Privacy Policy
Last Updated: September 24, 2026
Grassroots Co. (“Grassroots,” “we,” “us,” or “our”) is operated by 1999295 Ontario Inc. and is committed to protecting the privacy and personal information of our customers and website visitors.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit our website, place an order, communicate with us, or shop at one of our Ontario retail locations.
We handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable.
1. Information We Collect
The information we collect depends on how you interact with Grassroots Co.
Information You Provide
When you place an order, contact us, subscribe to communications, participate in a promotion, or otherwise interact with us, we may collect information such as:
- Name
- Email address
- Telephone number
- Billing or delivery address
- Information required to process or fulfill an order
- Communications you send to us
- Other information you voluntarily provide
Age & Identity Verification
Cannabis may only be sold or provided to individuals who meet Ontario's legal age requirements.
Grassroots Co. may request and inspect valid government-issued identification where necessary to verify a person's age or identity.
Unless otherwise required for a lawful purpose, presenting identification for age verification does not necessarily mean that Grassroots Co. records or retains the identification information.
Transaction Information
When you make a purchase online or at one of our stores, we may collect information relating to the transaction, including:
- Products purchased
- Date and time of purchase
- Transaction amount
- Payment method
- Store location
- Order or transaction number
- Pickup or delivery information, where applicable
Certain transaction records may be maintained to satisfy legal, regulatory, accounting, tax or business requirements.
Payment Information
Payments may be processed by third-party payment processors.
When payment information is entered directly into a payment processor's system, Grassroots Co. may not receive or retain your complete credit or debit card information.
Our payment providers may collect and process payment information according to their own privacy policies and security practices.
Delivery Information
Where delivery is offered, we may collect information necessary to complete the delivery, such as:
- Recipient name
- Delivery address
- Telephone number
- Order information
- Delivery status and related records
Delivery information may be retained where required by applicable law or regulation.
Automatically Collected Information
When you visit our Website, certain technical information may be collected automatically, including:
- IP address
- Browser and device information
- Operating system
- Pages viewed
- Referring website or source
- Approximate visit time and duration
- Website interactions
- Cookie and similar technology information
2. How We Use Personal Information
Grassroots Co. may use personal information to:
- Process, prepare and fulfill orders;
- Provide pickup or delivery services where available;
- Verify age or identity where required;
- Process payments and refunds;
- Communicate with customers regarding orders, inquiries or customer service matters;
- Operate and improve our Website and retail services;
- Maintain appropriate transaction and business records;
- Detect or prevent fraud, misuse or unauthorized activity;
- Maintain the security of our stores, employees, customers and products;
- Comply with applicable legal and regulatory requirements;
- Respond to lawful requests from regulators, government authorities or law enforcement; and
- Send marketing communications where we have the appropriate consent.
We will not use personal information for purposes materially different from those for which it was collected without obtaining consent where consent is required by law.
3. Marketing Communications
Where you have provided the required consent, Grassroots Co. may send promotional emails, offers, store updates or other marketing communications.
You may withdraw your consent to receive electronic marketing communications at any time by using the unsubscribe mechanism contained in the communication or by contacting us at grassrootscosuds@gmail.com.
Transactional communications relating to an order, payment, pickup, delivery, customer service request or other existing transaction may still be sent where appropriate.
4. In-Store Video Surveillance
Grassroots Co. retail locations use video surveillance systems for security, safety, loss prevention and regulatory purposes.
Video surveillance may cover areas such as entrances and exits, sales areas, points of sale, receiving areas and cannabis storage areas.
Surveillance recordings are retained in accordance with applicable legal and regulatory requirements and may be disclosed to the Alcohol and Gaming Commission of Ontario (AGCO), law enforcement or other authorized parties where required or permitted by law.
Video surveillance is not used in areas where individuals would reasonably expect a high degree of personal privacy.
5. How We Share Personal Information
Grassroots Co. does not sell or rent customer personal information to third parties for their own marketing purposes.
We may disclose personal information in limited circumstances, including:
Service Providers
We may use third-party companies to provide services such as:
- Website hosting
- Online ordering
- Payment processing
- Email and communications
- Information technology services
- Analytics
- Security
- Professional or business services
These providers may receive information necessary to perform services on our behalf.
Legal & Regulatory Requirements
Information may be disclosed to the Alcohol and Gaming Commission of Ontario (AGCO), the Ontario Cannabis Store (OCS), law enforcement, courts, government authorities or other authorized organizations where required or permitted by law.
