Imagine Cannabis — Privacy Policy
Effective date: 01-Jan-26
Welcome — and thanks for choosing Imagine Cannabis. This Privacy Policy explains how we collect, use, share, store, and protect your personal information when you shop with us, visit our stores, use our services, browse our websites/apps (if applicable), or reach out to us.
We operate only in British Columbia, Canada, and our privacy practices are designed to comply with British Columbia’s Personal Information Protection Act (PIPA).
1) The information we collect
We collect personal information you choose to share with us, and information that’s created when you shop with us or interact with our services, including:
• Contact details: name, phone number, email address, mailing address
• Account/profile details: customer profile information, preferences, and eligibility confirmations where applicable
• Transaction details: purchase date/time, store/location, items purchased, amounts paid, discounts, and returns/exchanges
• Communications and preferences: your marketing choices, customer service interactions, and feedback
• Online information (if applicable): IP address, device identifiers, browsing activity, cookies and similar technologies (see Section 11)
Some information — like cannabis purchase history — can be sensitive depending on the situation. We treat it with extra care and limit access (see Section 8).
2) Shared systems and who may help us (including MSA-covered businesses)
To run our stores and support you smoothly, we use operational systems like point-of-sale, customer support tools, and analytics platforms. Some of these systems may be provided, administered, supported, or managed by trusted third parties.
Because of this, personal information in our systems may be accessed or processed by:
• our authorized team members; and
• service providers, partners, and other businesses that provide management, administrative, technology, analytics, security, or operational services under a management services agreement or similar arrangement (collectively, “Service Providers”).
Why this helps: These shared systems make it easier for us to process purchases, provide receipts, support returns/exchanges, prevent fraud, keep our systems secure, meet legal requirements, and generally keep things running well.
Access is limited: We restrict access to personal information based on role and need-to-know (see Section 8).
3) How we use your information (and why)
We use personal information for the following purposes:
A. Helping you complete purchases and get support
• processing transactions and payments
• providing receipts
• managing returns, exchanges, and customer support
• responding to questions and service requests
B. Keeping our business safe and running properly
• preventing and investigating fraud, theft, misuse, and security incidents
• maintaining the security of our stores, systems, and customer accounts
• auditing, internal reporting, quality assurance, and meeting legal obligations
C. Improving your experience
• maintaining customer profiles (where applicable) to support service and operational needs
• applying your stated preferences (where applicable)
D. Learning and improving (with safeguards)
• understanding sales trends and inventory planning
• improving store operations, product selection, and customer experience
Data minimization: Whenever we reasonably can, we use de-identified or aggregated information for analytics. If we need identifiable information, we limit access and only use it for the purposes described above.
4) Consent and your choices
We rely on consent where required. The type of consent depends on what’s happening:
• Implied consent may apply when information is needed to complete a purchase or provide a service you asked for.
• Express consent is used where required or appropriate, including for certain marketing communications.
You can change your mind at any time. If you withdraw consent, we’ll respect that (subject to legal and contractual restrictions and reasonable notice). In some cases, withdrawing consent may affect our ability to provide certain services or features (for example, customer profile features).
5) Marketing communications
We only send marketing messages (like promotional emails or texts) when we have the appropriate consent.
• Each message will identify the sender and include an easy unsubscribe option.
• You can unsubscribe at any time using the link in the message or by contacting us (Section 12).
Service messages
Even if you unsubscribe from marketing, we may still send non-promotional messages related to your transactions or account (for example, receipts, return confirmations, or security notices), where permitted.
6) How we share personal information
We do not sell your personal information.
We may share personal information in these situations:
A. With Service Providers, partners, and MSA-covered businesses
We may share personal information with Service Providers who help us operate, such as:
• point-of-sale and retail technology providers
• payment processors
• IT hosting, cybersecurity, and incident response providers
• customer support tools
• marketing and communications platforms (used only where appropriate consent exists)
• analytics providers (preferably using de-identified data)
Service Providers are allowed to access personal information only as needed to deliver services to us, and they must protect it with appropriate confidentiality and security safeguards.
B. For legal and safety reasons
We may disclose information where required or permitted by law — for example, to comply with lawful requests or to protect rights, property, and safety.
7) Cross-border processing
Some Service Providers may process or store personal information outside of Canada (for example, cloud hosting). If your information is processed outside Canada, it may be subject to the laws of that jurisdiction. We take steps to require appropriate safeguards through contracts and security measures.
8) How we protect your information
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including:
• role-based access controls (access is limited to what someone needs for their job)
• authentication controls and monitoring
• audit logging of access to customer profiles within our systems
• encryption and secure transmission where appropriate
• staff training and confidentiality obligations
• vendor security requirements and oversight
Limiting access to purchase history
We take steps to limit access to detailed purchase history (including cannabis transaction details) to authorized roles that need it for customer service, returns/exchanges, fraud prevention, compliance, and system administration.
9) How long we keep information
We keep personal information only as long as needed for the purposes in this Policy and as required by law. Retention periods vary depending on the type of information and legal/operational requirements.
When information is no longer needed, we securely destroy, delete, or de-identify it.
10) Your rights
You can ask us to:
• provide access to your personal information
• correct inaccurate or incomplete information
• explain how your personal information has been used and disclosed
• delete or de-identify certain information where appropriate (note: some records must be kept for legal or legitimate business purposes)
To make a request, contact us using the details in Section 12. We may need to verify your identity to protect your information.
11) Cookies and online tracking (if applicable)
If you use our websites or apps, we may use cookies and similar technologies to help the site work properly, remember preferences, measure performance, and (where consent is provided) support marketing. You can manage cookies through your browser settings and, where available, our cookie preference tools.
12) Contact us
If you have questions, want to update your preferences, or would like to make a privacy request, we’re here to help:
IMAGINE CANNABIS
13690 MARINE DR
WHITE ROCK BC V4B 1A4
info@imagine-cannabis.ca
13) Updates to this policy
We may update this Policy from time to time. When we do, we’ll post the updated version and change the “Effective date.” If a change is significant, we’ll take additional steps to notify you where required.