Privacy Policy

Dream Steam Privacy Policy & HIPAA Notice of Privacy Practices

PRIVACY POLICY

This Privacy Policy describes the practices of Dream Steam, LLC (“Dream Steam”, “we” or “us”) in connection with information collected through its THC pen website and mobile applications operated by us and from which you are accessing this Privacy Policy (collectively, the “Services”). By using the Services, you agree to the terms of this Privacy Policy. If you have any questions or concerns about this Privacy Policy, or about the way your information is collected and used, please contact us at https://dreamsteamvape.com/ or contact@dreamsteamvape.com. To the extent that information collected through the Services is patient information provided to Dream Steam subject to HIPAA, such information is governed by the Dream Steam HIPAA Notice of Privacy Practices.

We may change this Privacy Policy. The “Last Updated” legend at the top of this page indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Services. Your use of the Services following these changes means that you accept the revised Privacy Policy.

Who May Use the Services

The Services are not directed to users under the applicable legal age in his or her respective state. We do not knowingly collect personal information online from any person we know to be under the legal age, and we instruct users under the legal age not to send any information to or through the Services.

The Services are designed for users from, and are controlled and operated by us from, the United States. By using the Services, you consent to the transfer of your information to the United States, which may have different data protection rules than those of your country.

The Personal Information We Collect

We want you to understand how personal information you provide to us is collected and used. We collect and store your personal information when you provide it to us or to our service providers, such as in the following situations:

Registration: We collect your personal information when you register on the Services.

Transactions: We collect personal information from you when you enter into a transaction with us.

Storage: When you create an online account, we will store information as a convenience to you for future purchases, and we will store information about your orders.

Contact Information: We collect personal information from users of the Services who are interested in receiving information about our products or services, e-mail alerts, newsletters, and other notifications.

Surveys: From time to time, we may request information from you via surveys. Participation in these surveys is voluntary. We request that you not provide personal health information in your survey responses. You may contact us regarding any survey as set forth under “Contact Information,” below.

We may combine the information collected from you through the Services with information we receive from and about you from other online and offline sources, such as in dispensaries that sell Dream Steam products, and use the combined information in accordance with this Privacy Policy.

Use and Disclosure of Personal Information

We use your personal information to respond to your requests, fulfill your product rewards, send you email alerts, send you newsletters, send you push notifications in our apps, and provide you with related customer service. We may also use your information to send communications and administrative information to you, as permitted by law and our client agreements, including through the use of push notifications in our apps.

We may use personal information to personalize your experience on the Services, including by presenting products and content tailored to you, and for our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing our Services and new products and services, determining the effectiveness of our promotional campaigns, and operating and expanding our business activities.

We may use and disclose your personal information to facilitate social sharing functionality that you initiate. If you choose to connect your social media account with your Services account or otherwise engage in social sharing on the Services, your personal information may be shared with your friends, contacts, or others associated with your social media account, with other Services users, and with your social media account provider. By connecting your Services account and your social media account, you authorize us to share information with your social media account provider, and you understand that the use of the information we share will be governed by the social media site’s privacy policy.

In the event that Dream Steam or some or all of our business, assets, or stock are sold or transferred or used as security, or to the extent we engage in business negotiations with third parties, personal information may be transferred to or shared with third parties as part of any such transaction or negotiation.

To the extent permitted by applicable law, we may provide personal information to our affiliated businesses or to our business partners.

We may disclose personal information to our service providers, who provide services such as website hosting, data analysis, payment processing, order fulfilment, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services.

If we are requested by law enforcement officials or judicial authorities to provide personal information, we may do so. In matters involving claims of personal or public safety or in litigation where the information is pertinent (including to allow us to pursue available remedies or limit the damages that we may sustain), we may use or disclose personal information, including without court process. We may also use or disclose personal information to enforce our terms and conditions, to protect our operations or those of any of our affiliates, or to protect our rights, privacy, safety, or property and/or that of our affiliates, you, or others.

We may use and disclose personal information to investigate security breaches or to cooperate with authorities.

