Privacy Policy

Effective Date: July 30, 2026

CropPak ("we," "our," or "us") is a factory-direct cannabis packaging company headquartered at Suite 51 - 31125 Westridge Place, Abbotsford, BC V2T 0B9, Canada. We are committed to protecting the privacy of our website visitors, customers, and business partners. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit croppak.com (the "Site") or submit a quote request to us.

This policy is published in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws. By using our Site or submitting information through our quote request form, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

When you submit a quote request through our website, we collect the following personal and business information:

• Full name - to identify and address you in correspondence
• Email address - to send you quotes, order updates, and marketing communications
• Phone number - to contact you regarding your quote or order
• Company name - to understand your business and provide appropriate service
• Country (Canada or United States) - to determine shipping eligibility and applicable regulations
• Shipping address - to fulfill orders and calculate shipping costs
• Product specifications - including packaging type, quantity, dimensions, custom printing requirements, and any artwork files you submit

1.2 Information Collected Automatically

When you visit our Site, we and our third-party service providers automatically collect certain technical and usage data, including:

• IP address, browser type, device type, and operating system
• Pages visited, time spent on pages, and click paths
• Referring URLs and search terms used to find our Site
• Approximate geographic location based on IP address (city/region level, not precise street address)
• Cookie identifiers and similar tracking technologies (see Section 3)

This automatically collected information is anonymized and aggregated. We use it to understand aggregate traffic patterns and improve our website. We do not use this data to identify individual visitors personally.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• Responding to quote requests - Processing your packaging quote request, calculating pricing, and communicating with you about your project
• Fulfilling orders - Processing payments, manufacturing and printing custom packaging, and shipping orders to the address you provide
• Customer service - Answering your questions, providing order status updates, and resolving any issues with your order
• Marketing communications - Sending you promotional emails, product updates, and industry news. You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@croppak.com. Opting out of marketing emails does not affect transactional communications related to your quote or order
• Website analytics and improvement - Analyzing how visitors use our Site in aggregate to improve its content, functionality, and user experience
• Advertising - Displaying relevant advertisements on third-party platforms and measuring the effectiveness of our advertising campaigns
• Legal compliance - Meeting our obligations under applicable laws, including cannabis packaging regulations and cross-border shipping requirements

3. Cookies and Tracking Technologies

Our Site uses cookies, pixel tags, web beacons, and similar tracking technologies to collect and analyze information about your browsing behavior. These technologies are used both by us and by our third-party analytics and advertising partners. All tracking described in this section collects anonymized, aggregate data. We do not use these technologies to identify you personally unless you have also submitted personal information through a quote request or contact form.

The following sections describe each tracking technology we use. This list may not be exhaustive, as we may add or remove tracking technologies from time to time. We will update this policy if we make material changes to our tracking practices.

3.1 Google Analytics (GA4)

We use Google Analytics 4 to understand how visitors interact with our Site. GA4 collects information about pages visited, session duration, traffic sources, and device information. Google Analytics uses cookies to store this information. The data collected is aggregated and anonymized and is used to improve our website's performance and content. You can learn more about how Google uses data at Google's Privacy & Terms page.

3.2 Facebook Pixel (Meta Pixel)

We use the Facebook Pixel (Meta Pixel) to measure the effectiveness of our Facebook and Instagram advertising campaigns. The Facebook Pixel places a cookie on your device when you visit our Site and allows us to track conversions from Facebook ads, optimize ad targeting, and build retargeting audiences. You can learn more about Facebook's data practices in the Meta Privacy Policy.

3.3 Pinterest Tag

We use the Pinterest Tag to measure the effectiveness of our Pinterest advertising campaigns. The Pinterest Tag places a cookie on your device when you visit our Site and allows us to track conversions from Pinterest ads, optimize ad targeting, and build retargeting audiences. The Pinterest Tag collects information about the pages you view, actions you take, and the referral path from Pinterest to our Site. You can learn more about Pinterest's data practices in the Pinterest Privacy Policy.

3.4 Google Ads Conversion Tracking

We use Google Ads conversion tracking to measure the effectiveness of our Google advertising campaigns. When you click on one of our Google Ads and subsequently submit a quote request, a conversion tracking cookie records this action. This helps us understand which ads drive the most valuable customer actions.

