Sativa Bliss Cannabis Inc.

Last updated: January 2026

Sativa Bliss Cannabis Inc. (“Sativa Bliss,” “we,” “us,” or “our”) is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you interact with us in-store, online, through our mobile application, or through any of our services.

We operate in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial requirements.

1. Age Restriction

Sativa Bliss does not knowingly collect personal information from individuals under the legal age to purchase cannabis.

By using our website, mobile app, or services, you confirm that:

• You are 19 years of age or older (or the legal age in your province), and

• You are legally permitted to purchase cannabis.

If we become aware that personal information has been collected from a minor, we will promptly delete it.

2. What Is Personal Information?

“Personal information” means information about an identifiable individual. This may include, but is not limited to:

• Name, email address, phone number

• Billing and delivery address

• Purchase history and preferences

• Loyalty program activity

• Technical data such as IP address, device identifiers, browser type

• Marketing preferences and communications history

Business contact information (such as a business phone number or address) is generally not considered personal information under privacy legislation.

3. How We Collect Personal Information

We collect personal information when you:

• Shop in-store

• Place an order online or through our mobile app

• Create an account

• Join our loyalty or rewards programs

• Subscribe to email newsletters or SMS marketing

• Participate in promotions, contests, or surveys

• Contact us with questions or support requests

• Use our website or app (via cookies and similar technologies)

4. How We Use Personal Information

We collect and use personal information only for legitimate business purposes, including:

• Processing in-store, online, and delivery orders

• Verifying age and identity where legally required

• Managing customer accounts and loyalty programs

• Processing payments and preventing fraud

• Providing delivery services

• Communicating about orders, accounts, and customer service matters

• Sending marketing communications (email and SMS) where you have consented

• Improving our products, services, website, and mobile app

• Conducting analytics, reporting, and business planning

• Complying with legal, regulatory, and tax obligations

You may withdraw consent for marketing communications at any time by using the unsubscribe link in emails or following SMS opt-out instructions.

5. Loyalty Programs, Email & SMS Marketing

If you join a Sativa Bliss loyalty program or opt into email or SMS communications, we may collect and use information such as:

• Purchase history

• Reward points and redemption activity

• Communication preferences

• Engagement with promotions

Marketing communications are sent only where permitted by law, and you may opt out at any time.

6. Mobile Application

When you use our mobile app, we may collect additional information such as:

• App usage data

• Device information

• Login credentials

• Order and browsing history

This information is used to operate the app, personalize your experience, and improve functionality.

7. Cookies, Analytics & Tracking Technologies

We use cookies and similar technologies to:

• Enable core website and app functionality

• Remember preferences and shopping cart contents

• Analyze traffic and usage patterns

• Improve performance and security

We may use third-party analytics and marketing tools (such as Google Analytics and advertising pixels). These services may collect technical data such as IP addresses and device identifiers.

You can manage or disable cookies through your browser or device settings, though some features may not function properly.

8. Disclosure of Personal Information

We do not sell or rent your personal information.

We may share personal information with trusted third parties only as necessary to operate our business, including:

• Payment processors

• Delivery and logistics partners

• Technology providers (POS, website hosting, mobile app services)

• Marketing and communications platforms

• Accountants, auditors, and legal advisors

These service providers are given only the information necessary to perform their services and are required to protect your information.

We may also disclose personal information where required or permitted by law, including in response to court orders or regulatory requests.

9. Retention of Personal Information

We retain personal information only as long as necessary for the purposes for which it was collected and to meet legal and business requirements.

For example:

• Transaction and order records may be retained for up to 7 years for tax and accounting purposes.

• Marketing records are retained until consent is withdrawn.

When personal information is no longer required, it is securely destroyed, deleted, or anonymized.

10. Security Safeguards

We take reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, or misuse. These safeguards include:

• Secure systems and firewalls

• Restricted access to personal information

• Internal privacy and security policies

• Staff training and awareness

No system is completely secure, but we continuously review and improve our safeguards.

11. Data Breach Notification

In the event of a data breach involving personal information that poses a real risk of significant harm, we will notify affected individuals and applicable authorities as required by law.

12. Access, Correction & Deletion Requests

You have the right to:

• Request access to your personal information

• Request corrections to inaccurate information

• Request deletion of personal information, subject to legal requirements

Requests can be made by contacting us using the details below.

13. Third-Party Websites & Embedded Content

Our website or app may contain links to third-party websites or embedded content. This Privacy Policy applies only to Sativa Bliss platforms. We are not responsible for the privacy practices of third parties.

14. Privacy Contact

If you have questions, concerns, or requests regarding your personal information, please contact:

Privacy Officer
Sativa Bliss Cannabis Inc.
 [email protected]

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on our website and mobile app with a revised “Last updated” date.

16. Acceptance of This Policy

By using our website, mobile app, or services, you acknowledge that you have read and agree to this Privacy Policy.