We may use and disclose information that does not personally identify you (including the information described under “Cookies and Other Technologies,” below) for any purpose, except to the extent limited by applicable law. If we are required to treat such information as personal information under applicable law, then we may use it for all the purposes for which we use and disclose personal information.

We may combine information that does not personally identify you with personal information. If we do, we will treat the combined information as personal information as long as it is combined.

Links

The Services may contain links to, or otherwise make available, third-party websites, services, or other resources not operated by us or on our behalf (“Third Party Services”). These links are provided as a convenience only and do not constitute an affiliation with, endorsement, or sponsorship of the Third Party Services. Any information you provide to such third parties is not subject to the terms of this Privacy Policy, and we are not responsible for the privacy or security of the information you provide to them or their handling of your information. We recommend that you review the privacy policy of any third party to whom you provide personal information online.

In addition, we are not responsible for the information collection, use, disclosure, or security policies and practices of other organizations, such as Apple, Google, Microsoft, RIM, or any other app developer, app provider, operating system provider, wireless service provider, or device manufacturer.

Security

We seek to use reasonable physical, technical, and administrative safeguards to protect personal information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account with us has been compromised), please immediately contact us in accordance with the “Contact Information” section below.

You are responsible for maintaining the confidentiality of your Services access information and password and for restricting access to your device, and you agree to accept responsibility for all activities that occur under your password.

Cookies and Other Technologies

Like many other websites and online services, we may collect information about Services traffic and usage patterns through the use of cookies, Web server logs, and other, similar technologies. We use this information for various purposes, such as to ensure that the Services function properly, to facilitate navigation, to personalize your experience, to understand use of the Services, to diagnose problems, to measure the success of our marketing campaigns, and to otherwise administer the Services.

Cookies are small computer files we transfer to your computer’s hard drive. These small text files help us personalize content on our pages and provide programs like e-coupons. Your browser software can be set to reject or accept cookies. Instructions for resetting the browser are available in the Help section of most browsers.

Our use of cookies also allows us to collect and retain certain information about a website user, such as the type of Web browser used. Reviewing our Web server logs and our customers’ use of our site helps us to, among other purposes, statistically monitor how many people are using our site and for what purpose.

Your IP address is a number that is automatically assigned to the computer that you are using by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications, and other services. We use IP addresses for purposes such as calculating usage levels of the Services, helping diagnose server problems, and administering the Services.

We may use Adobe Flash Local Stored Objects (“LSOs”) and other technologies to, among other things, collect and store information about your use of the Services. If you do not want Flash LSOs stored on your computer, you can adjust the settings of your Flash player to block Flash LSO storage using the tools contained in the Website Storage Settings Panel. You can also control Flash LSOs by going to the Global Storage Settings Panel and following the instructions (which may include instructions that explain, for example, how to delete existing Flash LSOs (referred to as “information” on the Macromedia site), how to prevent Flash LSOs from being placed on your computer without your being asked, and (for Flash Player 8 and later) how to block Flash LSOs that are not being delivered by the operator of the page you are on at the time). Please note that setting the Flash Player to restrict or limit acceptance of Flash LSOs may reduce or impede the functionality of some Flash applications.

Tracking

We may use analytics providers that use cookies, pixel tags, and other, similar technologies to collect information about your use of the Services and your use of other websites or online services.

We may also use third parties to display goods and services that may be of interest to you when you access and use the Services or other online services, based on information relating to your access to and use of the Services and other online services. To do so, these companies may place or recognize a unique cookie on your browser (including through the use of pixel tags).

Physical Location

We and our service providers may collect the physical location of your device by, for example, using satellite, cell phone tower, WiFi signals, beacons, Bluetooth, and near field communication protocols, when you are in or near a Dream Steam dispensary. We may use your device’s physical location to provide you with personalized location-based services and content. We may also use such information to understand traffic patterns in, near, and across our store locations. We may share aggregated statistics derived from the location and other information we collect with advertisers and other third parties. You may be permitted to allow or deny collection of your device’s location, such as through the settings on your mobile device and/or, to avoid the collection of location by beacons, by disabling Bluetooth. If you choose to deny such collection, we and our service providers may not be able to provide you with certain personalized services and content.

