Information you choose to share.
Newsletter signups store your email address, consent confirmation through the required signup action, and submission time. Inquiries store your name, email, message, and submission time in the website’s database.
These details are used to manage newsletter subscriptions and review or respond to inquiries. Business claim requests also store the listing reference, your role, and proposed public business details. Claims are reviewed before changes are published; your personal name and email are used for verification and are not automatically published. Resend processes email addresses and message content to deliver confirmation emails and inquiry notifications. Newsletter signups normally require email confirmation. An administrator may also accept a pending signup after confirming that the person wants to subscribe. We record signup consent, email confirmation time, any administrator acceptance, and unsubscribe status separately.
Event and job submissions.
We store submitted listing details, the submitter’s name and email, submission time, consent through the required submission action, review status, and internal review notes. Only approved listing details are published. Submitter names, emails and review notes remain private. We do not collect job applications or résumés. Contact us with your submission reference to request a correction, cancellation or removal.
Business listing requests.
We store your proposed public business details, name, email, role, New Mexico industry connection, consent, submission time, and review history. Only approved business details and public source links appear in the directory. Submitter contacts, relevance explanations, and internal review notes remain private. We use your email to communicate the review decision and, if approved, explain how to claim the listing. Resend processes these decision emails. Approval of a listing does not approve an account claim or verify a professional license.
Additional location requests.
Approved representatives can request another business location. We store the proposed address, city, phone, hours, public source, private notes, account identity, consent through the required submission action, and review history. Approved location details become public; applicant contact information, notes, and decision messages remain private. Representatives can see their request status and decision notes in their accounts.
Business accounts and verification.
You can create an account or sign in with a code sent to your email address, or use Google. Email codes expire after ten minutes, work once in the requesting browser, and allow at most five entry attempts. We store a hash of the code combined with a browser secret, your email, and limited attempt records; Resend delivers the code. We do not store account passwords or subscribe you to marketing when you sign in. When you use Google, we receive your Google account identifier, verified email address, and basic name information. We use necessary, secure sign-in cookies lasting up to seven days, plus short-lived login cookies. Session tokens are stored as hashes and revoked when you sign out. Verifying the email attached to an existing Google sign-in preserves that account’s business access. Connecting a previous ChatGPT account or adding Google to an email account requires proof of both sign-ins. A public business contact email or an unverified claim never grants account access. We store your account identifier and email with claims, your stated role, verification evidence, email-verification status, and review decisions. Official business email addresses are kept privately for verification. Codes expire after ten minutes and are stored as hashes. Administrators can review claims and record listing changes. A claimed label indicates an approved representative, not an endorsement or license certification. Contact us to request account or claim removal.
Business profile tools and plans.
Approved representatives can publish core location details. Pro and Featured add images, richer profiles and location analytics. Published images and profile details are public. Private drafts are stored with your account, location, and approved claim. Draft details and unpublished uploads are not shown to public visitors or other business accounts. Publishing a profile makes its selected images public. We retain plan interest and billing or complimentary access records privately, with administrative audit history. Online payments are not open and we do not collect card or bank details. Jobs require an approved business claim and separate posting terms. Core information remains available if paid access ends; enhanced fields are retained in your account and removed from the profile display until access is restored. Images used in published profiles can be publicly accessible by URL, including briefly from caches after removal. Unpublished uploads require the uploading account and an approved business claim. Contact us to request removal.
Notifications and follow-ups.
Your account shows recent request and message activity, with a saved read/unread preference. Marking a notification read does not approve a request or mark a conversation read. Administrators can record private notes and follow-up dates for advertising and upgrade inquiries. Reminders appear inside the dashboard; they do not send email or device notifications. These records are stored privately and included in administrative recovery backups.
Account activity.
While your signed-in account or forum page is visible, we record a short-lived activity signal to show administrators how many accounts with approved business claims are online. The count includes activity within the past two minutes and counts each account once across tabs and devices. It does not expose your messages or browsing history. Activity records expire automatically and are cleaned up after a day when activity updates are processed.
Business forum and live chat.
The forum is available to signed-in representatives with an approved business claim and NMCC administrators. Your selected business name, discussion posts, replies, chat messages, and posting times are visible to other forum members. We retain posts and messages with their author account identifier. Members cannot edit or delete submitted content. NMCC may hide content for moderation while retaining the original and an audit record; contact us with privacy or correction requests. While the forum page is visible, other members can see your selected business as watching, active, or typing. Typing indicators share only your activity status, never the text of an unsent message. Leaving or hiding the page ends your presence; interrupted connections expire shortly afterward. Your sign-in email and personal account identifier are not displayed to forum members.
Private business messages.
Signed-in members can message businesses with approved claims on any directory tier. We store your chosen display name, account identifier, messages, conversation participants, timestamps, read status, and blocks. Your sign-in email is not automatically shared with the other participant. Conversations are available only to the sender and the approved business representative who received them. A change of representative does not transfer old inbox history; the sender may retain their copy. Messages are stored on NMCC’s hosted infrastructure and are not end-to-end encrypted. There are no message email notifications at this time. Reporting a message shares that message and your explanation with NMCC administrators for review, with an administrative audit record. Administrators do not have a general inbox browsing tool. Messages remain stored unless removed through a privacy request; contact NMCC for correction or deletion requests.
Related business connections.
Approved representatives can request a shared ownership connection between directory profiles. We store the requesting account, ownership explanation, source link, and review history. NMCC reviews links before publishing them on both profiles. Ownership evidence and review notes remain private. A connection does not transfer account permissions, share messages, combine subscriptions, or independently certify licensing.
Hosting and access.
The site runs on hosted infrastructure, which may process technical request information to serve and protect the site. We collect aggregate public-page views, directory clicks, business-link clicks, article source-link clicks, event-link clicks, job-application link clicks, and mobile or desktop screen categories to understand site usage. Analytics does not use tracking cookies, store full IP addresses, capture form contents, or record private account pages or URL query strings. Hashed IP values are used for request limiting. We honor browser Do Not Track and Global Privacy Control signals. No advertising trackers have been added. Private contact and verification fields are not displayed publicly. Approved community submissions and business profile fields are public as described above.
Questions or removal requests.
Use the unsubscribe link in your subscription confirmation email to leave the newsletter list. Email nmcannabiscommunity@gmail.com or use the contact form to request correction or deletion. Do not include sensitive medical or financial information.