PRIVACY POLICY

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Create an account on our website
• Place an order for cannabis products
• Subscribe to our newsletter or marketing communications
• Contact our customer service team
• Participate in surveys, contests, or promotions

This personal information may include:

• Full name
• Email address
• Phone number
• Billing and shipping address
• Date of birth (required for age verification)
• Government-issued identification (for age verification purposes)
• Payment information (processed securely through our payment processor)

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs
• Pages viewed and time spent on pages
• Device identifiers
• Geolocation data (with your consent)

1.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience on our website. These technologies help us understand how you use our site, remember your preferences, and improve our services. You can control cookie settings through your browser, but disabling cookies may limit certain functionalities of our website.

Types of cookies we use:

• Essential cookies: Required for basic site functionality
• Performance cookies: Help us understand how visitors interact with our site
• Functional cookies: Remember your preferences and settings
• Marketing cookies: Track your browsing to deliver relevant advertisements

2. How We Use Your Information

We use the information we collect for the following purposes:

• Process and fulfill your orders, including payment processing and delivery
• Verify your age and identity in compliance with cannabis regulations
• Communicate with you about your orders, account, and customer service inquiries
• Send you marketing communications and promotional offers (with your consent)
• Improve our website, products, and services
• Analyze usage patterns and trends to enhance user experience
• Prevent fraud and ensure the security of our platform
• Comply with legal obligations and regulatory requirements
• Conduct research and analysis to improve our business operations

3. Age Verification and Cannabis Regulations

As a licensed cannabis retailer, we are legally required to verify that all customers are of legal age to purchase cannabis products in their province or territory. We collect and verify government-issued identification to ensure compliance with the Cannabis Act and applicable provincial regulations.

Age verification information is securely stored and used solely for regulatory compliance purposes. We maintain strict controls to protect this sensitive information and limit access to authorized personnel only.

We may also be required to report certain information to regulatory authorities as mandated by federal or provincial cannabis legislation. This may include sales data, product information, and customer verification records.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information with the following categories of recipients:

4.1 Service Providers

We work with trusted third-party service providers who assist us in operating our business, including:

• Payment processors (e.g., Stripe, PayPal)
• Shipping and delivery companies
• Age verification services
• Email marketing platforms
• Web hosting and cloud storage providers
• Analytics and data processing services

These service providers are contractually obligated to protect your information and use it only for the specific purposes we authorize.

4.2 Legal and Regulatory Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Enforce our terms of service and other agreements
• Protect our rights, property, and safety, or that of our customers and the public
• Comply with cannabis regulatory reporting requirements

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to a successor organization. We will notify you of any such change and provide you with choices regarding your information.

5. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• SSL/TLS encryption for all data transmissions
• Secure payment processing through PCI-DSS compliant providers
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data privacy and security
• Encrypted storage of sensitive information

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security practices and respond promptly to any security incidents.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific retention periods:

• Account information: Retained while your account is active, plus 7 years after account closure for regulatory compliance
• Order history and transaction records: 7 years from the date of transaction
• Age verification records: Minimum of 2 years as required by cannabis regulations
• Marketing communications preferences: Until you unsubscribe or request deletion
• Website analytics data: Typically 26 months

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies and applicable legal requirements.

7. Your Privacy Rights

Under Canadian privacy legislation, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your data in a commonly used format.

7.2 Right to Correction

You can update or correct your personal information at any time by logging into your account or contacting our customer service team. We will promptly update inaccurate or incomplete information.

7.3 Right to Deletion

You may request deletion of your personal information, subject to certain exceptions. We may be required to retain certain information for legal, regulatory, or security purposes, particularly records related to cannabis sales and age verification.

7.4 Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. This includes opting out of marketing communications, which you can do by clicking the unsubscribe link in our emails or contacting us directly.

7.5 Right to Data Portability

You may request a copy of your personal information in a structured, commonly used, and machine-readable format to transfer to another service provider.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below. We will respond to your request within 30 days or as required by applicable law.

8. Third-Party Links and Services

Our website may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Embedded content from other websites (such as videos, images, or social media plugins) may collect data about you, use cookies, and monitor your interactions. These third parties may have their own privacy policies governing the collection and use of your information.

9. Children’s Privacy

Our services are intended for adults of legal age to purchase cannabis in their province or territory. We do not knowingly collect personal information from individuals under the legal age. If we become aware that we have collected information from a minor, we will take immediate steps to delete that information.

All users must verify their age before accessing our website or making a purchase. By using our services, you represent that you are of legal age to purchase cannabis products in your jurisdiction.

10. International Data Transfers

While we primarily operate within Canada, some of our service providers may store or process data in other countries. When we transfer personal information outside of Canada, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.

These safeguards may include contractual commitments, adequacy decisions, or other legally recognized transfer mechanisms. Your personal information will receive a level of protection that meets or exceeds Canadian standards.

11. Data Breach Procedures

In the event of a data breach that poses a real risk of significant harm to individuals, we will:

• Notify affected individuals as soon as feasible
• Report the breach to the Privacy Commissioner of Canada and relevant provincial authorities
• Provide information about the breach, including what happened and what steps we are taking
• Offer guidance on steps you can take to protect yourself
• Take immediate action to contain the breach and prevent further unauthorized access

We maintain incident response procedures and regularly test our breach notification protocols to ensure we can respond quickly and effectively to any security incidents.

12. Marketing Communications

With your consent, we may send you marketing communications about our products, promotions, and services. You can opt out of marketing emails at any time by:

• Clicking the unsubscribe link in any marketing email
• Updating your communication preferences in your account settings
• Contacting our customer service team

Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your orders, account, and customer service inquiries.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last Updated” date at the top of this policy
• Notify you via email or a prominent notice on our website
• Provide a summary of the key changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes indicates your acceptance of the updated policy.

14. Contact Us

15. Privacy Commissioner Contact Information