Privacy Policy.
What we collect, why we collect it, how long we keep it, and what you can ask us to do with it — written to be read rather than to be survived.
In effect 4 September 202616 sections
Overview
At BUDBC, reachable at budbc.cc, the privacy of the people who shop with us is treated as part of the product rather than as paperwork. This policy sets out what we collect, why we collect it, how long we keep it and what you can ask us to do with it.
It covers this website only. Anything you tell us away from the site — in an email, over the phone, or in person — is not governed by this document, though we handle it with the same care.
If a question here is not answered, write to support@budbc.cc and a person will answer it.
Consent
By using the site, placing an order or creating a panel, you consent to the handling of your information as described here. Where the law requires express consent for a particular use — marketing email is the usual example — we ask for it separately and you can withdraw it at any time.
Age restriction
This is a cannabis retailer. You must be 19 years of age or older to browse, hold an account or place an order, and the site asks you to confirm that before it shows you anything.
We record that the confirmation happened. We do not ask for, collect or store a copy of your identification as part of that check.
Cannabis is not sold to minors under any circumstances. Where an order gives us reasonable grounds to believe the buyer is under 19, we cancel it and refund it.
Information we collect
You are told what we are asking for, and why, at the moment we ask for it. In practice the information falls into five groups:
- Account details — the email address and password you register with, and the display name on your panel.
- Order and delivery details — your name, shipping address, and a phone number if you choose to give one so the courier can reach you.
- Payment references — the reference code attached to an Interac e-transfer, or the receiving address and transaction id of a Bitcoin payment. We never see or store card numbers, because we do not accept cards.
- Panel and rewards data — your loyalty points balance, lifetime spend for the purposes of your badge tier, your order history, and the state of your Bud: which one you chose, its stage, and your streak.
- Correspondence — anything you send us by email, including attachments, kept with your order so that whoever picks the thread up next can see what has already been said.
How we use your information
We use what we collect to:
- take, pack, ship and track your order, and tell you where it is;
- confirm that a payment has settled and match it to the right order;
- operate your panel — your points balance, your badge tier, your order history and your Bud;
- answer your emails and resolve anything that has gone wrong with an order;
- keep the site working, diagnose faults, and understand which pages people actually use;
- detect and prevent fraud, chargeback abuse and attempts to buy on behalf of a minor;
- send you service email about orders you have placed, and — only if you have asked for it — occasional email about new stock and offers.
We do not sell your personal information, and we do not rent or trade customer lists.
Your Bud, points and badges
Choosing a Bud creates a small record tied to your account: which starter line you picked, what stage it has reached, how long your current streak is, and any panel skin or rename you have bought from the Bud Mart.
Evolution points are earned per ordering cycle you keep, and loyalty points are earned per dollar spent. They are separate currencies and are tracked separately, which means your Bud reflects how consistently you order rather than how much you spend.
This data exists to run the feature and to show it back to you. It is not used to build an advertising profile and it is not shared with anyone outside the business. Deleting your account deletes your Bud, your streak and your points balance along with it, and none of it can be restored afterwards.
Log files
Like effectively every site on the internet, ours keeps server logs. These record the IP address a request came from, the browser and operating system it reported, the date and time, the page requested and the page that referred it.
Logs are not tied to your name. They are used to keep the service up, to investigate errors and abuse, and to see in aggregate which parts of the site get used. They are rotated and discarded on a routine schedule rather than kept indefinitely.
Cookies
The site sets a small number of cookies, and they do real work rather than tracking you around the web:
- A session cookie that keeps you signed in to your panel. It is HTTP-only, which means scripts running in your browser cannot read it.
- A cart cookie, so that the things you have added are still there when you come back.
- A cookie recording that you have confirmed you are 19 or over, so that you are not asked on every page.
- If you arrive through a friend's referral link, a cookie holding their referral code for up to 30 days, so that the account you open is linked to them. It is HTTP-only and is cleared once you sign up.
You can block or delete cookies in your browser's settings. The site will still load, but signing in and keeping a cart will stop working, because those are the jobs the cookies are doing.
Service providers and third parties
Running a shop means a handful of other companies necessarily touch parts of an order. Ours are the payment rails you choose to use — your bank, for an Interac e-transfer, and the public Bitcoin network — together with Canada Post as the carrier, our hosting provider, and the service that sends transactional email.
Each of them receives only what it needs to do its job: the courier gets a delivery address, not your order history or your points balance.
We do not run advertising networks, retargeting pixels or third-party ad servers on this site, so there are no advertising partners with their own cookie policies to consult. If that ever changes, this section changes with it before the tags go live.
Sites we link to are governed by their own privacy policies, not this one. Read theirs before giving them anything.
How we protect it
Traffic to and from the site is encrypted in transit. Passwords are stored as salted hashes and are not recoverable — if you lose yours, it is reset, not looked up. Payment credentials never reach our servers, because the payment happens on your bank's rails or on the Bitcoin network rather than on ours.
Access to order and customer records is limited to the people who need it to fill orders and answer support.
No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that creates a real risk of significant harm, we will notify the people affected and the Office of the Privacy Commissioner of Canada as PIPEDA requires.
How long we keep it
Order and payment records are kept for as long as tax and business records law requires them. Panel data — your points, badges, streak and Bud — is kept while your account is open.
Close your account and the panel data goes with it. Records we are legally required to retain are kept for their required period and then deleted.
Your rights in Canada
Canadian federal privacy law — PIPEDA — together with British Columbia's Personal Information Protection Act, gives you the right to:
- ask what personal information we hold about you and how it has been used;
- get a copy of it;
- have anything inaccurate corrected;
- withdraw consent to a use of it, subject to what we still need in order to complete an order or meet a legal obligation;
- complain to the Office of the Privacy Commissioner of Canada if you think we have got it wrong.
Send any of these to support@budbc.cc. We will respond within 30 days.
If you are covered by the GDPR
We ship within Canada only, so this will rarely apply. If you are nonetheless covered by the GDPR, you have the rights it grants: access, rectification, erasure, restriction of processing, objection to processing, and portability of the data you gave us.
Exercise them at support@budbc.cc. There is no charge, and we answer within one month.
If you are a California resident
We do not ship to the United States, so this section is a courtesy rather than an obligation. Under the CCPA a California consumer may ask a business to disclose the categories and specific pieces of personal data it holds about them, to delete that data, and not to sell it.
The third of those needs no request here: we do not sell personal information to anyone.
Children's information
This site is not for children, and no part of it is designed to appeal to them. We do not knowingly collect personal information from anyone under 19, which is both the age of majority for cannabis in British Columbia and the minimum age to use this site at all.
If you believe a minor has given us information, write to support@budbc.cc and we will remove it from our records promptly.
Changes to this policy
This policy takes effect on 4 September 2026. When it changes, the date at the top of the page changes with it, and material changes are announced on the site rather than filed quietly.
Continuing to use the site after a change means you accept the current version.