In Ohio, Your Website Is Regulated Advertising
Ohio requires advertising to be submitted to the state and approved before use, and since March 20, 2026 that applies to adult-use and not only to medical. The Division of Cannabis Control also defines a licensee's web presence to include the business website, social media accounts and online menus. Your storefront is inside the regulated perimeter.
Book a DemoORC 3796.32(G)
What pre-approval covers, and the 21-business-day clock
SB 56 wrote the requirement into statute effective March 20, 2026. ORC 3796.32(G): "(1) No person shall advertise medical or adult-use marijuana using names, logos, signs, or materials that have not been submitted to, and approved by, the division... (2) The division shall either approve or deny such names, logos, signs, or materials within twenty-one business days... (3) If the division does not deny a submission within twenty-one business days, the submitted names, logos, signs, or materials shall be considered approved." The Division confirms the process is live and runs through the DCC eLicense portal.
Note what the clock does. Silence approves. Twenty-one business days after a complete submission with no denial, the material is considered approved. That makes submission timing a planning input for any campaign or rebrand rather than an afterthought.
Now the honest scope caveat, because this is where guidance floating around the industry overreaches. The statute names "names, logos, signs, or materials." The old medical rule explicitly required website content to be pre-submitted; the current advertising rule, OAC 1301:18-4-22 effective January 15, 2026, dropped that explicit sentence, and DCC has begun but not confirmably finished rulemaking to conform the rule to SB 56. So the supportable statement is the narrow one: names, logos, signs and advertising materials must be pre-approved by the Division within 21 business days. The cadence for website submissions specifically is governed by the statute and by DCC portal practice rather than by an explicit clause in the rule. Ask your counsel and ask DCC. Do not let a vendor tell you it is settled either way.
Which rules are current
OAC 1301:18-4-22, effective January 15, 2026, governs both medical and adult-use advertising and replaced OAC 3796:5-7-01 and 3796:6-3-24. SB 56 consolidated the statutory framework into ORC Chapter 3796 effective March 20, 2026. The Division of Cannabis Control, inside the Ohio Department of Commerce, regulates both programs; the State Board of Pharmacy no longer holds the medical role. The superseded Board of Pharmacy rules still display on codes.ohio.gov, which catches people out.
The centerpiece
Three things most dispensary sites get wrong in Ohio
These are not edge cases. They are the three we see on live Ohio sites most often, and each one is visible from the homepage without logging in.
The age gate is split, not 21+
A visitor must affirm 18 or older if a medical patient, and 21 or older if not, before gaining access to the website. A single 21+ door is the wrong control in Ohio and it shuts out 18-to-20-year-old patients.
"Shop by Effect" is a health claim
Health-related statements are prohibited, and DCC guidance says that reaches menus and websites. An effect-based taxonomy is therefore not a styling choice in Ohio.
The DCC seal is missing
The seal must be prominently and conspicuously displayed on the licensee's website, exactly as provided, with colors and design unaltered. Multistate operators must show it on the page Ohio customers are directed to.
The build spec
The Ohio website checklist
Ohio is unusual in how much of its rulebook lands on the page itself rather than on a media buy. Run this list against your current site.
What Ohio does allow online
Online ordering is explicit. OAC 1301:18-8-02(I)(2): "A dispensary may accept orders and payment for cannabis and cannabis paraphernalia via the internet," provided an employee checks government ID matching the order before transferring possession. Curbside and drive-up are legal by petition to the Division, with a secured video-surveilled area, an assigned badged employee and an ID check at handoff. Delivery is medical only; adult-use delivery is not authorized. The discount tiers and loyalty mechanics are configured in personalization and loyalty, but the filing with DCC comes first.
Split 18+/21+ age affirmation
18 or older for medical patients, 21 or older otherwise, before access to the website.
DCC seal, unaltered
Prominent and conspicuous, exactly as provided, colors and design unchanged.
Universal THC symbol
Wherever the site depicts a container, package or label, shown accurately and in its precise on-package position. That reaches menu tiles showing packaging photography.
