Draft status: Client confirmation required before publication.

Last updated: July 28, 2026

Bud Approach respects your privacy. This Privacy Policy explains what
personal information we collect through our website and services, why we
collect it, how we use and disclose it, how long we retain it, and the
choices available to you.

1. Scope

This Policy applies to information handled by Bud Approach through the
website, customer accounts, checkout, order fulfilment, customer support,
marketing communications, and related online services. Third-party services
linked from the website may have separate privacy policies.

2. Personal information we collect

Depending on how you use the Services, we may collect:

• Identity and eligibility information, including name, date-of-birth or
  age-verification information when required.
• Contact information, including email address, telephone number, billing
  address, and delivery address.
• Account information, including username, encrypted password record,
  preferences, and account history.
• Order information, including products, quantities, prices, discounts,
  delivery instructions, order status, and support history.
• Payment-confirmation information needed to match an Interac e-Transfer to
  an order. Bud Approach does not need or request your online banking
  password.
• Communications, reviews, survey responses, support requests, and other
  information you choose to provide.
• Technical information such as IP address, browser and device type,
  referring pages, approximate location derived from IP, cookies, log data,
  and website interactions.

3. How information is collected

We collect information:

• Directly from you when you register, order, contact us, or subscribe.
• Automatically through cookies, server logs, security tools, and similar
  technologies.
• From service providers involved in payment confirmation, fraud
  prevention, delivery, analytics, or customer communication.
• When required or permitted by law.

4. Why we use personal information

We may use personal information to:

• Create and manage customer accounts.
• Verify eligibility and legal age where required.
• Receive, review, process, deliver, and support orders.
• Confirm payments and prevent fraud, abuse, or security incidents.
• Send transactional messages such as order and delivery updates.
• Respond to questions, complaints, refunds, and product issues.
• Maintain, troubleshoot, secure, and improve the website.
• Measure website performance and understand customer experience.
• Send promotional messages where consent or another lawful basis permits,
  and maintain unsubscribe preferences.
• Meet accounting, tax, regulatory, legal, and recordkeeping duties.

5. Consent and limiting collection

Bud Approach seeks meaningful consent where required and limits collection
to information reasonably needed for identified purposes. You may withdraw
consent to optional uses, such as promotional email, subject to legal or
contractual restrictions. Withdrawal does not affect processing already
completed and may prevent us from providing a requested feature.

6. Cookies and similar technologies

The website may use necessary cookies for login, cart, checkout, security,
and preferences. With the appropriate notice or consent, it may also use
analytics or marketing technologies to understand website use and measure
campaigns.

Browser controls can restrict cookies, but blocking necessary cookies may
prevent account, cart, or checkout features from working correctly.

Client confirmation required:
[LIST ACTIVE ANALYTICS, ADVERTISING, CHAT, AND COOKIE PROVIDERS — CLIENT TO CONFIRM]

7. When information is disclosed

Bud Approach does not sell personal information. We may disclose only the
information reasonably required to:

• Website hosting, security, maintenance, ecommerce, email, customer
  support, analytics, and data-storage providers.
• Canada Post or another approved carrier for delivery and tracking.
• Payment, accounting, anti-fraud, and professional service providers.
• Government, regulatory, law-enforcement, or legal parties when disclosure
  is required or permitted by law.
• A successor organization in a proposed or completed sale, merger, or
  reorganization, subject to appropriate safeguards.

Service providers are expected to use information only for authorized
purposes and to protect it appropriately.

8. Marketing communications

Promotional email or electronic messages will be sent in accordance with
applicable Canadian anti-spam requirements. You can unsubscribe through
the link in a marketing message or by contacting Bud Approach. We may still
send non-promotional messages necessary to operate your account or fulfil
an order.

9. Retention

Bud Approach retains personal information only for as long as reasonably
needed for the purposes described in this Policy or to satisfy legal,
accounting, fraud-prevention, dispute, and regulatory requirements. When
information is no longer required, it will be securely deleted,
de-identified, or otherwise disposed of according to applicable practices.

10. Security

We use administrative, technical, and physical safeguards appropriate to
the sensitivity of the information, which may include access controls,
encryption in transit, backups, security monitoring, and restricted
administrative access. No online system can guarantee absolute security.

11. Processing outside your province or Canada

Some technology or service providers may process information in another
province or country. Information processed elsewhere may be subject to the
laws and lawful access requirements of that jurisdiction. Bud Approach
remains responsible for selecting appropriate providers and safeguards as
required by applicable law.

12. Access, correction, and other privacy choices

Subject to applicable law and reasonable identity verification, you may
request access to personal information held about you, ask that inaccurate
information be corrected, or ask questions about its collection, use,
disclosure, or retention. Some information may need to be retained for
legal, fraud-prevention, accounting, or transaction-record purposes.

13. Age-restricted service

The Services are intended only for people who have reached the legal age
applicable in their province or territory. Bud Approach does not knowingly
offer the Services to minors. Contact us if you believe information was
collected from an ineligible person.

14. Changes to this Policy

We may revise this Policy when our practices, services, or legal
requirements change. The updated version will be posted with a revised
date, and additional notice will be provided when required.

15. Contact and privacy questions

Requests or questions about privacy may be sent to:
[SUPPORT/PRIVACY EMAIL — CLIENT TO CONFIRM].

Privacy contact or responsible person:
[PRIVACY CONTACT — CLIENT TO CONFIRM].

Business address, if publicly used:
[BUSINESS ADDRESS — CLIENT TO CONFIRM].