you create an account with OLCC to enable access to certain features of the Services, we may require that you provide us with your name, email address, phone number, address, and birthday. You will then create a username and password information that allows us to confirm your identity on subsequent visits and makes it easier to use our Services. Additional information may also be required for certain other Services we offer.
2.2. Payment Card or Electronic Transaction Information
When you make a payment as part of the Services, you may be presented with the option to use a credit card or other electronic payment means. OLCC uses a third-party payment processor to handle payment card and other online payment transactions. OLCC does not store or process your payment card information, or your other electronic payment information.
2.3. Social Media
We may collect personal information about you from third parties, such as online social networks if you take part in a forum, for example, or follow OLCC on Facebook or Instagram. We may collect personal information when you click “Share This” or “Like” buttons or otherwise use social media buttons, plug-ins or refer to us using hashtags. Note that any personal information collected by a third party, such as a social networking site, is subject to their privacy practices rather than this Privacy Policy.
2.4. Third Party Advertising
OLCC uses certain third parties to promote our services on our behalf through the internet. These third parties may use cookies to collect information about your visits to our Website, including through use of any application made available as part of the Services, as described in Section 2.7 (Cookies and Web Beacons) of this policy. Third parties may also use information about your visits to our Website to serve targeted advertisements that are relevant to you. Those advertisements may appear on other sites that you visit.
2.5. Interacting with OLCC
You also provide personal information when you interact with OLCC. For example, when you contact OLCC by email, we will collect your email address and any other personal information you provide. When you subscribe to one of our electronic newsletters, you must provide your valid email address. If you participate in a voluntary survey, you may choose to provide us with demographic information.
2.6. Using the Services
OLCC collects certain information automatically when you use the Services. We also receive the Internet protocol (IP) address of your computer, mobile device, or the proxy server or router that you use to access the Internet, operating system details, type of web browser, mobile device details (including your mobile device identifier provided by your mobile device operating system) and search data. This information is used by us to provide a streamlined user experience and ensure the security of the Services.
2.7. Cookies and Web Beacons
We may also automatically collect certain information through the use of “cookies.” Cookies are small data files that are stored on a user's computer and downloaded to the computer or device when they visit a website. Cookies then send information back to the originating website on each subsequent visit or to another website that recognizes that same cookie. Cookies can store certain information such as customer preferences, including language, and navigation history. We may use cookies to aggregate personal information collected automatically with data (including personal information) previously stored from other interactions with our Website and third-party sites. We may examine metrics, such as which pages you visit or features you use, which links you click on and resources you view, the performance of our marketing efforts, and your response to those marketing efforts. This would allow us to offer relevant and useful information to users of our Services. If you wish to opt out of allowing certain cookies, you may do so by changing your browser settings so that cookies from our Website cannot be set. Please note that if you delete, block, or otherwise restrict cookies, or use a different computer or internet browser, you will need to renew your cookie management choices.
2.8. Aggregated and Anonymized Information
OLCC collects certain information that is aggregated and anonymized, including statistical information, about how users as a whole access and interact with the Services (e.g., which Service features and web pages are most accessed, how many people open our newsletters, which technical issues affect our users, etc.). This aggregated and anonymized information cannot be used to identify you individually and is not considered personal information. This Privacy Policy does not limit how OLCC may use aggregated and anonymized information.
2.9 Information from Children Under 13
OLCC complies with the requirements of the Children’s Online Privacy Protection Act (“COPPA”) and the Federal Trade Commission’s rule interpreting COPPA (16 CFR § 512). The Services are not directed at individuals younger than age 13, and we do not knowingly collect any personal information through the Services from anyone under 13. If we learn that we have personal information of an individual under age 13 has been provided to us without parental or legal guardian consent, we will delete this information from our databases.
2.10 Personal Information Associated with Licensing Applications or Permits
When you apply for certain Services with OLCC, we may require that you provide us with your name, email address, phone number, address, birthday, driver’s license, and social security number. Additional information may also be required for certain other Services we offer. As noted above, laws and rules governing OLCC’s regulatory activities may require the collection and use of information that differ in scope and purpose from this policy. To the extent there is a conflict, applicable laws and rules control.
