PRIVACY POLICY

This Privacy Policy explains how Queens Cannabis Co. (“Queens Cannabis Co.,” “Queens,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit our website, create an account, place an order, contact us, or interact with our stores and services.

We are committed to protecting your privacy and handling your personal information responsibly in accordance with applicable privacy laws in British Columbia and Canada.

By using our website or services, you acknowledge that your personal information may be collected, used, and disclosed as described in this Privacy Policy, subject to applicable consent requirements.

Our products are intended for adults of legal age only. In British Columbia, you must be at least 19 years old to purchase recreational cannabis.

We may collect or verify age and identity information as necessary to comply with applicable cannabis laws and regulations, including requirements relating to online orders, in-store purchases, and delivery services.

Our website is not intended for individuals under the legal age to purchase cannabis. We do not knowingly collect personal information from minors through our website for marketing or account-related purposes. If you believe a minor has provided us with personal information, please contact us so we can review the matter and take appropriate action.

We may collect personal information in several ways, including when you visit our website, create an account, place an order, contact customer support, or interact with our stores.

Device and Website Information

When you access our website, we may automatically collect information about your device and browsing activity, including:

• IP address, browser type, operating system, and device information.
• Time zone and general location information derived from your device or connection.
• Pages and products viewed, search terms entered, and links clicked.
• Referring websites, landing pages, and interactions with our website.
• Cookie identifiers and similar tracking information.

Purpose: This information helps us operate and display our website, maintain security, understand how visitors use our services, troubleshoot technical issues, and improve the customer experience.

Source: Collected automatically through website technologies such as cookies, server logs, and similar tools, where applicable.

Order and Transaction Information

When you place an order online or make a purchase through our stores, we may collect:

• Name and contact information, including email address and phone number.
• Billing and delivery addresses, where applicable.
• Order details, products purchased, quantities, and transaction history.
• Payment status, transaction references, and related payment information processed through our payment providers.
• Order confirmations, invoices, and communications relating to your purchase.

Purpose: We use this information to process payments, fulfill orders, arrange pickup or delivery, provide receipts and order updates, respond to customer inquiries, prevent fraud, and meet applicable legal and regulatory requirements.

Source: Collected directly from you and, where necessary, through the systems and service providers involved in processing your order.

Age and Identity Verification Information

We may collect or review information necessary to verify that customers meet the legal age requirements for cannabis purchases. This may include age-verification results and information from government-issued identification when required by law or our verification procedures.

We only intend to collect and retain identification information to the extent necessary for the applicable verification, legal, security, or operational purpose. The specific information retained may depend on the transaction and applicable requirements.

Customer Support Information

When you contact us by email, phone, through our website, or in person, we may collect your contact details, the contents of your inquiry, and information necessary to respond to your request.

Customer support and transaction-related information may be processed or accessed through our point-of-sale and business systems, including COVA, where applicable.

Purpose: To respond to questions, resolve issues, investigate transaction inquiries, process eligible returns, and provide customer service.

Account and Customer Preference Information

If you create an online account or voluntarily sign up for customer communications, we may collect account details and preferences, including your name, phone number, email address, and communication preferences.

Where available and permitted, we may use transaction history to assist with customer service, review previous purchases, and support future transactions.

Participation in optional marketing communications is separate from the information necessary to process a purchase. We do not require customers to join a marketing or promotional program to receive the same applicable product prices and promotions offered to other eligible customers.

We use personal information for purposes that are reasonable and appropriate in the circumstances, including to:

• Process payments and fulfill online and in-store orders.
• Arrange order pickup and delivery and communicate order status.
• Verify age and identity where required.
• Provide customer support and resolve complaints or transaction issues.
• Maintain purchase records and meet applicable cannabis, tax, accounting, and other legal requirements.
• Detect, investigate, and prevent fraud, unauthorized activity, and security incidents.
• Operate, maintain, troubleshoot, and improve our website and services.
• Understand website traffic and customer interactions through analytics, where applicable.
• Communicate information about products, services, promotions, and offers where permitted and, when required, with your consent.
• Maintain customer accounts and preferences.
• Protect our legal rights and comply with lawful requests.

We limit the collection, use, and retention of personal information to what is reasonably necessary for the purposes identified in this policy or otherwise permitted by law.

As a licensed cannabis retailer operating in British Columbia, Queens Cannabis Co. must comply with applicable laws and regulatory requirements governing cannabis sales, age verification, recordkeeping, privacy, and business operations.

We may collect, retain, use, or disclose personal information when necessary to meet these obligations or when otherwise authorized or required by law.

Our handling of personal information is subject to applicable privacy legislation, including British Columbia’s Personal Information Protection Act (PIPA) and, where applicable, federal privacy legislation.

We may disclose relevant information to regulators, law enforcement agencies, courts, or other authorized parties when required or permitted by law. We do not disclose customer information to regulatory authorities simply because we are a cannabis retailer; any disclosure must have an appropriate legal or other lawful basis.

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, provide our services, resolve disputes, maintain appropriate business records, and comply with applicable legal and regulatory requirements.

Cannabis transaction and regulatory records are generally retained for the periods required by applicable cannabis, tax, and regulatory laws. In British Columbia, certain records required under the Cannabis Licensing Regulation, including cannabis purchase, sales, delivery, disposal, transfer, incident, and other specified records, must generally be retained for six years from their creation during the term of the license and renewals, and for six months after the license expires or is cancelled.

Other personal information is retained only for as long as reasonably necessary to fulfill the purposes for which it was collected or as otherwise required or permitted by law.

