PRIVACY POLICY

01INTRODUCTION

Coastal Green Holdings Ltd. ("Coastal Green," "we," "us," or "our") operates cannabis retail dispensaries at 565 Dunsmuir Street, Vancouver; 208 E 16th Ave, Vancouver; and 4330 Sunshine Coast Highway Unit #12, Sechelt, British Columbia, as well as this website located at coastalgreencannabis.ca (the "Site").

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our Site, interact with us in-store, or engage with our services. We are committed to protecting your privacy in accordance with the Personal Information Protection Act (PIPA) of British Columbia and all applicable Canadian privacy legislation.

02INFORMATION WE COLLECT

We may collect the following categories of personal information:

Information You Provide Directly

• Name, date of birth, and government-issued ID details (required for age verification under BC cannabis regulations)
• Email address and phone number (for loyalty accounts, order notifications, and communications)
• Mailing address (for account registration or delivery purposes)
• Purchase history and product preferences
• Communications you send us, including contact form submissions and customer service inquiries

Information Collected Automatically

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent on the Site, and referring URLs
• Cookie and session data (see Section 5)

Information from Third Parties

• Age verification data from third-party ID verification services as required by law
• Analytics data from service providers such as Google Analytics
• Payment processing information from our payment service providers (we do not store full card numbers)

03HOW WE USE YOUR INFORMATION

We use the personal information we collect for the following purposes:

• To verify your age and comply with BC Cannabis Regulation Branch requirements
• To process your orders, facilitate in-store purchases, and manage your loyalty account
• To send you transactional communications such as order confirmations and receipts
• To send you promotional emails and deal notifications, where you have opted in
• To improve our website, products, and services through analytics and feedback
• To respond to your inquiries and provide customer support
• To detect, investigate, and prevent fraud or other illegal activities
• To comply with legal obligations, including record-keeping requirements under cannabis regulations

04SHARING YOUR INFORMATION

We do not sell your personal information to third parties. We may disclose your information in the following limited circumstances:

Service Providers

We work with trusted third-party vendors who assist us in operating our business. These include point-of-sale and e-commerce platforms, payment processors, loyalty program providers, email marketing platforms, and analytics providers. All service providers are contractually obligated to protect your information and use it only for the services they provide to us.

Legal Requirements

We may disclose your information when required to do so by law, regulation, court order, or government authority, including the BC Cannabis Regulation Branch and other regulatory bodies.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site if your information becomes subject to a different privacy policy.

05COOKIES & TRACKING TECHNOLOGIES

Our Site uses cookies and similar technologies to enhance your browsing experience, analyze Site traffic, and understand where our visitors are coming from.

Types of Cookies We Use

• Essential cookies: Required for the Site to function, including age-gate session verification and shopping cart functionality.
• Analytics cookies: Help us understand how visitors interact with the Site (e.g., Google Analytics). These are anonymized where possible.
• Marketing cookies: Used to track visits across websites and display relevant advertisements. These are only set if you have consented.

You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Site. Your age verification session is stored only for the duration of your browser session.

06AGE VERIFICATION

In compliance with the Cannabis Control and Licensing Act (BC) and the Cannabis Act (Canada), we are required to verify that all customers and website visitors are 19 years of age or older before accessing cannabis-related content or purchasing products.

When you visit our Site, we display an age verification gate. Your confirmed age (19+) is stored as a session cookie for the duration of your visit. We do not permanently store your age confirmation from website gate clicks.

In-store, government-issued identification is required for all sales. This information is verified at point of sale and is not retained in our databases beyond what is required by law.

07DATA RETENTION

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Transaction records are retained for a minimum of seven (7) years as required by Canada Revenue Agency guidelines.
• Loyalty account information is retained for the duration of your membership and for up to two (2) years following account closure.
• Marketing consent records are retained until you withdraw consent, plus a reasonable period thereafter.
• Website analytics data is retained in aggregated, anonymized form for up to 26 months.

When personal information is no longer required, we securely destroy it or anonymize it so that it can no longer be associated with you.

08YOUR RIGHTS

Under PIPA (BC) and applicable Canadian privacy law, you have the following rights with respect to your personal information:

• Right of access: You may request a copy of the personal information we hold about you.
• Right to correction: You may request that we correct any inaccurate or incomplete information.
• Right to withdraw consent: You may withdraw your consent to certain uses of your information at any time, subject to legal and contractual restrictions.
• Right to unsubscribe: You may opt out of marketing emails at any time using the unsubscribe link in any email we send, or by contacting us directly.
• Right to complain: You have the right to lodge a complaint with the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC).

To exercise any of these rights, please contact our Privacy Officer using the details in Section 12.

09SECURITY

We take the security of your personal information seriously. We implement appropriate technical and organizational measures to protect your information against unauthorized access, use, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted via our Site
• Access controls limiting employee access to personal information on a need-to-know basis
• Regular review of our security practices and those of our service providers
• Secure payment processing through PCI-DSS compliant providers

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a breach that poses a real risk of significant harm, we will notify affected individuals and the OIPC BC as required by law.

10THIRD-PARTY LINKS

Our Site may contain links to third-party websites, including our online store platforms and partner sites. These third-party sites have their own privacy policies, and we have no responsibility or liability for their content or practices. We encourage you to review the privacy policy of any third-party site you visit.

11CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this Policy and, where appropriate, notify you by email or by posting a notice on our Site.

Your continued use of our Site or services following the posting of changes constitutes your acceptance of those changes. We encourage you to review this Policy periodically.

12CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact our Privacy Officer: