Privacy Policy

Effective Date: March 28, 2026

BudOnTheRun (“we,” “us,” or “our”), operating the platform available at budontherun.com and under the trade name BudOnTheRun (BudRun), is committed to protecting the privacy of all individuals who use our marketplace platform. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you access or use our website, mobile application, and related services (collectively, the “Platform”).

By creating an account, visiting our Platform, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use the Platform.

1. Who We Are

BudOnTheRun is a cannabis delivery marketplace platform that connects consumers with independent and licensed cannabis dispensaries. We do not sell, distribute, grow, process, or otherwise handle cannabis products ourselves. We are a technology intermediary that facilitates transactions and communications between customers and independently operated and licensed cannabis retailers.

BudOnTheRun operates across Canada where cannabis retail and delivery is legally permitted. This Privacy Policy is designed to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Our principal place of business and privacy inquiries may be directed to:

BudOnTheRun (BudRun)
Email: privacy@budontherun.com
Website: www.budontherun.com

2. Scope of This Policy

This Privacy Policy applies to all users of the Platform, including:

Customers — individuals who register on the Platform to browse, order, and receive cannabis products delivered by independent and licensed dispensaries.
Dispensary Partners — independent and licensed cannabis retailers and their authorized representatives who register on the Platform to list products, manage orders, and communicate with customers.
Visitors — individuals who access or browse the Platform without registering an account.

This Policy does not apply to the privacy practices of independent dispensary partners, payment processors, or other third-party services that may have their own privacy policies. We encourage you to review the privacy policies of any third parties with whom you interact through our Platform.

3. Information We Collect

We collect several categories of personal information in connection with your use of the Platform. The specific information we collect depends on how you interact with us and what features you use.

3.1 Information You Provide Directly

When you register for an account or use certain features of the Platform, you may provide us with the following information:

Account Registration Information: Full legal name, email address, phone number, date of birth (required for age verification), and a password.
Delivery Information: Delivery address, postal code or ZIP code, and delivery instructions.
Identity Verification Documents: Government-issued identification (such as a driver’s licence, provincial ID card, or passport) submitted for the purpose of verifying your age and identity as required by applicable cannabis regulations. This data is handled with heightened care.
Profile Information: Profile photo, display name, and any optional preferences you choose to set.
Communications: Messages you send to dispensary partners through our live chat feature, feedback you submit, reviews and ratings you post, and any correspondence you send to our support team.
Dispensary Partner Information: For dispensary partners, we also collect business name, business licence number, business address, contact details for authorized representatives, banking or payout information (collected and processed by our payment service provider), and product and pricing information.
Payment Information: Payment card details or other payment method information. Note: Full payment card numbers are not stored by BudOnTheRun. Payment processing is handled by our third-party payment processor, and we receive only limited transactional metadata (such as the last four digits of a card, card type, and transaction identifiers).

3.2 Order and Transaction Data

We collect information related to transactions made through the Platform, including:

Order history, including products ordered, order totals, order dates and times, and order status.
Dispensary(ies) from which you have ordered.
Delivery times and delivery confirmation records.
Refund and dispute records.
Reviews and ratings associated with orders.

Order history data may be retained for legal, regulatory, and compliance purposes as further described in the Data Retention section of this Policy.

3.3 Location Data

We collect location-related information in the following ways:

Delivery Address: The address you provide for delivery purposes is stored as part of your account and order history.
Delivery Zone Verification: We use your postal code or ZIP code, and in some cases your more precise location, to determine whether delivery service is available in your area and to match you with dispensaries that serve your zone.
Precise Geolocation (with permission): If you grant permission through your browser or mobile device, we may collect your precise GPS-based location to improve delivery accuracy and provide location-based features. You may revoke this permission at any time through your device settings, although doing so may limit certain features.
Approximate Location: We may derive an approximate location from your IP address for purposes such as displaying relevant dispensary listings, enforcing jurisdictional restrictions, and complying with applicable law.

