Updated April 10, 2019
Our Commitment to You
You have a right to know how we collect, use and disclose your personal information and to access or correct that information if it is inaccurate. You can rest assured that we will, to the best of our ability, ensure that your personal information held by us remains accurate, confidential and secure.
How We Collect and Use Your Personal Information
CannTrust only collects and uses personal information for purposes that would be considered reasonable in the circumstances and only such personal information as is required for the purposes of providing our products or services. Personal information is collected directly from the person concerned, their authorized representatives or from other third parties that may have your personal information, such as health care providers, licensing, regulatory or credential verification organizations.
CannTrust Uses Your Personal information for the Following Purposes:
- to process your registration application with us and determine your eligibility for our products and services;
- to verify your medical declaration, your identity and other documentation you provide to us;
- to communicate with you to offer and provide you products and services and to better understand your need for our products and services, including to contact you to conduct surveys on the quality of our products or services;
- to process payment for our products and services;
- to meet our legal and regulatory obligations; and
- other purposes consistent with these purposes.
Because we value your trust, we will only ask for personal information that we need and, when we ask you for additional personal information, we will let you know why we need it.
Disclosure of Personal Information
We may use your personal information to communicate information to you, including to contact you to conduct surveys on the quality of our products and services, and we may disclose your personal information to third parties, but only:
- to certain persons in response to a court order, subpoena, search warrant, law or regulation;
- to third parties assisting CannTrust with the collection of monies owing to CannTrust for the purchase of its products or services.
A record is kept each time personal information is disclosed, noting the scope and nature of the disclosure, the date and the identity of the party to whom the disclosure was made.
In the event CannTrust is acquired, merges with another entity, becomes insolvent and/or declares bankruptcy, your information may be transferred or sold to another entity. However, this would only be done in accordance with applicable laws to ensure your personal information privacy rights are protected.
We may also use and disclose personal information, as permitted by privacy laws and regulations, to corporate affiliates, parents and other entities owning or controlling, owned or controlled by or under common ownership or control by CannTrust; however, we will only disclose information that has been “de-identified” and therefore does not provide any information that is identifiable to you. This de-identified information is used by these parties for research purposes to identify improvements in the products or services we provide.
In addition, CannTrust is always seeking better ways to serve you. In this regard, we may perform statistical analyses of the traffic patterns, site usage and behaviors associated with our websites, products, services, analyses of utilization information in the aggregate to study outcomes, costs, and service enhancements. We may use these analyses of aggregate data to generate new information which we may sell or disclose to other companies or organizations. In these circumstances, we will only disclose information that has been “de-identified” and therefore does not provide any information that is identifiable to you.
You can refuse to consent to the collection, use or disclosure of your personal information, or withdraw your consent to the collection, use or disclosure of personal information at any time by giving us reasonable notice. Your refusal or withdrawal of consent may result in the limitation or termination of our ability to provide you products or services, at CannTrust’s sole discretion.
How to Correct or Update Your Personal Information
While CannTrust tries to ensure that personal information is accurate, complete and up-to-date, CannTrust does not routinely update your personal information, unless required. Therefore, it is your responsibility to inform CannTrust promptly of any changes in your personal information. CannTrust will, from time to time, verify the personal information that you provide as part of its routine process of client verification or customer service. This may include verifying other elements of your personal information with associated stakeholders.
If you believe that personal information in your records may be inaccurate or incomplete, we make it easy for you to access, verify and update it. If incorrect personal information has been provided to third parties, we will convey the corrected information to them, if necessary.
If we do not agree to change your personal information, you may challenge our decision. We will make a record of this challenge, and if necessary, disclose the challenge to third parties who also possess the personal information.
You can help us by advising us of any changes to your personal information. You can correct or update your personal information at any time using the following options:
Call CannTrust toll-free at:
1 (855) 794-2266
Write to CannTrust at:
P.O. Box 92068, 9200 Weston Road
Vaughan, Ontario, L4H 3J3
Retention of Personal Information
We keep your personal information only as long as it is required for the reasons it was collected. The length of time CannTrust retains your personal information varies, depending on the purpose for which it was collected and the nature of the information. This period may extend beyond the end of your relationship with CannTrust but it will be only for so long as it is necessary. When your personal information is no longer required for our purposes, procedures are in place to destroy, delete, erase or convert the information in accordance with applicable laws.
Currently, the principal place in which CannTrust holds your personal information is Ontario, Canada. We use accredited, secure, off-site digital storage facilities in Canada that do not transmit or store data outside of Canada.
Access to Personal Information
CannTrust allows you to access and review your personal information in accordance with applicable laws. We will respond to a request for access within a reasonable time and generally no later than 30 days following receipt of the request. If CannTrust denies your request for access to personal information, you will be told why, unless we are prohibited by law from doing so. You may challenge our decision.
You can view your information through your online account. To review other personal information that CannTrust has about you, simply make a written request to our Privacy Officer. There may be a charge for retrieving a complete list of personal information, in which case you will be notified in advance and you may, at that time, withdraw your request.
If you have a sensory disability, on request, we will give you access to your personal information in an alternative format if available. If it is necessary and if we can reasonably do so, we will convert the personal information into an alternative format.
Once you have the personal information, all you have to do is check it for accuracy and let us know if there are any corrections required. If appropriate supporting documentation is provided or required, we will correct our records or make note of any differences. If personal information has been provided to third parties, we will convey the corrected information or note any differences to them, if necessary.
Security of Personal Information
CannTrust, its staff and our partners are committed to protecting the security of the personal information you choose to share with us.
Every CannTrust employee, as a condition of employment, takes responsibility for protecting the privacy, confidentiality and security of personal information. This obligation remains in effect even after an employee leaves CannTrust. Suppliers of services to CannTrust, such as e-commerce and credential verification firms, are required to sign contracts requiring them to protect the privacy and confidentiality of personal information in accordance with applicable laws.
CannTrust also has extensive controls to maintain the security of its operations and information systems, including:
- physical access to those areas where personal information is gathered, processed or stored is restricted to authorized employees.
- appropriate controls are in place for computer systems and data processing procedures and these controls are reviewed on an ongoing basis to ensure compliance with our security and privacy policies.
- CannTrust destroys or erases any personal information when it is no longer needed, in accordance with applicable standards and laws.
Non-personal information is information that cannot identify you personally, such as, browser information and program data that records the website page choices you make.
How to Contact Us
Phone: 1 (855) 794-2266, or
P.O. Box 92068, 9200 Weston Road
Vaughan, Ontario, L4H 3J3
© 2019 CannTrust Ltd. · Privacy