Fraudulent Sites, Spam & Phishing

Please be aware that there may be fraudulent websites that illegally use Dream Steam logos and other aspects of the Dream Steam brand. Dream Steam is in no way associated with any fraudulent websites. These sites may circulate their presence on the internet via spam email or through fraudulent phishing practices.

These sites have not been authorized by Dream Steam to use our name, and we work aggressively to identify their source and have them shut down. If you are in receipt of this type of spam email, to help protect your privacy you should avoid replying to it or forwarding it to other people.

If you are concerned that a website or an email may be fraudulent, please contact us at contact@dreamsteamvape.com with your concerns.

Your Choices and Access

You can manage your communications preferences in your Account Settings in the app. You may control the receipt of push notifications from a Dream Steam app through your mobile device settings.

You can request the removal or modification of the personal information you have provided to us by sending an email to contact@dreamsteamvape.com. For your protection, we may only implement requests with respect to the personal information associated with the particular email address that you use to send us your request, and we may need to verify your identity and obtain information on the context in which you provided your personal information before implementing your request. We will try to accommodate your request as soon as reasonably practicable.

Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting such change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.

Your Responsibility

By establishing an account with us, you agree that it is your responsibility to:

  • Authorize, monitor, and control access to and use of your account, User ID, and password.
  • Promptly inform us of any need to deactivate a password or an account by emailing contact@dreamsteamvape.com.

Contact Information

If you have any questions or concerns about this Privacy Policy, please email us at contact@dreamsteamvape.com or contact us through https://dreamsteamvape.com/

You may also contact Dream Steam Customer Service at the following address:

Dream Steam
627 S. 48th Street, Suite 100

Tempe, AZ 85281

 

 

HIPAA NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices (the “Notice”) describes the privacy practices of Dream Steam, LLC (“Dream Steam”) as may be required under The Health Insurance Portability and Accountability Act (“HIPAA”). Dream Steam is a vaporizer pen company with contractual relationships with licensed medical marijuana cultivators/producers in applicable states across the United States. Dream Steam does not provide medical services or sell any medications. To the extent that HIPAA may apply to Dream Steam, we hereby provide this Notice.

Dream Steam wants you to know that to the extent Dream Steam may receive and possess your health information, maintaining the privacy of your health information (“Protected Health Information” or “PHI”) is vital to us. PHI is information about you, including basic information that may identify you and relates to your past, present or future health or condition and dispensing of health products to you. We take this responsibility very seriously.

Our Pledge Regarding Your Health Information

We are required by law to protect the privacy of your PHI and to provide you with this Notice covering our legal duties and privacy practices regarding your PHI. We are also required to notify you in the event there is a breach of your PHI. Our employees are required to protect the confidentiality of your PHI and will disclose your PHI to a person other than you or your personal representative only when permitted under federal or state law. This protection extends to any PHI that is oral, written, or electronically transmitted by facsimile, modem, or other electronic device. This Notice describes how we may use and disclose your PHI. In some circumstances, as described in this Notice, the law permits us to use and disclose your PHI without your express permission. In all other circumstances, we will obtain your written authorization before we use or disclose your PHI. This Notice also describes your rights and the obligations we have regarding the use and disclosure of your PHI. Under federal and applicable state law, we are required to follow the terms of the Notice currently in effect. In some situations, state privacy or other applicable laws may provide greater privacy protections than those stated in this Notice. For example, depending on the state in which you reside, there may be additional state law privacy protections. When appropriate, we will follow these state or other applicable laws.

How We May Use and Disclose Your PHI Without Your Permission For Payment or Health Care Operations

Below are examples of how federal law permits use or disclosure of your PHI for these purposes without your permission:

  1. Treatment: PHI obtained by Dream Steam may be used by a dispensary to dispense medicine to you.
  2. Health care operations: Your PHI may be used to monitor the effectiveness of our services. Your PHI may be transferred for purposes of carrying out our services if we buy or sell a licensed dispensary. We may also use your PHI to tell you about health savings available and other opportunities that may be of interest to you, such as health education programs, health-related benefits for preferred Dream Steam customers or research projects.