3.4 Device and Browser Data

When you access the Platform, we automatically collect certain technical information, including:

IP address.
Browser type and version.
Operating system and device type.
Device identifiers (such as mobile advertising IDs, where applicable and permitted).
Screen resolution and language settings.
Referring URLs and exit pages.
Date and time of access.
Pages and features accessed, time spent on pages, and navigation paths.
Crash reports and error logs.

This information is used to maintain and improve the security, performance, and functionality of the Platform.

3.5 Cookies and Tracking Technologies

We use cookies, pixel tags, web beacons, local storage, and similar tracking technologies on the Platform. Please see Section 9 (Cookies Policy) of this Privacy Policy for full details.

3.6 Communications Data

The Platform includes a live chat feature that enables direct communication between customers and dispensary partners. We collect and store the content of these chat communications. These communications are subject to our content moderation policies and may be reviewed for safety, fraud prevention, and compliance purposes. We recommend that users do not share sensitive personal or financial information through the chat feature.

3.7 Information from Third Parties

We may receive information about you from third-party sources, including:

Identity and age verification service providers that confirm your identity documents.
Payment processors that provide transactional data.
Analytics providers.
Public sources, such as business registries, where relevant to dispensary partner verification.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 To Provide and Operate the Platform

Creating and managing your account.
Processing and facilitating orders between customers and dispensary partners.
Enabling the live chat feature between customers and dispensaries.
Verifying delivery zones and matching customers with available dispensary partners.
Displaying order history and enabling reordering.
Publishing and displaying product reviews and ratings.
Facilitating payments through our third-party payment processor.

4.2 For Age Verification and Regulatory Compliance

Verifying that users meet the minimum age requirement to use the Platform (19+ in Canada).
Complying with applicable cannabis laws, regulations, and licensing requirements in the jurisdictions in which we operate.
Maintaining records required by regulatory authorities.
Responding to lawful requests from government authorities.

4.3 For Safety, Security, and Fraud Prevention

Detecting, investigating, and preventing fraudulent transactions and other illegal or unauthorized activities.
Monitoring and enforcing our Terms of Use and other Platform policies.
Protecting the rights, property, and safety of BudOnTheRun, our users, dispensary partners, and the public.
Verifying the identity of dispensary partners and their licensing status.

4.4 For Communications

Sending transactional communications such as order confirmations, delivery status updates, and receipts.
Responding to your customer service inquiries and support requests.
Sending administrative notices about your account, changes to our policies, or service updates.
With your consent where required, sending promotional and marketing communications about new features, offers, or cannabis products available through the Platform. You may opt out of marketing communications at any time.

4.5 For Platform Improvement and Analytics

Analyzing usage patterns and trends to improve the functionality and user experience of the Platform.
Conducting research and development.
Testing new features and improvements.
Generating aggregated, de-identified data and statistics for internal reporting or external sharing.

4.6 Legal Bases for Processing

Where applicable law requires a legal basis for processing personal information, we rely on the following bases:

Consent: Where you have given us consent to process your information for a specific purpose, such as receiving marketing communications or collecting precise location data.
Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide the Platform services you have requested).
Legal Obligation: Processing is necessary to comply with applicable laws, including cannabis regulations, age verification requirements, and tax obligations.
Legitimate Interests: Processing is in our legitimate interests, such as fraud prevention, Platform security, and improving our services, provided these interests are not overridden by your privacy rights.

5. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 With Dispensary Partners

When you place an order through the Platform, we share the information necessary to fulfill your order with the relevant dispensary partner. This includes your name, delivery address, order details, and contact information. Dispensary partners may also receive your chat messages sent through the live chat feature. Dispensary partners are independently responsible for their handling of your information once received, and their privacy practices may differ from ours.

5.2 With Service Providers and Subprocessors

We share information with third-party service providers that perform functions on our behalf, including:

Payment Processing: We use third-party payment processors to securely handle payment transactions. These providers receive the information necessary to process payments.
Mapping and Geolocation Services: We use third-party mapping and geolocation services (such as Google Maps or similar providers) to display delivery zones, calculate delivery routes, and provide location-based features. Use of these services is subject to the third party’s own privacy policies.
Identity and Age Verification: We may use third-party identity verification services to confirm the age and identity of users, particularly where required by applicable cannabis regulations.
Cloud Infrastructure and Hosting: Our Platform is hosted on cloud infrastructure provided by third-party providers who may store and process data on our behalf.
Analytics: We use third-party analytics tools to analyze Platform usage and improve user experience.
Customer Support: We may use third-party customer support platforms to manage support communications.
Email and Notification Services: We use third-party providers to deliver transactional and marketing emails and push notifications.

Our service providers are contractually required to handle your information only as directed by us, to maintain appropriate security measures, and not to use your information for their own purposes.

5.3 For Legal and Regulatory Purposes

We may disclose your information when we reasonably believe disclosure is required or permitted by law, including:

In response to a court order, subpoena, search warrant, or other lawful legal process.
To comply with regulatory requirements applicable to cannabis delivery services.
To protect the rights, property, or safety of BudOnTheRun, our users, or the public.
To detect, prevent, or address fraud, security issues, or technical problems.

5.4 Business Transfers

If BudOnTheRun is involved in a merger, acquisition, sale of assets, financing, or reorganization, your personal information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy, to the extent required by applicable law.

5.5 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

6. Age Verification

Because our Platform facilitates access to cannabis products, age verification is a legal and operational requirement. We take our obligations in this area seriously.

All users must confirm their date of birth at the time of account registration. We require users to be at least 19 years of age to register and use the Platform.

In addition to self-reported date of birth, we may require users to submit a copy of valid government-issued photo identification for age and identity verification. This may be processed directly by BudOnTheRun or by a third-party identity verification service. Identity documents collected for this purpose are stored securely and used solely for the purpose of age and identity verification and related regulatory compliance.

If you are located in a province or territory where cannabis delivery is not lawfully permitted, you may not be eligible to use the Platform.

BudOnTheRun does not knowingly collect personal information from, or provide services to, individuals under the applicable minimum age. If we learn that we have collected information from a person under the minimum age requirement without proper verification, we will take steps to delete that information promptly.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The following factors inform our retention decisions:

Active Accounts: We retain your account information and associated data for as long as your account remains active.
Order History: Order records are retained for a minimum of seven (7) years from the date of the transaction, or such longer period as may be required by applicable cannabis regulations, tax law, or other legal obligations.
Age Verification Records: Records related to age verification, including copies of identity documents where collected, are retained for the period required by applicable cannabis regulations in the relevant jurisdiction.
Communications: Chat logs, support tickets, and other communications may be retained for up to three (3) years following the conclusion of the communication, or longer if related to an ongoing legal matter or dispute.
Account Closure: When you close your account, we will retain certain information as required by law, for fraud prevention, to resolve disputes, and to enforce our agreements. Information that is no longer needed for any legitimate purpose will be deleted or anonymized.
Legal Holds: We may retain information beyond standard retention periods when it is subject to a legal hold or ongoing investigation.

When personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with our internal data retention procedures.

8. Your Privacy Rights

You have certain rights with respect to your personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation:

Right of Access: You have the right to request access to the personal information we hold about you, and to receive information about how it is being used and disclosed.
Right to Correction: You have the right to challenge the accuracy and completeness of your personal information and request that it be corrected or amended.
Right to Withdraw Consent: Where we process your information based on your consent, you may withdraw that consent at any time, subject to legal and contractual restrictions. Withdrawing consent may affect your ability to use certain features of the Platform.
Right to Complain: If you believe that we have not handled your personal information in compliance with PIPEDA, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.

8.2 How to Exercise Your Rights

You may exercise your privacy rights by contacting us at:

Email: privacy@budontherun.com

We may need to verify your identity before processing your request. We will not use information provided for the purpose of a privacy rights request for any other purpose. We will respond to requests within the timeframe required by applicable law.

