Skip to main content
Vol. 27 / PrivacyPrivacy PracticesDocument of recordUpdated · 2026-05

How Terp Bros Handles Privacy: Your Data at a Legal Dispensary

Privacy at Terp Bros NYC is governed by New York OCM rules plus standard retail data protections. The only customer data collected is what is required for the legal transaction: 21+ ID verification at the door, BioTrack product logging, and any account information you choose to create on the online [menu](/menu). We do not sell customer data, we do not share purchase histories with third parties beyond what OCM requires, and we do not market to anyone under 21.

Data
Minimal
We collect only what an order needs
Sharing
Never sold
No customer data sold to third parties
Storage
Encrypted
Order + ID data encrypted at rest
Opt-out
Any time
Email or call either shop to delete

What Is the Quick Answer?

Privacy at Terp Bros NYC is governed by New York OCM rules plus standard retail data protections. The only customer data collected is what is required for the legal transaction: 21+ ID verification at the door, BioTrack product logging, and any account information you choose to create on the online menu. We do not sell customer data, we do not share purchase histories with third parties beyond what OCM requires, and we do not market to anyone under 21.

Both the Astoria and Ozone Park shops operate under license OCM-CAURD-23-000020 (Astoria) / OCM-CAURD-25-000294 (Ozone Park). Both apply the same privacy posture: minimum data collection, maximum purpose specificity, and compliance with every OCM and CAURD data-handling rule.

What Is the Longer Story?

The privacy framework at Terp Bros starts with New York's OCM requirements, layered under general data-protection principles. At the Astoria flagship (36-10 Ditmars Blvd) and the Ozone Park shop (135-26 Cross Bay Blvd), staff checks 21+ ID at the door, but we do not photocopy, scan, or store the ID image. We log the basic transaction in BioTrack (state-mandated seed-to-sale tracking) and issue a receipt showing the license number.

Online ordering through the menu creates an account with the email address, phone number, and delivery address you provide. That data is used to process the order, verify the delivery, and support a reasonable order history. It is not sold. It is not handed to advertisers. It is not used for third-party marketing.

For anyone who wants to shop without creating an account, in-store cash or debit purchases leave the smallest data footprint. No account is needed to walk in and buy. The only data captured is the transaction record BioTrack requires. Your receipt shows the license number and the purchase itemization; your name is not on it unless you use a loyalty program.

What Is Our Detailed Answer?

The detailed Terp Bros privacy policy covers five areas: what we collect (ID verification at the door, BioTrack transaction logs, online account data if you create one), why we collect it (legal compliance under OCM-CAURD-23-000020 (Astoria) / OCM-CAURD-25-000294 (Ozone Park) and basic order fulfillment), how we store it (encrypted systems, limited staff access, retained only as long as required), who we share it with (OCM, tax authorities, and no one else commercially), and your rights (ask us what we have, ask us to delete it, opt out of marketing).

We follow the minimum-necessary principle. If a piece of data is not required for the legal transaction or the order fulfillment, we do not collect it. Every batch on our shelves is lab-tested under NY OCM standards, and that compliance discipline carries into how we handle customer information as well.

For delivery specifically, the driver needs the address and the account-holder name to complete the ID check at the door. That information stays in the dispatch system and the BioTrack record. It does not move anywhere else.

What You Can Expect

Customers can expect a privacy-respectful experience at Terp Bros: ID checked at the door without being photographed or stored, receipts printed without your name unless you use loyalty, online account data used only for your orders, no third-party marketing built on your purchase history, and delivery information held only as long as the order requires.

A clean, welcoming retail space. Budtenders who ask what you actually want from the product. Prices posted openly on our menu. Receipts with license numbers. Delivery when you can't make it in.

What Are the Store Details?

Terp Bros NYC runs two Queens locations with identical privacy posture. Astoria at 36-10 Ditmars Blvd, Astoria, NY 11105, phone (929) 614-3591. Ozone Park at 135-26 Cross Bay Blvd, Ozone Park, NY 11417, phone (718) 308-3600. Hours Monday through Sunday, 10am to 10pm. 21+ with valid ID required. License OCM-CAURD-23-000020 (Astoria) / OCM-CAURD-25-000294 (Ozone Park) covers both.

Astoria: 36-10 Ditmars Blvd, Astoria, NY 11105, (929) 614-3591, Monday-Sunday, 10am to 10pm (age 21+, valid ID required) Ozone Park: 135-26 Cross Bay Blvd, Ozone Park, NY 11417, (718) 308-3600, Monday-Sunday, 10am to 10pm (age 21+, valid ID required) License: NY OCM License OCM-CAURD-23-000020 (Astoria) / OCM-CAURD-25-000294 (Ozone Park)

Queens shoppers frequently ask whether the dispensary records their name when they walk in (no, unless you opt into loyalty), whether cameras capture the sales floor (yes, for security and OCM audit requirements), how long transaction logs are kept (per OCM retention rules), and whether they can order without creating an account (yes, in-store walk-ins require no account).

Are you open on holidays? Yes, with adjusted hours. Check the homepage for current schedule.

Do you take cash only? We accept cash and debit. ATMs on site.

Can I call ahead? Yes, call either location for stock checks or product questions.