OTHER SPECIAL CIRCUMSTANCES: In addition to the above, we are permitted under federal and applicable state law to use or disclose your PHI without your permission only in certain circumstances, as described below.

Business associates: We provide some services through other entities, such as licensed dispensaries, termed “business associates.” The law requires us to enter into contracts with these entities to require them to safeguard your PHI and use and disclose it only as specified by Dream Steam. Individuals involved in your care or payment for care: We may disclose your PHI to a friend, personal representative or family member involved in your medical care or payment for your care. For example, if we can reasonably infer that you agree, we may provide information to your caregiver on your behalf. Disclosures to parents or legal guardians: If you are a minor, we may release your PHI to your parents or legal guardians when we are permitted or required under federal and applicable state law.

Workers’ compensation: We may disclose your PHI to the extent authorized and necessary to comply with laws relating to workers’ compensation or similar programs established by law.

Law enforcement: We may disclose your PHI for law enforcement purposes as required by law or in response to a court order and in certain conditions, a subpoena, warrant, summons or similar process; to identify or locate a suspect, fugitive, material witness or missing person; about a death resulting from criminal conduct; about crimes on the premises or against a member of our workforce; and in emergency circumstances, to report a crime, the location, victims, or the identity, description, or location of the perpetrator of a crime.

As required by law: We must disclose your PHI when required to do so by applicable federal or state law.

Judicial and administrative proceedings: We may disclose your PHI in response to a court or administrative order, and under certain conditions, a subpoena, discovery request or other lawful process.

Public health: We may disclose your PHI to federal, state or local authorities, or other entities charged with preventing or controlling disease, injury or disability for public health activities. These activities may include the following: disclosures to report reactions to medications or other products to the U.S. Food and Drug Administration or other authorized entity; disclosures to notify individuals of recalls, exposure to a disease or risk for contracting or spreading a disease or condition.

Health oversight activities: We may disclose your PHI to an oversight agency for health oversight activities authorized by law. These activities include audits, investigations, inspections, licensing and for government monitoring of the health care system, government programs, and compliance with federal and applicable state law.

United States Department of Health and Human Services: Under federal law, we may be required to disclose your PHI to the U.S. Department of Health and Human Services to determine if we are in compliance with federal laws and regulations regarding the privacy of health information.

Research: Under certain circumstances, we may use or disclose your PHI for research purposes. However, we will only do so if the research project has been approved by an institutional review board or privacy board that has established protocols to ensure the privacy of your PHI.

Coroners, medical examiners and funeral directors: We may release your PHI to assist in identifying a deceased person or determine a cause of death.

Administrator or executor: Upon your death, we may disclose your PHI to an administrator, executor or other similarly authorized individual under applicable state law.

Organ or tissue procurement organizations: Consistent with applicable law, we may disclose your PHI to organ procurement organizations or other entities engaged in the procurement, banking or transplantation of organs for the purpose of tissue donation and transplant.

Notification: We may use or disclose your PHI to assist in a disaster relief effort so that your family, personal representative or friends may be notified about your condition, status and location.

Correctional institution: If you are or become an inmate of a correctional institution, we may disclose to the institution or its agents PHI necessary for your health and the health and safety of others.

To avert a serious threat to health or safety: We may use and disclose your PHI to appropriate authorities when necessary to prevent a serious threat to your health and safety or the health and safety of another person or the public.

Military and veterans: If you are a member of the armed forces, we may release your PHI as required by military command authorities. We may also release PHI about foreign military personnel to the appropriate military authority.

National security and intelligence activities: We may release your PHI to authorized federal officials for intelligence, counterintelligence and other national security activities as required by law.

Protective services for the President and others: We may disclose your PHI to authorized federal officials so that they may provide protection to the President, other authorized persons, or foreign heads of state, or conduct special investigations as required by law.

How We May Use or Disclose Your PHI for Other Purposes Only With Your Authorization.

Your written authorization to use and disclose your PHI is required in order for us to:

  • Send marketing communications to you. If we will receive payment for making a marketing communication, we will state this in the authorization.
  • Receive payment in exchange for your PHI.

