Privacy policy

Privacy Policy

Last Updated: December 2025

This Privacy Policy describes how White Cross Dispensary (the "Site", "we", "us", or "our", also known as "E-Store") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from store.whitecrossdispensary.com (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use or access any of the Services.

Canadian Privacy Compliance (PIPEDA / CPPA)

White Cross Dispensary operates in Canada and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), as well as applicable provincial privacy laws. We are committed to ensuring that your personal information is collected, used, and disclosed only for purposes that are identified, reasonable, and consented to by you.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last Updated” date above, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources as described below. The information we collect and use depends on how you interact with us. In addition to the specific uses listed below, we may use information to communicate with you, provide the Services, comply with legal obligations, enforce terms of service, and protect our rights and those of others.

What Personal Information We Collect

Information We Collect Directly from You
Information that you directly submit to us through our Services may include:

Basic contact details including your name, address, phone number, and email.
Order information including billing/shipping addresses, payment confirmation, and order details.
Account information such as username, password, and security questions.
Shopping information including items you view, add to cart, or wishlist.
Customer support information, including messages or details you provide when contacting us.

Certain features may require you to provide specific information. Choosing not to do so may limit access to some Services.

Information We Collect through Cookies
We automatically collect certain information about your interaction with the Services ("Usage Data") using cookies, pixels, and similar technologies. Usage Data may include device type, browser, network connection, IP address, and how you interact with the Site.

Information We Obtain from Third Parties
We may also receive information about you from vendors and service providers, including:

Companies supporting our Site and Services, such as Shopify.
Payment processors who collect payment information (e.g., bank account, credit/debit card) to process your payments.
Marketing and analytics partners who help us understand website traffic and improve your experience.

All information obtained from third parties is treated in accordance with this Privacy Policy.

Health Information

Our e-store does not collect or store prescription, diagnostic, or other health-related information. Any personal health information you may provide when contacting our licensed pharmacy directly is managed separately under pharmacy privacy and professional confidentiality standards.

How We Use Your Personal Information

Providing Products and Services: To process orders, fulfill deliveries, process returns, and manage your account.
Marketing and Advertising: To send promotional communications, display advertisements, and tailor content to your interests.
Security and Fraud Prevention: To detect, investigate, and prevent fraudulent or illegal activity.
Customer Support: To communicate with you, respond to inquiries, and improve our Services.

Cookies

Like many websites, we use Cookies to power and improve our Site (including remembering preferences, analyzing traffic, and optimizing performance). For detailed information about Shopify’s Cookies, visit https://www.shopify.com/legal/cookies.

You can disable cookies in your browser, but this may limit some functionality. Blocking Cookies may not completely prevent data sharing with third parties such as advertising partners.

How We Disclose Personal Information

We may disclose your personal information for legitimate business purposes, including:

To vendors and service providers (e.g., IT support, payment processors, shipping, analytics).
To business and marketing partners, including Shopify.
To affiliates within our corporate group.
When required by law, such as in response to lawful requests or legal processes.
In connection with business transactions such as mergers or acquisitions.

We do not use or disclose sensitive personal information to infer characteristics about you.

User-Generated Content

If you submit reviews or other public content, it may be visible to others. We cannot guarantee that third parties will respect your privacy or keep this information secure once published.

Third-Party Websites and Links

Our Site may include links to third-party websites. We are not responsible for their privacy or security practices. You should review their privacy policies before sharing any information.

Children’s Data

Our Services are not intended for children under 16. We do not knowingly collect their personal information. Parents or guardians who believe a child has provided data may contact us to request deletion.

Security and Retention of Your Information

While we maintain appropriate technical and organizational safeguards, no system is completely secure. We recommend not sending sensitive information through unsecure channels.

We retain:

Order and transaction data: at least 7 years to meet accounting and legal obligations.
Marketing and account data: until you withdraw consent or request deletion.

Cross-Border Data Transfers

Our Site is hosted by Shopify Inc., which may store and process data in Canada, the United States, or other jurisdictions. Shopify uses robust physical, electronic, and administrative safeguards to protect your data in compliance with Canadian and international standards.
If data is transferred from Europe or the UK, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses.

Automated Decision-Making

We may use automated tools, such as fraud-prevention filters or product recommendation systems, to improve security and your browsing experience. These tools do not produce legal or similarly significant effects.

Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

Access, correct, or delete personal information we hold about you.
Request a copy of your data (data portability).
Withdraw consent to marketing or other processing activities.
Opt out of targeted advertising or the “sale” of personal data (where applicable).
Restrict or object to processing.

You can manage communication preferences at any time by using the “unsubscribe” link in our emails.

We will verify your identity before responding to any privacy request and respond as required by law.

Canadian Anti-Spam (CASL) Compliance

We comply with Canada’s Anti-Spam Legislation (CASL). We send promotional messages only with your express or implied consent. You can unsubscribe at any time using the link provided in our messages.

Complaints

If you have concerns or wish to file a complaint, please contact us using the details below. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (OPC) or your local privacy authority.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities in accordance with applicable law.

Contact Us

If you have any questions about our privacy practices or would like to exercise your rights, please contact us:

White Cross Dispensary (E-Store)
264 Elgin Street, Ottawa, ON K2P 1M2, Canada
Email: estore@whitecrossdispensary.com
Phone: 613-233-4029