Where personal information is no longer required, we will take reasonable steps to securely delete, destroy, or de-identify it, subject to any applicable legal or regulatory retention requirements.

You may request the deletion of your personal information. We will review your request and determine what information can be deleted, taking into account applicable legal obligations, legitimate business requirements, and any other lawful basis for retention.

We may share personal information with third parties when reasonably necessary to operate our business, provide our services, or comply with applicable laws.

These parties may include:

Website and E-commerce Providers

We use Breadstack to support our online storefront and e-commerce services. Information necessary to operate the website, manage online orders, and provide related functionality may be processed through Breadstack and its relevant service providers.

Point-of-Sale and Business Systems

We use COVA for point-of-sale and related retail operations. Relevant transaction and customer information may be processed through COVA when necessary for purchases, customer service, recordkeeping, and other related business functions.

Payment Providers

Payment information may be processed by third-party payment processors to authorize and complete transactions. These providers handle information in accordance with their own applicable privacy and security practices.

Delivery and Fulfillment Providers

Where applicable, we may share the information necessary to fulfill an order with delivery personnel or service providers. This may include the customer's name, contact information, delivery address, order details, and information necessary to coordinate delivery and verify eligibility.

Analytics and Advertising Providers

If we use third-party analytics, advertising, or marketing tools, certain website activity or device information may be shared with those providers through cookies or similar technologies, subject to applicable consent requirements and privacy settings.

Legal and Regulatory Authorities

We may disclose personal information to government agencies, regulators, law enforcement, courts, or other parties when required or permitted by applicable law, legal process, or a valid request from an authorized authority.

Business Transfers

Personal information may be transferred as part of a proposed or completed merger, restructuring, financing, sale of assets, or other business transaction, subject to applicable privacy requirements and appropriate safeguards.

We require service providers handling personal information on our behalf to protect that information and use it only for authorized purposes, as appropriate to the nature of the service and applicable legal requirements.

We do not sell personal information to third parties for their own marketing purposes.

Our website may use cookies and similar technologies to support functionality, remember preferences, understand website usage, and improve your browsing experience.

A cookie is a small text file stored on your device when you visit a website. Depending on the technologies enabled on our website, cookies may serve the following purposes:

• Essential cookies: Support website functionality, account access, shopping cart operations, checkout, and security.
• Functional cookies: Remember preferences and improve convenience when using the website.
• Analytics cookies: Help us understand website traffic, page views, and visitor interactions.
• Advertising cookies: Where used, help measure advertising effectiveness or support relevant marketing.
• Third-party cookies: May be set by external services integrated into our website.

The specific cookies and tracking technologies used may change as our website and service providers change. We do not list individual cookie names here because the technologies used by Breadstack and other providers may differ from those used by other e-commerce platforms.

You can manage or block cookies through your browser settings and, where provided, our website's cookie preferences. Blocking certain cookies may affect features such as account access, shopping carts, or checkout.

Browser-based cookie controls may not disable every form of data collection or sharing by third-party services. Where consent is required for non-essential tracking technologies, such technologies should be used in accordance with the applicable consent requirements.

Analytics and Advertising Choices

If third-party analytics or advertising services are enabled on our website, those services may process certain browsing or interaction information in accordance with their own privacy policies.

You can review the privacy settings available through your browser and any applicable third-party services to manage certain tracking or advertising preferences.

We do not promise that every third-party tracking service offers a complete opt-out through browser settings alone.

Do Not Track

Some browsers offer a “Do Not Track” setting. Because responses to these signals are not consistent across all services, our website may not respond to every such signal. We will continue to apply the privacy choices and consent requirements that are applicable to the technologies used on our website.

Subject to applicable law and any relevant exceptions, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Withdraw consent to certain uses or disclosures of your information, where consent is the applicable legal basis.
• Request deletion of personal information, subject to legal and regulatory retention requirements.
• Opt out of marketing communications.
• Ask questions or raise concerns about how your personal information is collected, used, disclosed, or protected.
• Make a privacy complaint and request that we review the matter.

To exercise these rights, please contact us using the information in Section 11. We may need to verify your identity before responding to a request.

If you unsubscribe from marketing communications, we may still contact you about transactions, orders, account matters, or other non-marketing communications where necessary.

We use reasonable technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, or destruction.

These safeguards may include access controls, staff procedures, system security measures, and the use of service providers that support our website and retail operations.

Personal information may be processed or stored by our service providers in accordance with their systems and contractual arrangements. Depending on the provider and service, information may be handled outside British Columbia or Canada and may be subject to the laws of the jurisdiction where it is processed.

No method of electronic transmission or storage is completely secure. Although we take reasonable steps to protect personal information, we cannot guarantee absolute security.

If you believe your personal information has been compromised or you have a privacy-related concern, please contact us promptly.

Queens Cannabis Co. is responsible for the personal information under its control and for addressing questions and complaints regarding our privacy practices.

If you have questions about this Privacy Policy, wish to access or correct your personal information, or would like to make a privacy complaint, please contact us through our website contact form or at one of our store locations.

Please include enough information for us to understand your request. Do not send payment card details, government-issued identification, or other sensitive personal information unless we specifically advise you that it is necessary and provide an appropriate method for doing so.

We will review privacy requests and complaints and respond within a reasonable period, in accordance with applicable law.

We may update this Privacy Policy from time to time to reflect changes to our business practices, website functionality, service providers, or legal and regulatory requirements.

The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this policy periodically.


Last Updated: September 30th, 2026