Business Transactions
If 1999295 Ontario Inc. or part of its business is sold, reorganized, merged or transferred, information may be disclosed as part of that transaction where permitted by applicable law and subject to appropriate safeguards.
Safety & Legal Protection
We may disclose information where reasonably necessary and legally permitted to protect Grassroots Co., our customers, employees or others; investigate suspected fraud or unlawful activity; enforce our legal rights; or respond to a lawful request.
6. Cookies & Similar Technologies
Our Website may use cookies and similar technologies to operate properly, remember preferences, understand Website usage and improve our services.
These may include:
Essential Cookies: Necessary for basic Website functionality, such as navigation, age verification, shopping functions or remembering store selections.
Analytics Cookies: Used to understand how visitors interact with our Website, such as pages visited and general traffic patterns.
Marketing Cookies: Where applicable and permitted, these may help measure marketing activity or provide relevant communications.
You may be able to control cookies through your browser or available Website cookie settings.
Disabling certain cookies may affect Website functionality.
7. Data Security
Grassroots Co. takes reasonable administrative, technical and physical measures appropriate to the sensitivity of the information to protect personal information against unauthorized access, use, disclosure, alteration or loss.
Where third-party providers process information on our behalf, we seek to use reputable providers and appropriate safeguards.
No Internet transmission or electronic storage system can be guaranteed to be completely secure.
8. Data Retention
We retain personal information only for as long as reasonably necessary to:
- Fulfill the purposes for which it was collected;
- Provide requested products or services;
- Meet legal and regulatory obligations;
- Maintain appropriate business, tax and accounting records;
- Resolve disputes; or
- Protect legitimate legal and business interests.
Information that is no longer reasonably required will be securely deleted, destroyed or anonymized as appropriate, subject to applicable legal requirements.
9. Accessing or Correcting Your Information
Subject to applicable law, you may request access to personal information Grassroots Co. holds about you.
You may also request that inaccurate or incomplete personal information be corrected.
We may need to verify your identity before responding to an access or correction request.
Certain information may be withheld where permitted or required by law.
To request access to or correction of your personal information, contact us at grassrootscosuds@gmail.com.
10. Withdrawing Consent
Where Grassroots Co. relies upon consent to collect, use or disclose personal information, you may withdraw that consent, subject to reasonable notice and any applicable legal or contractual restrictions.
Withdrawing consent may affect our ability to provide certain products or services where the information is necessary to provide them.
Requests to withdraw consent may be sent to grassrootscosuds@gmail.com.
11. Third-Party Websites & Services
Our Website may contain links to websites, platforms or services operated by third parties.
Grassroots Co. is not responsible for the privacy practices, security or content of independent third-party websites.
We encourage you to review the privacy policy of any third-party service you choose to use.
12. Individuals Under 19
Grassroots Co.'s cannabis retail services are intended for individuals who are 19 years of age or older.
We do not knowingly sell cannabis to or fulfill cannabis orders for anyone under 19.
If we become aware that personal information has been collected from an individual under 19 in circumstances where it should not have been collected, we will take reasonable steps to address the situation in accordance with applicable law.
13. Privacy Complaints & Questions
If you have a question, concern or complaint about how Grassroots Co. handles your personal information, please contact us at:
We will review privacy concerns and respond as appropriate under applicable privacy law.
You may also have the right to contact the Office of the Privacy Commissioner of Canada regarding a privacy concern.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our Website, services, business practices or legal obligations.
The current version will be posted on our Website and will display the date it was last updated.
Where required by law, we will provide additional notice or obtain consent regarding material changes.
15. Contact Us
If you have questions, concerns or requests regarding this Privacy Policy, or would like to request access to or correction of your personal information, please contact us:
Grassroots Co.
Operated by 1999295 Ontario Inc.
Email: grassrootscosuds@gmail.com
Grassroots Co. – Azilda
93 Notre Dame St W
Azilda, Ontario
Cannabis Retail Store Authorization: CRSA1389676
Grassroots Co. – Minnow Lake
20 Second Ave N
Sudbury, Ontario
Cannabis Retail Store Authorization: CRSA1504301
Grassroots Co. – Lasalle
1113 Lasalle Blvd
Sudbury, Ontario
Cannabis Retail Store Authorization: CRSA1179919
Ontario Authorized Cannabis Retailer | 19+
You may also contact the Office of the Privacy Commissioner of Canada if you have concerns regarding the handling of your personal information.
