Last updated 21 August 2026
ExWeed Delivery delivers cannabis to adults in Toronto and York Region. This policy explains what personal information we collect, why we collect it, who sees it, and what you can do about it. It covers exweeddelivery.com and every order placed through it.
We handle personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario law.
What we collect
When you place an order. Your name, delivery address, phone number, email address, what you ordered, and, if you pay that way, the reference attached to your e-Transfer.
When you create an account. The same details, plus a password stored as a one-way hash. Nobody here can read your password, including us.
When you message us. Whatever you write, plus the name and email you send it from.
While you browse. Your IP address, browser and device type, the pages you open, and the site that sent you. This arrives through server logs and cookies.
When you confirm your age. We store the fact that you answered yes, in a cookie on your device. We do not ask for or store your date of birth.
We do not collect health information and we never ask why you are buying.
What we use it for
- Taking, packing and delivering your order.
- Confirming that payment arrived.
- Checking ID at the door. Our driver looks at government-issued photo ID on every drop.
- Answering your messages and fixing problems with an order.
- Keeping the site running and catching fraud.
- Sending order emails, which are transactional rather than marketing.
If you opt in to marketing email we use your address for that as well, and every one of those messages carries an unsubscribe link that works. Opting out of marketing does not stop order emails, because you need those to know where your delivery is.
Who sees it
Our drivers see your name, address, phone number and order. That is what it takes to find you and check your ID.
Our service providers — hosting, email delivery — process data on our behalf under contract, only for the job we hired them to do.
Nobody else. We do not sell personal information. We do not rent it, trade it, or hand it to advertisers, and we do not build profiles for anyone else to buy.
We disclose information without your consent only where the law leaves us no choice, such as a warrant, a court order, or a legal obligation we cannot refuse.
Payment and your bank
We take payment by Interac e-Transfer or in cash at the door. An e-Transfer happens inside your own bank rather than on this site, so we never see or store your banking credentials, card numbers or account numbers. What reaches us is confirmation that money arrived and the name attached to the transfer. A cash payment leaves no record with us beyond the order itself.
If you pay by e-Transfer, the line on your statement is the recipient name. It does not describe what you ordered. Cash leaves no statement line at all.
Cookies
Cookies are small files a site stores on your device. We use four kinds:
- Age confirmation. Records that you told us you are 19 or older, so the check does not appear on every page. Lasts 30 days.
- Cart and session. Keeps your basket and your login working while you move around the site. WooCommerce sets these.
- Preferences. Remembers small choices, such as a coupon you copied.
- Analytics. Counts visits and shows us which pages people actually use.
You can clear or block cookies in your browser settings. Blocking the cart and session cookies will stop checkout from working, because there is nowhere left to hold your basket.
How long we keep it
| Information | Kept for |
|---|---|
| Order and delivery records | 7 years, which is the retention period Canadian tax law expects |
| Account details | Until you ask us to close the account |
| Messages to support | 2 years |
| Server logs | 90 days |
| Marketing list | Until you unsubscribe |
When a retention period ends we delete the record or strip it of anything that identifies you.
How we protect it
The site runs over HTTPS. Admin access needs a password and is limited to people who need it. Passwords are hashed. Payment never touches our servers, so there is no card data here to steal.
No system is perfect and we will not pretend otherwise. If a breach ever puts you at real risk of significant harm, we will tell you and report it to the Office of the Privacy Commissioner of Canada, as PIPEDA requires.
Your rights
You can ask us to:
- Show you what personal information we hold about you.
- Correct anything that is wrong.
- Delete your account and the information attached to it, except records we are legally required to keep.
- Stop marketing email, at any time, for any reason or none.
- Withdraw consent to our handling of your information. Withdrawing it means we can no longer deliver to you, since we cannot bring an order to an address we are not allowed to keep.
Email [email protected] and we will answer within 30 days. We may ask you to confirm who you are first, so we are not handing your information to somebody else.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Age
This site is for adults 19 and over. We do not knowingly collect information from anyone under 19. If we find out we have, we delete it. If you believe a minor has given us information, email [email protected] and we will remove it.
Other sites
Some pages link out to municipal by-laws, government resources and brand sites. Those are theirs, not ours, and their privacy practices are their own. Read their policies if you plan to hand them anything.
Changes
When we change this policy we update the date at the top. If a change materially affects how we handle your information, we will say so on the site rather than hoping you notice.
Contact
Privacy questions, access requests and complaints all go to the same place.
ExWeed Delivery
Email [email protected]
Serving Toronto and York Region, Ontario, Canada
See also our Terms of Service.