Inspired Cannabis — Privacy Policy
Effective date: 01-Jan-26
This Privacy Policy explains how Inspired Cannabis (“we,” “us,” “our”) collects, uses, discloses, retains, and protects personal information when you shop with us, use our services, visit our stores, interact with our websites/apps, or communicate with us.
We operate in British Columbia, Alberta, Saskatchewan, and Ontario. Depending on where you interact with us, applicable privacy laws may include BC PIPA, AB PIPA, and PIPEDA.
1) What personal information we collect
We collect personal information that you provide directly to us or that is generated through your purchases and interactions, including:
- Contact details: name, phone number, email address, mailing address
- Account/profile details: customer profile information, preferences, eligibility confirmations where applicable
- Transaction details: purchase date/time, store/location, items purchased, amounts paid, discounts, and returns/exchanges
- Communications and preferences: your marketing choices, customer service interactions, feedback
- Online information (if applicable): IP address, device identifiers, browsing activity, cookies and similar technologies (see Section 11)
Some purchase information (including cannabis purchase history) may be sensitive depending on context. We apply enhanced safeguards to protect it (see Section 8).
2) Shared systems and operational access (including MSA-covered businesses)
We use operational systems (such as point-of-sale, customer support, and analytics tools) that may be provided, administered, supported, or managed by third parties.
As a result, personal information in our systems may be accessed or processed by:
- our authorized personnel; and
- service providers, partners, and other businesses that provide management, administrative, technology, analytics, security, or operational services under a management services agreement or similar arrangement (collectively, “Service Providers”).
Why this exists: Shared systems help us process transactions, support customer service (including returns/exchanges), prevent fraud, maintain security, comply with legal obligations, and run our operations efficiently.
Access limitation: Access to personal information is restricted by role and need-to-know (see Section 8).
3) Why we collect and use your information (purposes)
We collect and use personal information for the following purposes:
Completing purchases and providing services
- processing transactions and payments
- providing receipts
- managing returns, exchanges, and customer support
- responding to inquiries and service requests
Operating and securing our business
- preventing and investigating fraud, theft, misuse, and security incidents
- maintaining the security of stores, systems, and customer accounts
- auditing, internal reporting, quality assurance, and compliance with legal obligations
Customer experience
- maintaining customer profiles (where applicable) to support service and operational needs
- applying your stated preferences (where applicable)
Analytics and business improvement (with safeguards)
- understanding sales trends and inventory planning
- improving store operations, product selection, and customer experience
Data minimization: Where reasonably possible, we use de-identified or aggregated data for analytics. Where identification is required, we restrict access and use the data only for the purposes described above.
4) Consent and your choices
We rely on consent where required by law. The form of consent depends on context:
- Implied consent may apply when information is needed to complete a transaction or provide a requested service.
- Express consent is used where required or appropriate, including for certain marketing communications.
You may withdraw or change your consent at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide certain services or features (for example, customer profile features).
5) Marketing communications (CASL)
We only send commercial electronic messages (such as email or SMS promotions) where we have the appropriate consent under Canada’s anti-spam law (CASL) and other applicable laws.
- Each marketing message will identify the sender and include an unsubscribe mechanism.
- You can unsubscribe at any time using the link in the message or by contacting us (Section 12).
Service messages
Even if you unsubscribe from marketing, we may still send non-promotional messages related to your transactions or account (e.g., receipts, return confirmations, security notices), as permitted by law.
6) How we disclose personal information
We do not sell your personal information.
We may disclose personal information in the following circumstances:
Service Providers, partners, and MSA-covered businesses
We may disclose personal information to Service Providers who provide services such as:
- point-of-sale and retail technology services
- payments processing
- IT hosting, cybersecurity, and incident response
- customer support tools
- marketing and communications platforms (used only where appropriate consent exists)
- analytics providers (preferably using de-identified data)
Service Providers are authorized to access personal information only as needed to provide services and must protect it with appropriate confidentiality and security safeguards.
Legal and safety
We may disclose information where required or permitted by law, including to comply with lawful requests, court orders, or to protect rights, property, and safety.
7) Cross-border processing
Some Service Providers may process or store personal information outside of Canada (for example, cloud hosting). When information is processed outside Canada, it may be subject to the laws of that jurisdiction. We take steps to require appropriate safeguards through contracts and security measures.
8) Safeguards and access controls
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including:
- role-based access controls (access is limited to what is required for job duties)
- authentication controls and monitoring
- audit logging of access to customer profiles within our systems
- encryption and secure transmission where appropriate
- staff training and confidentiality obligations
- vendor security requirements and oversight
Limiting access to purchase history
We take steps to limit access to detailed purchase history (including cannabis transaction details) to authorized roles that need it to support customer service, returns/exchanges, fraud prevention, compliance, and system administration.
9) Retention
We retain personal information only as long as needed for the purposes described in this Policy and as required by law. Retention periods vary depending on the type of information and legal/operational requirements.
When information is no longer needed, we securely destroy, delete, or de-identify it.
10) Your rights: access, correction, and deletion requests
Depending on applicable law, you may request:
- access to your personal information
- corrections to inaccurate or incomplete information
- information about how your personal information has been used and disclosed
- deletion/de-identification of certain information where appropriate (noting some records must be retained for legal or legitimate business purposes)
To make a request, contact us using the details in Section 12. We may need to verify your identity.
11) Cookies and online tracking (if applicable)
If you use our websites or apps, we may use cookies and similar technologies to operate the site, remember preferences, measure performance, and deliver marketing where consent is provided. You can manage cookies through browser settings and, where available, our cookie preference tools.
12) Contact us
If you have questions, want to update your preferences, or wish to make a privacy request, contact us at:
INSPIRED CANNABIS
308-1110 Hamilton Street
Vancouver, BC
V6B 2S2
info@inspiredcannabis.ca
13) Changes to this policy
We may update this Policy from time to time. We will post the updated version and change the “Effective date.” Where required by law, we will provide additional notice or seek consent.