You may also manage certain information directly through your account settings, including updating your profile information and managing communication preferences.

9. Cookies Policy

We use cookies and similar tracking technologies on the Platform. This section explains what these technologies are, how we use them, and your choices.

9.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to site operators. Other tracking technologies we use include pixel tags (web beacons), local storage objects (HTML5), and session storage.

9.2 Types of Cookies We Use

We use the following categories of cookies:

Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login, session management, shopping cart functionality, and security. You cannot opt out of these cookies while using the Platform.
Functional Cookies: These cookies allow the Platform to remember your preferences (such as language, delivery address defaults, and display preferences) and provide enhanced, personalized features.
Performance and Analytics Cookies: These cookies collect information about how users interact with the Platform, such as which pages are visited most often and whether users encounter error messages. This information is used to improve the Platform. We may use third-party analytics providers (such as Google Analytics) that set their own cookies.
Targeting and Advertising Cookies: We may use cookies to deliver relevant advertising and to measure the effectiveness of our marketing campaigns. These cookies may track your browsing habits across different websites. We will obtain your consent before placing non-essential targeting cookies where required by applicable law.
Third-Party Cookies: Some features of the Platform, including embedded maps (from mapping service providers), payment widgets, and live chat integrations, may involve third-party cookies set by those service providers. These are governed by the respective provider’s privacy policies.

9.3 Your Cookie Choices

When you first visit the Platform, you will be presented with a cookie consent banner that allows you to accept or customize your cookie preferences. You may change your preferences at any time by visiting our Cookie Settings.

You may also control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking certain cookies may impair the functionality of the Platform. For information about managing cookies in your browser, refer to your browser’s help documentation.

To opt out of Google Analytics tracking, you may use the Google Analytics Opt-out Browser Add-on.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit using TLS/SSL protocols.
Encryption of sensitive data at rest.
Access controls limiting who within our organization can access personal information.
Regular security assessments and vulnerability testing.
Employee training on data privacy and security practices.
Data breach response procedures.

Despite these measures, no transmission of data over the internet and no data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at privacy@budontherun.com.

In the event of a data breach that is likely to result in a real risk of significant harm to individuals, we will notify the relevant supervisory authority and affected individuals as required by applicable law, including PIPEDA’s breach notification requirements.

11. International Data Transfers

BudOnTheRun operates in Canada. Your personal information may be stored and processed in Canada or in other countries where our service providers operate. By using the Platform, you acknowledge that your information may be transferred to and processed in countries outside Canada, where data protection laws may differ from those in your province or territory.

Where personal information is transferred outside of Canada, we take steps to ensure that it receives protection consistent with PIPEDA and applicable provincial privacy law, including by entering into data processing agreements with our service providers that include appropriate safeguards.

12. Children’s Privacy

The Platform is intended solely for users who are 19 years of age or older. The Platform is not directed to minors, and we do not knowingly collect personal information from individuals under the minimum age. If you are a parent or guardian and believe that a minor has provided us with personal information, please contact us at privacy@budontherun.com so that we can take appropriate action.

13. Links to Third-Party Sites

The Platform may contain links to third-party websites, including dispensary partner websites, payment processors, and other external services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices of third parties.

14. Do Not Track Signals

Some browsers include a “Do Not Track” (DNT) signal feature. Because there is no consistent industry standard for how DNT signals should be interpreted, the Platform does not currently respond to browser DNT signals. You may, however, manage your tracking preferences through our Cookie Settings and through your browser settings as described in the Cookies Policy section above.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of our Platform. When we make material changes, we will notify you by posting the updated Policy on the Platform with a new effective date, and we may also notify you by email or through an in-app notification where required by applicable law.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically.

16. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, or if you wish to exercise any of your privacy rights, please contact us at:

BudOnTheRun Privacy Office
Email: privacy@budontherun.com
Website: www.budontherun.com