Return policy on the website
OAC 1301:18-8-12(A)(3) requires it conspicuously posted on the dispensary's business website, and either on each receipt or at each point of sale. The website leg is mandatory, not an either/or.
Registered product names only
No slang and no departures from the registered product name, under OAC 1301:18-4-22(A)(7).
Typography is a compliance surface
DCC's own example: calling an edible "oven baked" is fine, but enlarging or restyling "baked" changes the meaning and would not be permissible because it emphasizes intoxication.
No sharing path to minors
No medium for users to transmit site content to minors, which constrains share, refer-a-friend and SMS features.
Discount and loyalty filings
A written discount policy and any loyalty program's operating procedures must be filed with DCC as a Change of Operations. Cannabis may never be free or discounted as a loyalty incentive, and discounts follow a three-tier hierarchy: indigent and veteran patients at least equal to all patients and caregivers, which are at least equal to non-medical consumers.
The most common violation
Why "Shop by Effect" does not work in Ohio, and what to do instead
Effect-based browsing is the default merchandising pattern in cannabis retail, and in Ohio it is affirmatively out of bounds. Health-related statements are prohibited anywhere, and DCC guidance is explicit that this covers menus and websites. The Division's own banned list includes Sleep, Sleepy, Relaxing, Sedating, Stimulating, Boost, Energy, Energized, Uplifted, Calming, Pain relief, Anti-stress, Anti-anxiety, Anti-inflammatory and Decreases appetite, along with references to specific onset times or effect durations.
Read that list against a typical menu and the scope becomes clear. A "Sleep" collection is out. An "Energy" filter is out. A product field storing onset time is out. Landing pages built around effect keywords are out. This is one of the few places where an SEO tactic that works everywhere else is simply unavailable, and no amount of rewording gets you there — we are not going to suggest a workaround for a rule the Division wrote deliberately.
What remains is substantial. Category, form factor and potency. Strain and lineage. Brand. Registered product names. Price tier, format, and terpene or cannabinoid data presented as product facts rather than as outcomes. Per-store availability. Those are the axes an Ohio menu can be built on, and they are also the ones that map cleanly onto how people search. Structure them as real pages and the search visibility you lose from effect terms comes back through brand, strain and location terms instead.
The practical requirement is control. Taxonomy, filters, field names and banned-term handling need to live in the platform, so a DCC clarification is an edit in the page builder rather than a rebuild of your navigation.
Third-party exposure
Your vendors are your liability
Paragraph G of the advertising rule puts responsibility on the licensee: you may not authorize an agency, a menu vendor or an SEO firm to advertise in a prohibited manner. Hiring the work out does not move the exposure.
Two site-level consequences follow. Linking to a non-compliant website is prohibited, which makes outbound links and brand partner links a surface you have to review rather than a convenience. And a third-party menu embed puts content you do not control on a page you are accountable for — if the vendor renders an effect filter, an unapproved logo, or packaging without the THC symbol, that is on your license.
The structural answer is to own the pages. When your catalog, taxonomy and templates render from your own platform on your own domain, the compliance surface is something you can inspect and change. Our compliance page covers what ships in the box, and cannabis ecommerce software covers what to ask a vendor before you sign.
New since January 15, 2026
Reviews are allowed now, with a moderation duty attached
The rule effective January 15, 2026 permits customer reviews, which is a genuine change. It comes with a catch that is easy to miss: customer testimonials about the effects of specific products are not permitted, because those are impermissible health claims.
That turns review moderation into a compliance function rather than a reputation one. A shopper writing "this helped me sleep" is writing exactly what the Division's banned list covers, and it is now sitting on your product page. An Ohio operator collecting reviews needs a moderation step before publication, a documented standard for what gets held, and the ability to remove content quickly.
Reviews are worth collecting anyway. Just budget for the review of the reviews.
Competitive picture
A market still filling in
Adult-use sales began August 6, 2024. DCC data reported through July 11, 2026 puts 223 dispensaries operating under dual-use licenses. The statutory cap is 400 under ORC 3796.05(B)(1), and DCC expects roughly 305 once current licensing completes.
