Privacy Policy
Tilray, Inc. and our subsidiaries (collectively, “Tilray,” the “Tilray Group,” “we” or “us”) are committed to privacy and transparency. A list of Tilray Group entities is available here. This Privacy Policy describes how Tilray collects, uses, discloses and otherwise manages personal information. “Personal information” means any information about an identified or identifiable individual.
1. SCOPE
This Privacy Policy applies to the personal information we collect related to our:
websites, including www.tilray.com and our medical use websites including https://aphria.ca/ and https://www.brokencoastrx.com/, adult/recreational use branded websites for each of the brands of Tilray Group, and other websites operated by Tilray that display or link to this Privacy Policy, and the services available through such websites (together, our “Websites”)
mobile apps, social media properties and other online services
events and business development activities
communications and other online and offline business interactions
Additional Notices. Different privacy policies or notices (“Additional Notices”) may be provided by us and apply to certain Websites and services operated by Tilray Group companies; in such cases, these Additional Notices will control in the event of a conflict with this Privacy Policy.
2. COLLECTION OF PERSONAL INFORMATION
A. Sources of Personal Information
We may collect personal information directly, indirectly (or automatically), and from third parties. For example, Tilray collects and uses personal information when individuals register for our services, purchase our products, visit our Website or other channels, communicate with us, submit inquiries to us, and or otherwise interact with us. In addition, in order to purchase cannabis from one of our medical use Websites, we may also collect and receive information from authorized third parties such as health care practitioners, medical clinics and caregivers. We also may automatically collect information about individuals, including visitors to our Websites (via cookies, pixels, and similar technologies).
In general, the personal information we collect includes: (i) name, address, email address and other contact information; (ii) date of birth, gender and other demographic details; (iii) prescription and medical records, including daily dosage, primary symptoms/conditions, and other information set out on an Individual’s medical document and registration materials, as well as the name, practice and other information about your prescribing health care practitioner; (iv) payment information, order and shipping information; (vi) account and profile data; your preferences and feedback on our products, services and Websites; and (vii) other information you choose to or consent to provide us.
Most of the personal information we collect from you is necessary for us to comply with our legal obligations, provide our services to you or to fulfil your request or orders. For example, in order to fulfil your cannabis order from one of our medical use Websites, we are required to collect certain documentation, including your prescription, prescribing health care provider, and other medical records; if you do not provide us with the required information, we will be unable to process your order. When we collect your personal information, we will highlight whether information is required to proceed or submit a request or order, and whether it is voluntary.
B. Personal Information We Collect Directly From You
Tilray may collect personal information directly from individuals as follows:
Visit our Websites: In order to access our Websites, we may require you to enter your date of birth and jurisdiction of residence to verify that you are the age of majority in your jurisdiction of residence in order to meet regulatory requirements.
Register to Purchase Cannabis for Medical Use: To purchase medical cannabis from our medical use Websites, you will be required to register as a patient or caregiver by creating an account and completing a patient or caregiver registration form. When you register, Tilray will collect personal information such as your username and password, as well as the information you provide on the patient or caregiver registration form. On the patient registration form, Tilray will collect personal information such as your first and last name, date of birth, phone number, email address, your prescription information (including dosage and medical condition/diagnosis), gender, shipping address, mailing address, residential address, health care practitioner name and contact information, insurance policy information (including your policy number and policy provider) and whether you are a Canadian veteran. On the caregiver registration form, Tilray will collect personal information such as your patient ID number, gender, as well as your caregiver’s first and last name, gender, phone number, email address, and date of birth. Tilray will use this information to confirm your registration status, issue a username and password and/or to maintain your registered account. You must keep your username and password secure and not share it with anyone else either within or outside your organization. We will never ask you for your password in any unsolicited communication (such as letters, phone calls or email messages). We may also collect other information where necessary for our business operations, in accordance with requirements under applicable law.
Purchase Products or Services: If you purchase a product or service through our Websites, we (or our authorized third-party payment processor) collect your payment information (including billing address, credit card number, expiry data and CVV code) in order to process the transaction.
Marketing Communications: You may sign-up to receive email marketing communications such as newsletters and special offers on products and services by providing us with your name and email address. You can unsubscribe at any time by clicking the “unsubscribe” link included at the bottom of each email. Alternatively, you can opt-out of receiving email marketing communications by contacting us at the contact information provided in the “Contact Us” section below. Please note that you may continue to receive transactional or account-related communications from us.
Feedback: We may collect and use customer feedback about our products and services to better understand our customers and enhance our product and service offerings.