Do you deliver? Yes, Queens-wide from both shops.

Do you scan my ID into a database? No. The ID is checked visually and not stored.

Is my purchase history private? Yes. It is retained per OCM requirements and not shared commercially.

Can I delete my online account? Yes. Contact the store and we will process the deletion within the timeframe required by law.

Are there cameras in the shop? Yes. Security cameras are required by OCM. Footage is retained per OCM rules.

What First-Time Queens Shoppers Should Know About Privacy

First-time Queens shoppers should know that walking into either Terp Bros location as a cash-and-debit customer leaves the smallest privacy footprint. The ID check at the door is visual only; nothing is scanned or stored. The transaction is logged in BioTrack (a state-mandated inventory system) but the customer name is not attached to that log unless you opt into loyalty. The receipt prints the license number and itemization, not your name.

For online orders through the menu, an account is required because the delivery driver needs verifiable match information for the ID check at your door. That account holds the email, phone, delivery address, and order history you create. It is used to process orders and support reasonable customer service. It is not rented, sold, or handed off to advertisers.

If privacy is a high priority, two practices help. First, shop in person with cash or debit and skip the account. Second, if you do create an account for delivery, review the account settings after the first order and turn off any marketing opt-ins you do not want. Our default is not to push email or SMS, but the option is there.

How Privacy Compares Across Queens Neighborhoods

Privacy posture at Terp Bros does not change between Astoria and Ozone Park, because the rules are set by NY OCM at the license level rather than by shop. What changes is the customer comfort level. Astoria, LIC, and Sunnyside shoppers tend to ask the most detailed privacy questions, often about data storage and loyalty programs. Ozone Park, Howard Beach, and Richmond Hill shoppers often skew toward in-store cash purchases and ask fewer account-related questions.

Jackson Heights, Elmhurst, and Corona customers sometimes ask about immigration-status implications of creating a dispensary account. The answer is that cannabis remains federally illegal, we comply with New York law only, and we do not share account data with federal agencies or ICE absent a valid court order directed at our business. The safest posture for anyone concerned is in-store cash shopping, which leaves no named account.

Rockaway, Far Rockaway, and Broad Channel customers who rely on delivery do need to create an account for the door-handoff ID match. That account is kept local to our order systems, not handed to brokers or data aggregators.

What Budtenders Hear Most About Privacy

Budtenders hear "do you keep my name," "is this on my record," "can my employer find out," "are you watching cameras," and "will my insurance see this" on repeat. The short answers: your name is not attached to an in-store cash purchase, no this does not create a criminal record since the purchase is legal, no your employer cannot see our transaction logs, yes there are security cameras per OCM rule, and no, no insurance company has any line of sight into dispensary purchases.

"Is this on my record" is the most common. Buying legal cannabis at a licensed dispensary does not create a record in the way arrests or convictions do. You are a retail customer buying a legal product. The transaction is logged in BioTrack for state inventory tracking, not in any criminal database.

"Can my employer find out" comes up for customers in fields with drug testing. We tell them directly: our transaction records are not accessible to employers, and we do not share them with employers, but cannabis use can still show up on a drug test for up to 30 days depending on product and usage pattern. That is a separate issue from dispensary privacy. Some customers report that edibles and vapes with lower THC content may show clearer than heavy flower use, but we do not make any guarantees. The safest advice for job-risk situations is to check the test policy and consult accordingly.

What Data Gets Collected and Where Does It Live?

For in-store cash purchases, no personal data is retained beyond the ID age-check at the door. For account-based orders through the online menu or delivery, we collect name, date of birth, government-issued ID reference, delivery address (for delivery orders), phone number, and email. Payment data for debit or ACH transactions passes through Dutchie Pay and is not stored in the Terp Bros system. BioTrack logs the product batch and sale for state compliance but does not retain identifiable customer data beyond what NY OCM rules require.

Loyalty program data includes lifetime spend, tier status, and purchase category history for Terp Perks members who opt in. That data lives on our loyalty platform and is used only to calculate tier benefits and send member-only offers. Members can request deletion of their loyalty account at any time by emailing the store or asking at the counter. For opt-outs on marketing communications, unsubscribe links sit in every email, and staff can remove a number from SMS lists on request. None of this data is sold to third-party brokers or advertising networks.

How Does Age Gate Persistence Work on the Website?

The Terp Bros website shows an age gate the first time a visitor arrives, confirming age 21 or older with valid government-issued ID required. The confirmation is stored as a local cookie or browser storage flag that expires after a set period (typically 30 days) and resets after browser-data clearing, incognito sessions, or device changes. The gate is session-scoped rather than account-linked for visitors who have not created an account.

For shoppers who prefer a lighter digital footprint, browsing in incognito or private mode prompts the age gate on every visit but stores nothing on the device between sessions. The Dutchie ordering platform that powers our online menu layers its own privacy controls on top of ours, and their published privacy statement is available through the menu footer. For delivery orders, the driver performs a second ID check at the door regardless of what the website confirmed, because NY OCM rules require in-person verification at handoff. That double-check is a privacy feature as much as a compliance one: the ID stays in the shopper's hand the entire time.

Other documents

More on the record.