In addition to the above situations, any other uses and disclosures of your PHI not described elsewhere in this Notice will be made only with your prior written authorization. You may revoke this authorization at any time by submitting a written notice to our Customer Care address listed below. Your revocation will not apply to information released before we receive it.

You have the following rights with respect to your PHI:

  • Obtain a paper copy of the Notice upon request. To obtain a copy at any time, contact us at https://dreamsteamvape.com/ or contact@dreamsteamvape.com
  • Inspect and obtain a copy of your PHI. You have the right to access and copy your PHI contained in a “designated record set.” You may request an electronic copy of your PHI records that we maintain electronically. To inspect or obtain a copy of your PHI, submit a written request to the Dream Steam Customer Service. You may also ask us to provide a copy of your PHI to another person. In that case, your written request must be signed by you, must clearly identify the person to whom you want us to send the copy of your PHI, and must state where the copy is to be sent. We will respond to your request in writing within 30 days. A fee may be charged for the expense of fulfilling your request. We may deny your request in certain limited circumstances, such as if we have reasonably determined that providing access to PHI would endanger your life or safety or cause substantial harm to you or another person. If we deny your request, we will notify you in writing and provide you with the opportunity to request a review of the denial.
  • Request an amendment of PHI. If you feel that your PHI maintained by us in a “designated record set” is incomplete or incorrect, you may request that we amend it. To request an amendment, submit a written request to Dream Steam Customer Service. Requests must identify: (i) which information you seek to amend, (ii) what corrections you would like to make, and (iii) why the information needs to be amended. We will respond to your request in writing within 60 days (with a possible 30-day extension). In our response, we will either: (i) agree to make the amendment, or (ii) inform you of our denial, explain our reason and outline appeal procedures. If denied, you have the right to file a statement of disagreement with the decision. We will provide a rebuttal to your statement and maintain appropriate records of your disagreement and our rebuttal.
  • Receive an accounting of disclosures of PHI. You have the right to request an accounting of disclosures of your PHI for purposes other than treatment, payment or health care operations. This accounting will also exclude disclosures: made directly to you, made with your authorization, made to your caregivers, and certain other disclosures. To obtain an accounting, submit a written request to Dream Steam Customer Service. Requests must specify the time period, not to exceed six years. We will respond in writing within 60 days of receipt of your request (with a possible 30-day extension). We will provide one free accounting per 12-month period, but you may be charged for the cost of any subsequent accountings during the same period. We will notify you in advance of the cost involved, and you may choose to withdraw or modify your request at that time.
  • Request communications of PHI by alternative means or at alternative locations. You have the right to request that we communicate with you in a certain way or at a certain location. For example, you may request that we contact you only in writing at a specific address. To request confidential communication of your PHI, submit a written request to Dream Steam Customer Service. Your request must state how, where or when you would like to be contacted. We will accommodate all reasonable requests.
  • Request a restriction on certain uses and disclosures of PHI. You have the right to request a restriction or limitation on our use or disclosure of your PHI. You must identify in this request: (i) what particular information you would like to limit, (ii) whether you want to limit use, disclosure, or both, and (iii) to whom you want the limits to apply. If we do agree to a restriction, we will not apply the restriction in the event of an emergency. Except for plan restrictions, we have the right to terminate the restriction if: (i) you agree orally or in writing to terminate the restriction, or (ii) if we inform you of the termination, which becomes effective only for your PHI created or received after we inform you of the termination.

For all other restriction requests, contact Dream Steam Customer Service at:

contact@dreamsteamvape.com or

Dream Steam
627 S. 48th Street, Suite 100

Tempe, AZ 85281

All requests must include your full name and email address or phone number.

Complaints: If you believe your privacy rights have been violated, you can file a complaint with Dream Steam Customer Service or with the Secretary of the United States Department of Health and Human Services. All complaints must be submitted in writing. You will not be penalized in any way for filing a complaint.

Changes to this Notice: We reserve the right to change our privacy practices. We reserve the right to make the revised Notice effective for PHI we already have about you as well as any information we receive in the future, as of the effective date of the revised Notice. Upon request to Dream Steam Customer Service, we will provide a revised Notice to you. We will also post the revised Notice on our website.