Siting is constrained on several axes at once. No person may own more than 8 dispensaries. SB 56 added a bar on new licenses within one mile of another dispensary. Roughly 137 local jurisdictions have active moratoriums.
For an operator already open, that combination is unusually favorable and unusually time-limited. Fewer stores are coming than the cap implies, the one-mile rule protects a radius you already sit inside, and moratorium towns push demand toward the nearest open jurisdiction. The stores that establish search presence for their trade area before the remaining licenses come online keep it. See Buddy for retailers for how the per-store pages work.
Ohio retailers on Buddy
More than 300 cannabis retail websites run on Buddy, rated 4.9 out of 5, with a typical storefront live in about 24 hours once the POS connection is in place. We are not publishing an Ohio-specific store count or client names until those numbers and permissions are confirmed.
More on how this works: Buddy for retailers, cannabis ecommerce software, compliance, cannabis SEO and the page builder.
FAQ
Ohio questions, answered.
Does Ohio really require state approval before advertising?
Yes. ORC 3796.32(G), effective March 20, 2026 via SB 56, prohibits advertising medical or adult-use marijuana using names, logos, signs or materials that have not been submitted to and approved by the Division of Cannabis Control. The Division must approve or deny within twenty-one business days, and a submission not denied in that window is considered approved. Submissions run through the DCC eLicense portal.
Does every page or menu change need to be pre-cleared?
That is not a claim we will make for you. The statute covers names, logos, signs and materials, and requires approval within 21 business days. The former medical rule expressly required website content to be pre-submitted, but the current advertising rule, OAC 1301:18-4-22 effective January 15, 2026, dropped that explicit sentence, and DCC has begun rulemaking to conform the rule to SB 56 without a confirmable completion. Treat the cadence for routine website updates as governed by statute and DCC portal practice, and confirm it with your counsel and the Division.
What age gate does an Ohio dispensary website need?
A split one. The visitor must affirm being 18 or older if a medical patient, and 21 or older if not, before gaining access to the website. A single 21+ gate is the most common Ohio website error we see, and it also blocks 18-to-20-year-old medical patients from a site they are entitled to use.
Can an Ohio menu have a "Sleep" or "Energy" category?
No. Health-related statements are prohibited and DCC guidance applies that to menus and websites. The Division's banned list includes Sleep, Sleepy, Relaxing, Sedating, Stimulating, Boost, Energy, Energized, Uplifted, Calming, Pain relief, Anti-stress, Anti-anxiety, Anti-inflammatory and Decreases appetite, plus references to specific onset times or effect durations. Build the menu on category, form, potency, strain, brand, registered product name and per-store availability instead.
Can Ohio dispensaries sell online and deliver?
Online ordering yes, adult-use delivery no. OAC 1301:18-8-02(I)(2) permits a dispensary to accept orders and payment for cannabis and cannabis paraphernalia via the internet, provided an employee checks government ID matching the order before transferring possession. Curbside and drive-up are legal by petition to the Division, with a secured video-surveilled area, an assigned badged employee and an ID check at handoff. Delivery is medical only; adult-use delivery is not authorized.
Who is responsible if our menu vendor or agency breaks a rule?
The licensee. Paragraph G of the advertising rule bars a licensee from authorizing an agency, menu vendor or SEO firm to advertise in a prohibited manner, and linking to a non-compliant website is itself prohibited. Practically, an embedded third-party menu puts content you cannot edit on a page your license answers for, which is a strong argument for rendering your catalog and taxonomy from a platform you control on your own domain.
See an Ohio-compliant storefront, not a generic one.
Bring your POS and one store's menu. We will walk the split 18+/21+ affirmation, the DCC seal and THC symbol placement, a menu taxonomy built without effect terms, the posted return policy, and review moderation. This page is informational and is not legal advice; the Ohio Division of Cannabis Control (DCC), within the Department of Commerce, is the regulator, and your counsel should confirm anything you act on.
Book a Demo