Privacy Policy

1. Information we collect

When you place an order, sign up for updates, or contact us we collect:

• Contact information: name, email, phone (optional), shipping + billing addresses.
• Order history: what you bought, when, where it shipped, refund requests.
• Payment metadata: tokenized card identifiers and transaction IDs from our payment processor. We do not store your full card number, CVV, or PIN.
• Site analytics: IP address, browser, device, pages viewed, referrer (collected via Cloudflare and our analytics platform).
• Communications: emails, contact form submissions, customer-service messages.

2. How we use your information

• Process and ship your orders.
• Provide customer support and respond to your messages.
• Send transactional emails (order confirmation, shipping updates, refunds).
• If you opt in, send marketing emails about new products, promotions, and articles. You can unsubscribe at any time using the link at the bottom of every marketing email.
• Detect fraud, prevent abuse, and meet our legal obligations (e.g. tax records).
• Improve the site and our products.

3. Sharing your information

We don’t sell your personal information. We share it only with the service providers who help us run the business:

• Payment processor — to charge your card and handle refunds.
• Shipping carrier (Canada Post) — to deliver your order.
• Hosting + infrastructure (Cloudways, Cloudflare, Vercel) — to operate the website and protect it from abuse.
• Email + marketing platform (Klaviyo) — to send transactional and (if opted in) marketing email.
• Analytics — to understand site usage in aggregate.

We may also share information when required by law (e.g. court order) or to protect the rights, property, or safety of CBD Oil Canada, our customers, or others.

Some service providers are based outside Canada (mainly the U.S. and the EU). When data is processed outside Canada, it is subject to the laws of that country, including potential government access requests.

4. Your rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Withdraw consent for marketing email at any time (and for other processing, subject to our ability to fulfill outstanding orders + legal obligations).
• Delete your account and personal information, subject to legal retention requirements (e.g. tax records).
• File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

To exercise any of these rights, email us at [email protected]. We’ll respond within 30 days.

5. Cookies and tracking

We use cookies and similar technologies to keep you logged in, remember your cart, measure how the site is used, and (with your consent) personalize marketing. You can disable cookies in your browser settings; some site features may not work correctly without them.

6. Security

We use industry-standard safeguards: TLS encryption in transit, encryption at rest for sensitive fields, restricted access to personal data within our team, and regular security reviews. No system is 100% secure, but we take this seriously.

7. Children’s privacy

Our site and products are not intended for anyone under 19. We do not knowingly collect personal information from minors.

8. Changes to this policy

We’ll update the “Last updated” date at the top of this page when we make material changes. Significant changes will be communicated by email to subscribers.

9. Contact

Questions about this policy? Email us at [email protected].