Legal
Privacy Policy
Canopy Growth is committed to privacy and transparency. This policy explains what personal information we collect, how we use and share it, and the choices and rights available to you.
Our privacy policy
Canopy Growth Corporation and our affiliates (collectively, “Canopy”, “we” or “us”) are committed to privacy and transparency. This Privacy Policy explains how we collect, use, share and protect your personal information.
We may update this Privacy Policy from time to time to reflect changes in our privacy practices, and will provide you with notice of any material change.
Scope
This policy applies to personal information we collect:
- on Canopy’s websites and mobile applications;
- during written, electronic and oral communications with us;
- when you purchase or engage with our products or services; and
- during any other interactions with us, including by email or telephone.
Collection of personal information
We collect personal information that you provide to us directly. The information collected depends on how you interact with us:
- Website access — age and jurisdiction verification required to access our sites.
- Medical cannabis registration — username, password, name, date of birth, phone, email, prescription and medical-condition details, addresses, healthcare-practitioner information, insurance details and veteran status.
- Purchase information — item details, delivery address, purchase timestamp and order subtotal (payment itself is processed by a third-party provider).
- Marketing communications — name and email address for newsletters and offers, with an unsubscribe option always available.
- Feedback, reviews and surveys — customer feedback and publicly posted reviews and comments; survey data is aggregated and non-identifying.
- Careers — resume, cover letter and employment materials; background checks are conducted with advance notice.
- Contact requests — name, email and phone number when you contact support.
Personal information from third parties
We may receive personal information about you from third parties, including healthcare practitioners (medical documents, registration information, patient name and date of birth, dosage, consultation location and diagnosis comments) and from service providers and social-media platforms when you interact with our content.
Information collected automatically
- Call recording — you will be notified at the beginning of any call that is being recorded.
- Technical information — browser, operating system, IP address and device identifiers.
- Website usage — pages visited, navigation, time spent and traffic patterns.
- Site preferences — preference data collected via cookies.
Use of personal information
We use personal information to:
- operate our websites and provide our services;
- respond to your requests and inquiries;
- personalize content and experiences;
- send newsletters and marketing materials (where permitted);
- protect our legal rights and prevent fraud;
- comply with legal and regulatory obligations;
- improve our services through research; and
- administer and operate our business.
Transferring personal information
We may process, store and transfer your personal information in and to another jurisdiction with different privacy laws. Where we do, our service providers are required to maintain privacy standards consistent with Canadian legislation.
Advertising
Third-party partners may present ads based on your previous interactions with our websites. IP addresses and device identifiers may be used for cross-device targeting and personalized content. You can opt out of interest-based advertising through the Digital Advertising Alliance of Canada, the Network Advertising Initiative and the Digital Advertising Alliance.
Third-party links
Our sites may link to other websites that have their own privacy policies, notices and terms of use. We assume no responsibility for the privacy practices of those linked websites.
Security
Canopy has implemented reasonable administrative, technical and physical measures in an effort to safeguard the personal information in our custody and control. Unfortunately, the transmission of information via the Internet is not completely secure, and we cannot guarantee its absolute security.
Data retention
Except as otherwise permitted or required by applicable law or regulation, we will only retain your personal information for as long as your account is active or as needed to provide you services — including for transaction records, legal obligations, dispute resolution and the enforcement of our agreements.
Anonymous and de-identified information
We reserve the right to use anonymous and de-identified data, in accordance with applicable laws, for any legitimate business purpose without further notice to you or your consent.
Individuals under the age of majority
Our websites are not intended for individuals under the age of majority in their province or territory of residence. Any information collected from minors without authorization will be deleted.
Your rights and choices
You may access, update, correct and review your personal information, subject to certain legal restrictions, by contacting privacy@canopygrowth.com. You have the right to withdraw your consent in certain circumstances, which may affect our ability to provide services. You can opt out of marketing at any time using the unsubscribe link in our emails or by contacting us.
EU / EEA addendum
If you are in the European Economic Area, we process your personal information on the basis of contract performance, legal compliance, our legitimate interests, the establishment or defense of legal claims, and your consent.
EEA residents have the right to access, rectify, erase, restrict and port their personal information; to object to direct marketing and other processing; to withdraw consent; to object to automated decision-making; to obtain information about transfer safeguards; and to lodge a complaint with a supervisory authority. Personal information may be transferred to and processed in the United States and other jurisdictions; we implement standard contractual clauses for protection.
Contact us
Canopy Growth Corporation — Attention: Privacy Officer. Email: privacy@canopygrowth.com. Any complaint regarding Canopy’s or our service providers’ handling of personal information will be investigated within a reasonable timeframe.
EU representative: Mr. Wojtek Dragon, Projekt 29 GmbH & Co. KG, Ostengasse 14, 93047 Regensburg — anfragen@projekt29.de. The controller for website-collected data in the EU is Canopy Growth Germany GmbH.