Privacy policy

Updated September 12, 2026 · silverleaf.express

This policy describes information handled through silverleaf.express, the website for Silverleaf Cannabis Co. Great Falls at 2798 Barley Ln, Great Falls, MT 59404 ("Silverleaf," "we," or "us"). It covers browsing, the pickup-order experience and our website analytics, not every corporate or in-store program. Other Silverleaf websites and third-party services have their own notices.

Privacy choices · Privacy requests · Terms and conditions

Information collected and why

Website activity and technical information. Our website, hosting and analytics services process information such as requested pages, IP addresses, browser and device information, referring pages, timestamps, performance and interactions. We use it to operate and secure the site, diagnose errors, understand traffic and improve the menu and ordering experience.

Shopping and ordering. The embedded Weave menu processes account, contact, cart and order information you supply. Silverleaf receives information needed to handle your pickup request and store transaction. Identity and eligibility information may also be required for a lawful sale. You pay at the store; this website does not take online payment. Order records are separate from the limited analytics association described below.

Communications. When you contact the store, we use the information you provide to answer your question or handle your request. Do not include medical details, ID images or payment-card information in a general inquiry. Any optional messaging enrollment presented by an ordering or rewards service is separate from reading this policy.

Why we link visits to orders

We measure which visits lead to pickup submissions so we can improve the website. Unless you turn optional analytics off or your browser sends a recognized privacy signal, a successful online submission may be associated with the browser and visit identifiers supplied by Google Analytics. An online submission is not a completed paid sale.

What this link contains

Our private order-link records contain the Weave order and location identifiers, Google Analytics browser and session identifiers, timestamps, the notice version, and a random browser ownership reference. These are pseudonymous records—not anonymous records—because an order identifier can be connected to a transaction in the store system.

The link does not contain names, email addresses, phone numbers, medical information, payment-card details, or a copy of the order. The new capture endpoint stores this association privately; it does not send these records or paid purchases to Google. Paid-sale reporting is not currently enabled.

Existing website analytics and ordering

This site also uses Google Analytics and Umami for website usage and funnel measurement. Those tools receive browsing events and technical identifiers. Shopping events can include product identifiers, names, categories, options, quantities and cart values, which can reveal shopping interests. Our custom Google Analytics event payloads exclude customer names, contact information, medical details and raw search text; that does not mean every record processed by the website or ordering service is anonymous. Weave separately processes the information needed for ordering and operates its own tracking. The privacy control below stops our site-managed analytics, but does not disable Weave’s separate service or change the information required to fulfill an order.

Google privacy information · Weave privacy policy

Heatmaps and session replay

Our Umami service at metrics.redeyesocial.com samples visits for heatmaps and session replay, which reconstruct page interactions such as clicks and scrolling. Replay is configured to mask page text and input values and block the embedded Weave ordering component. These settings reduce collection; they do not make all technical or interaction data anonymous. Heatmaps record page locations and interaction positions.

Turning optional analytics off prevents our Google Analytics, Umami, heatmaps, session replay and order-to-visit capture from loading or sending new activity. Open pages may refresh to stop already-loaded trackers. It does not disable essential hosting and security operations or Weave’s separate processing. You can also use the Google Analytics opt-out browser add-on where supported. Blocking storage or scripts may affect website and ordering features.

Storage, deletion and browser signals

Browser storage supports age-gate status, cart continuity, ordering sessions and analytics. Google Analytics uses browser identifiers and cookies; Weave manages its own account and ordering storage. Short-lived tab storage supports menu-entry and pickup-submission measurement. Your optional-analytics preference is stored locally until you change or clear it; its companion preference cookies last up to one year. Earlier order-link opt-outs are honored as optional-analytics opt-outs. When we cannot read preference storage, optional analytics stay off. A secure browser cookie lets us clear links associated with this browser; it expires after 90 days. Saved links older than 90 days are removed by daily cleanup. Turning optional analytics off requests deletion of this browser’s saved order links and prevents new optional collection. It clears site-managed Google Analytics cookies and pending funnel markers, but leaves cart and ordering-account storage intact. It does not automatically delete historical Google Analytics or Umami records; use the privacy-request contact below for those requests. If deletion fails, the control shows a retry message.

We treat Global Privacy Control and Do Not Track as requests to disable all site-managed optional analytics, including order linkage, replay and heatmaps. Clearing browser storage or using a different browser can remove your saved choice and the ability to locate earlier links through this control; set your choice again on that browser. These controls do not delete the underlying order or required transaction records. The 90-day limit applies to private order-link records, not every analytics record, backup or store transaction. Other records are retained according to their operational purpose, service settings and applicable recordkeeping requirements.

Who receives information

Silverleaf and service providers supporting hosting, technical support, analytics and ordering handle information for those purposes. Google receives website analytics; our Umami service receives usage and sampled interaction information; Weave processes ordering and makes order information available to the store. Information may also be disclosed to meet legal or regulatory obligations or respond to lawful requests. Provider notices describe their own practices but do not replace our responsibility for information we handle.

Privacy questions and requests

For privacy questions, requests or appeals, email bodie@silverleafcannabisco.com. Do not send medical or payment-card information in a privacy inquiry.

You can call (406) 403-9526 or write to Silverleaf Cannabis Co, 2798 Barley Lane, Great Falls, Montana 59404. Identify your inquiry as a privacy request and describe the activity concerned. You do not need to create a new website account to ask a privacy question.

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, and to opt out of certain uses such as sale, targeted advertising or qualifying profiling. We may need to verify your identity or an agent's authority. Some records may need to be retained for legal obligations or other permitted reasons. If you disagree with a response, contact us through the same channel and ask for a privacy-request appeal.

Audience and security

This site is intended for adults 21 and older. Medical purchasing remains subject to applicable eligibility requirements and store verification. If you believe a child has supplied information through this site, contact us so we can review it.

We use HTTPS and access controls for the website and its private order-link storage. No online service or transmission can be guaranteed completely secure. We and our providers operate services in the United States and may process information in other locations where their services operate.

Changes to this policy

We will update the date on this page when this policy changes and provide additional notice or obtain consent where required for material changes. Reading this policy or accepting website terms is not, by itself, consent to every possible use of personal information.