Privacy Policy

Last updated: October 11, 2026

420Express (“420Express”, “we”, “us”) respects your privacy. This Privacy Policy explains what personal information we collect when you visit our website, create an account, place an order or contact us; why we collect it; how we use, share and protect it; and the choices you have. We handle personal information in line with Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws.

1. Scope

This policy applies to personal information handled by 420Express through our website, customer accounts, checkout, order fulfilment and delivery, customer support, Rewards and marketing emails. Websites and services of other companies that we link to have their own privacy policies.

2. Information we collect

Depending on how you use our services, we may collect:

• Identity and age: your name and, when required, your date of birth or confirmation that you are of legal age.
• Contact details: email address, phone number, billing address and delivery address.
• Account information: username, password (stored in encrypted form), order history, Rewards points balance and store credit.
• Order information: products, quantities, prices, discounts, delivery method, delivery instructions and order status.
• Payment confirmation: the details needed to match your Interac e-Transfer to your order (sender name, amount and message). We never ask for your online banking password and we do not collect credit-card numbers.
• Communications: messages you send to our support team, product reviews and survey answers.
• Email sign-up: if you subscribe to our emails, your email address, the date and the consent you gave.
• Technical information: IP address, browser and device type, pages visited, the website or ad that brought you to us, and cookie data (see Cookies and tracking).

3. How we collect it

• From you, when you create an account, place an order, subscribe, write a review or contact us.
• Automatically, through cookies, server logs and security tools when you use the website.
• From service providers, for example delivery status and tracking updates from the carrier.
• When the law requires or allows it.

4. How we use it

We use personal information to:

• create and manage your account;
• confirm that you are of legal age and eligible to order;
• receive, prepare, deliver and support your orders, including order and delivery updates and tracking numbers;
• confirm payments and prevent fraud, abuse and security incidents;
• apply one-time offers fairly: to make sure the first-order discount is used once per customer, we compare the email, phone number and delivery address of new orders with earlier orders;
• run the 420Express Rewards program (points and store credit);
• answer questions and handle cancellations, replacements and store credit;
• maintain, secure and improve the website, and understand how it is used (only with your consent for analytics);
• send promotional emails, only if you agreed to receive them;
• meet our accounting, tax and other legal obligations.

5. Your consent

We ask for your consent where the law requires it and collect only what we reasonably need for the purposes above. Placing an order means you agree that we use your information to process and deliver it. Optional uses — marketing emails, analytics and advertising cookies — are off until you agree, and you can withdraw your consent at any time (see Your rights and choices). Withdrawing consent does not affect what was already done and may mean some features are no longer available.

6. Cookies and tracking

Cookies are small files stored by your browser. When you first visit, a banner lets you accept all, reject or choose which optional cookies we may use. Nothing optional runs before you choose.

Type	What it does	Examples	When it is used
Necessary	Log-in, cart, checkout, security, and remembering your cookie and age choices.	WordPress and WooCommerce session and log-in cookies, le420_consent, le420_age_ok	Always (the store cannot work without them)
Analytics	Shows us which pages work and which link or ad brought an order, so we can improve the store.	Google Analytics (_ga, _ga_*); WooCommerce order source (sbjs_*)	Only if you accept
Marketing	Measures how well our ads on Facebook and Instagram work.	Meta (Facebook) Pixel (_fbp, _fbc)	Only if you accept

We also keep a few non-personal settings in your browser storage, such as which announcements or popups you have already closed.

You can change your choice at any time with Cookie Settings (also at the bottom of every page), or block and delete cookies in your browser. Blocking necessary cookies will stop log-in, cart or checkout from working. Google Analytics is provided by Google LLC (Google Privacy Policy) and the Meta Pixel by Meta Platforms, Inc. (Meta Privacy Policy).

7. Who we share it with

We do not sell your personal information. We share only what is reasonably needed with:

• Service providers that run the store for us: website hosting, security, email and IT providers.
• Delivery partners: Canada Post or another carrier for mail orders, and our local delivery drivers for same-day delivery (name, address, phone number and delivery notes).
• Analytics and advertising providers (Google, Meta), only if you accepted those cookies.
• Professional advisers such as accountants and lawyers.
• Government, regulators or law enforcement, when the law requires it.
• A buyer or successor if our business is sold or reorganised, with appropriate safeguards.

Our service providers may use your information only to provide their service to us and must protect it.

8. Marketing emails

We send promotional emails only with your consent, as required by Canada’s Anti-Spam Legislation (CASL). Every promotional email has an unsubscribe link, or you can email us. We will still send messages needed for your account and orders, such as order confirmations and delivery updates.

9. How long we keep it

We keep personal information only as long as needed for the purposes in this policy or as required by law. Order and payment records are kept for as long as tax and accounting rules require (in Canada, generally six years). Email sign-ups are kept until you unsubscribe. When information is no longer needed, we delete or anonymise it.

10. Security

We protect personal information with safeguards suited to its sensitivity, including encrypted connections (HTTPS), restricted administrator access, strong passwords and backups. No online system is completely secure. If a breach creates a real risk of significant harm, we will notify you and the Privacy Commissioner as the law requires.

11. Storage outside Canada

Some of our service providers (for example hosting, email, Google and Meta) may store or process information outside your province or outside Canada, including in the United States. Information stored there may be subject to the laws of that country.

12. Your rights and choices

Subject to the law and to confirming your identity, you can:

• ask what personal information we hold about you and get a copy;
• correct information that is wrong (most account details can be changed in My Account);
• withdraw consent for marketing emails (unsubscribe link) or cookies (Cookie Settings);
• ask us to close your account and delete your information, except what we must keep by law;
• ask questions about how we handle your information.

We answer requests within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

13. Adults only

Our website and products are only for adults who have reached the legal age to buy cannabis where they live (19 in most provinces, 18 in Alberta and 21 in Quebec). We do not knowingly collect information from minors. If you believe a minor has given us information, please contact us and we will delete it.

14. Changes to this policy

We may update this policy when our practices, services or the law change. The new version will be posted here with a new date. If the changes are important, we will also tell you, for example with a notice on the website or by email.

15. Contact us

Questions, requests or complaints about privacy can be sent to our privacy officer: