Privacy Policy

This Privacy Policy explains how [ANC Solutions Inc. ("Astro Lab," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit the website located at astrolab710.com and any associated pages, content, and features (collectively, the "Website").

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy legislation, including substantially similar provincial privacy laws (such as Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25) where they apply.

By using the Website, you agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. This Privacy Policy should be read together with our Terms and Conditions.

1. Who This Policy Applies To

The Website is intended only for adults who are of legal age to purchase and consume cannabis in their province or territory of residence (19 in most provinces; 18 in Alberta; 21 in Quebec). The Website is not directed at anyone below the legal age, and we do not knowingly collect personal information from anyone below the legal age. If you believe we have inadvertently collected such information, please contact us using the details in Section 12 and we will delete it.

2. Personal Information We Collect

We collect personal information in the following ways:

Information you provide to us directly. This includes information you give us when you:

• sign up for our newsletter (such as your email address, and any name or preferences you provide);
• contact us through a contact form, email, or social media (such as your name, email address, and the contents of your message); or
• confirm your age or eligibility to access the Website.

Information collected automatically. When you visit the Website, we and our service providers automatically collect certain technical and usage information through cookies and similar technologies, which may include your IP address, approximate location, device and browser type, operating system, referring website, pages viewed, links clicked, and how you navigate and interact with the Website. See Section 5 for details on the tools we use.

We do not sell cannabis or process payments through the Website, and we do not collect payment card or financial account information through the Website.

3. How We Use Personal Information

We use personal information to:

• operate, maintain, secure, and improve the Website;
• respond to your inquiries and communicate with you;
• send you our newsletter and marketing communications where you have signed up to receive them;
• understand how visitors use the Website so we can improve its content, layout, and performance;
• detect, prevent, and address technical issues, security incidents, fraud, or misuse; and
• comply with our legal and regulatory obligations, including those under the Cannabis Act and applicable privacy laws.

We rely on your consent to collect and use your personal information for these purposes. Depending on the circumstances, consent may be express (for example, when you subscribe to our newsletter) or implied (for example, for basic analytics that are reasonably necessary to operate and improve the Website), consistent with applicable privacy law. Where the Website uses a cookie or consent banner, your choices made through that banner will govern non-essential tracking technologies.

4. Marketing Communications

If you subscribe to our newsletter, we will send you emails about our brand, products, events, and updates. You can unsubscribe at any time by using the unsubscribe link in any marketing email or by contacting us. Unsubscribing from marketing communications will not affect any non-marketing communications necessary to respond to your requests.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Website, analyze usage, and improve performance. The third-party tools we use are described below.

Tools that collect information about your visit

• Google Analytics 4 (GA4), deployed through Google Tag Manager. GA4 uses cookies and similar identifiers to collect aggregated information about Website traffic and usage, such as pages viewed, session duration, device and browser type, and general geographic region. This helps us understand overall usage trends. Google processes this information as our service provider. You can learn more about Google's practices at policies.google.com/privacy, and you can opt out of Google Analytics across websites using Google's browser add-on at tools.google.com/dlpage/gaoptout.
• Microsoft Clarity. Clarity provides analytics through usage metrics, heatmaps, and session recordings that capture how visitors navigate and interact with the Website, including clicks, scrolling, and mouse movement, in order to help us understand and improve the user experience. Clarity is configured to mask sensitive content by default, and we do not use it to intentionally record information entered into form fields. Microsoft processes this information as our service provider. You can learn more about how Microsoft collects and uses this data at privacy.microsoft.com.

Google Tag Manager itself is a tag-management tool that we use to deploy the tools above; it does not, on its own, collect personal information about you.

Tools that do not track your visit

We also use tools that operate at the site-administration or search-engine level and do not place tracking technologies on your device or collect information about you as an individual visitor:

• Google Search Console — used to verify site ownership and monitor how the Website performs in search results (in aggregate); and
• Ahrefs — a third-party search-engine-optimization tool we use to analyze our own website's search performance.

Managing cookies

Most browsers let you refuse or delete cookies through their settings. If you disable cookies, some features of the Website may not function properly. Where a cookie or consent banner is provided on the Website, you can use it to manage your preferences for non-essential technologies.

6. How We Share Personal Information

We do not sell your personal information. We may share personal information with:

• Service providers and processors who perform services on our behalf, such as website hosting, email and newsletter delivery, and the analytics providers described in Section 5. These providers are permitted to use personal information only as necessary to provide services to us.
• Legal and regulatory authorities, where we are required or permitted by law to disclose information, or to protect our rights, safety, or property, or those of others.
• A successor entity in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case personal information may be transferred as part of that transaction.

7. Storage and Cross-Border Transfer

Some of our service providers, including Google and Microsoft, may store and process personal information on servers located outside of Canada, including in the United States. While personal information is located in another country, it may be subject to the laws of that country and may be accessible to the courts, law enforcement, and regulatory authorities of that country. We take reasonable steps to ensure that our service providers protect personal information in a manner consistent with this Privacy Policy and applicable Canadian privacy law. If you have questions about our service providers' handling of personal information outside Canada, please contact us using the details in Section 12.

8. Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, to provide our services, and to meet our legal, regulatory, and business requirements. When personal information is no longer needed, we will take reasonable steps to securely delete or de-identify it. Aggregated or de-identified information that can no longer be associated with an identifiable individual may be retained and used indefinitely.

9. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, use, disclosure, copying, or modification, appropriate to the sensitivity of the information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your Privacy Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you and request information about how it has been used and disclosed;
• Correct personal information that is inaccurate or incomplete;
• Withdraw consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice (withdrawing consent may limit our ability to provide certain features or communications); and
• Unsubscribe from marketing communications at any time.

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and the updated policy will take effect when posted. We encourage you to review this Privacy Policy periodically. Your continued use of the Website after changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Contact Us and Complaints

If you have questions, requests, or concerns about this Privacy Policy or our handling of your personal information, please contact us.

If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376, or to the applicable privacy regulator in your province or territory.

‍