3. How OLCC Uses Your Personal Information
3.1 Submission to OLCC
When you provide your personal information to OLCC, such as when you create or update an account or interact with the Services, you agree to our use and processing of your personal information as set out in this Privacy Policy. You can update your preferences associated with our use of your personal information by changing your account settings and/or closing your account. Any personal information OLCC collected prior to a change in preferences or deletion of your account will be retained in accordance with our data retention policies and applicable laws.
3.2. Communications from OLCC
We communicate with you through email, notices posted through the Services, and other means available through the Services, including mobile text messages (where you opt-in) and push notifications (where enabled by you). Examples of these communications include:
- Service communications: Informing you how to use the Services, including any new features of the Services, alerting you about the availability of the Services, confirming payments and providing information about other issues related to our Services. You cannot opt out of receiving service messages from us for certain Services related to OLCC’s regulatory activities.
- Promotional communications: Sharing information about OLCC’s Services.
- Response communications: Responding to an inquiry by you, either through the Services, social media or other channels.
3.3. Providing, Developing and Customizing the Services
OLCC uses your personal information to provide you with the Services you have requested. For example, if you sign up for an electronic newsletter, we use your email address to send you the newsletter. We may also use your personal information to improve features of the Services, such as when you provide feedback to OLCC customer service agents. We also use this information to track potential problems and trends and to customize our support responses to better serve you, and for other purposes required by or allowable under applicable law.
4. How OLCC Shares Your Personal Information
4.1. Service Providers
OLCC may share personal information with service providers that assist OLCC in providing, improving, and communicating with you and consumers about the Services. For example, OLCC may engage an email service provider to manage our electronic newsletters and promotional communications, a technology company to build software or apps, a payment processor to process payments, or an analytics provider to study user habits. These third parties have limited access to your information only to perform these tasks on our behalf.
4.2. Disclosures Required by Law or for Compliance Reasons
We may need to disclose your personal information to law enforcement agencies, when compelled by administrative rule, law, subpoena, or other legal process. In addition, we may disclose certain personal information if we have a good faith belief that disclosure is reasonably necessary to:
- Enforce the Terms of Service, investigate and defend against any third-party claims or allegations, or protect the security or integrity of our Services.
- Exercise or protect the rights, property, or safety of OLCC personnel, users of our Services, or the public.
4.3. Public Records Laws
You should be aware that the OLCC is an executive agency of the State of Oregon, and is subject to Oregon’s public records laws. Information provided by you will be retained in accordance with applicable law, and may be subject to disclosure under Oregon’s public records laws unless the information is exempt from disclosure by law. You should not provide information if you are concerned about disclosure of your information under those laws.
5. Security
We take precautions to protect your personal information from unauthorized or unlawful access or destruction. However, no method of transmission over the Internet or form of electronic storage is 100 percent secure. Therefore, we cannot guarantee the absolute security of your personal information, and make no representations or warranties under this policy or the Terms of Service regarding information security.
If you have any questions about the security of our Services, you can send a message to OLCC.generalinfo@Oregon.gov.
6. Important Information
6.1. Links to Other Websites
The Services may contain links to other sites or services offered by third parties. OLCC is not responsible for the privacy practices or content of these other sites or their services. We encourage you to be aware when you leave the Services, and to read the privacy notices and terms of use for each site that collects personal information. This Privacy Policy applies only to personal information collected by or on behalf of OLCC.
6.2. Changes
We may occasionally change this Privacy Policy. If you object to any of the changes, please stop using the Services. Using our Services after a notice of changes has been published on our Services constitutes consent to the changed terms or practices. Our current Privacy Policy applies to all information that we have about you and your account.
6.3. Applicable Laws
OLCC is a State of Oregon agency and as such, is not subject to certain U.S. state privacy laws including the California Consumer Privacy Act.
6.5. Contact Information
If you have questions about anything in this Privacy Policy, contact OLCC at OLCC.generalinfo@Oregon.gov.