HatDropHatDrop

Legal

Compliance

What the platform does, and — more importantly — what it does not.

HatDrop does not make you compliant

Be sceptical of any platform that says it does. Compliance is a property of how you operate, under the licence you hold, in the jurisdiction you operate in. Software can support that. It cannot guarantee it, and we are not going to pretend otherwise.

We do not provide legal advice. Nothing on this site or in the product is a substitute for your own counsel.

What the platform gives you

Age verification built into ordering. You choose whether it gates sign-in, checkout or both, and you set the minimum age for your store. If verification is unavailable, checkout stops the order rather than letting an unverified one through.

Delivery zones that decline out-of-area orders at checkout, so you are not committing a driver to a delivery you cannot make.

A full audit log: every staff action and every order status change, recorded with who did it and when.

Order records with customer, driver, timestamps, items and payment state retained and exportable.

Per-store legal and conduct copy on your customer-facing pages, written by you rather than derived from your business category.

What the platform does not do

It does not integrate with state track-and-trace systems such as METRC. If seed-to-sale reporting is a requirement of your licence, you will need that separately — raise it before you sign, not after.

It does not enforce purchase limits by product category or by customer over time.

It does not decide your minimum age, your delivery hours or your product restrictions. You configure those to match your obligations.

It does not file anything with a regulator on your behalf.

Age verification, specifically

Verification is included with your plan and set up for your store, and provision for your store. Results are tied to your business and never shared with another business on the platform.

A verification is valid for a configurable period, and re-checks on each new session. The check that counts is applied at order creation — not a redirect in the browser, which a determined user could skip.

Payments and money

Card payments settle into your own bank account, under your own payment account. We help you get set up and do the boarding, but funds never route through us.

That is deliberate. Routing your revenue through a platform account would be money transmission, which requires licensing a software company does not hold and most processors prohibit outright.

Your data

Each business works in its own workspace, kept separate rather than by a filter in the application. Your orders, customers, drivers and pricing are not reachable by another business on the platform.

Platform staff access to your data requires an explicit, time-limited, reason-recorded support session, and you can see every one of them in your own audit log. There is no silent access.

Questions about any of this? Ask us.

Compliance — HatDrop