3.5 LinkedIn Insight Tag

We use the LinkedIn Insight Tag to measure the effectiveness of our LinkedIn advertising campaigns and to build retargeting audiences. The Insight Tag places a cookie on your device and collects information about your visit to our Site, which LinkedIn uses to display relevant ads to you on its platform. You can learn more in the LinkedIn Privacy Policy.

3.6 Other Advertising and Analytics Tracking Technologies

In addition to the specific technologies listed above, we may use other third-party advertising pixels, analytics tags, conversion tracking tools, and similar technologies from time to time. These may include but are not limited to retargeting pixels, audience measurement tools, ad server tracking, and social media platform tags (including but not limited to X/Twitter, TikTok, Snapchat, Reddit, or other platforms we may use for advertising). All such technologies collect anonymized, aggregate data for the purpose of measuring advertising effectiveness and improving our marketing efforts. We will update this policy if we add significant new tracking technologies, but the general categories described here cover our current and anticipated tracking practices.

3.7 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically:

• Block all cookies or enable selective cookie acceptance
• Block third-party cookies
• Delete existing cookies
• Set your browser to notify you when a cookie is being sent

Note that blocking cookies may affect the functionality of our Site, particularly the quote request form. For more information on managing cookies in your browser, visit www.aboutcookies.org.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share your information only with the following categories of recipients, and only to the extent necessary for the purposes described in this policy:

4.1 Third-Party Analytics and Advertising Providers

We share anonymized and aggregated browsing data with the following third-party providers for analytics and advertising purposes:

• Google LLC - Google Analytics, Google Ads
• Meta Platforms, Inc. - Facebook Pixel, Meta advertising products
• Pinterest, Inc. - Pinterest Tag, Pinterest Ads
• LinkedIn Corporation - LinkedIn Insight Tag, LinkedIn Ads
• Other advertising platforms - From time to time we may use additional advertising and analytics platforms. Any data shared with these providers is anonymized and aggregated, as described in Section 3.

These providers may use cookies and similar technologies to collect information about your visits to our Site and other websites. They use this information to provide analytics services and to display advertising tailored to your interests. Each provider has its own privacy policy governing how they use this data.

4.2 Email Service Providers

We use third-party email service providers to send transactional emails (quote confirmations, order updates) and marketing communications on our behalf. These providers have access to your email address and name solely for the purpose of delivering emails we send. They are contractually obligated to protect your information and are prohibited from using it for their own purposes.

4.3 Shipping and Logistics Partners

To fulfill orders, we share your name, shipping address, and contact information with shipping carriers and logistics partners. This information is necessary to deliver your order and provide tracking information.

4.4 Payment Processors

We use third-party payment processors to handle transactions. These processors receive payment information necessary to complete your purchase. We do not store full credit card numbers on our servers.

4.5 Legal Disclosure

We may disclose your personal information if required to do so by law, regulation, or legal process (such as a court order or subpoena), or if we believe in good faith that disclosure is necessary to protect our rights, comply with a legal obligation, or cooperate with law enforcement or government regulators.

5. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including meeting legal, accounting, and reporting requirements. Specifically:

• Quote request data - We retain quote request information for 24 months after your last interaction with us. If you proceed with an order, this data is retained as part of your order record
• Order records - We retain order records, including customer information, for 7 years to comply with Canadian tax and business record-keeping requirements
• Marketing data - We retain email marketing consent records and contact information until you unsubscribe or request deletion
• Analytics data - Aggregated and anonymized analytics data may be retained indefinitely, as it does not identify individuals
• Cookie data - Cookie retention periods are set by each third-party provider and typically range from a few hours to 24 months

6. Your Privacy Rights

Under PIPEDA and applicable provincial privacy laws, you have the following rights regarding your personal information:

6.1 Right to Access

You may request a copy of the personal information we hold about you. To make such a request, contact us at info@croppak.com with the subject line "Personal Information Access Request." We will respond within 30 days of receiving your request.

6.2 Right to Correction

If you believe the personal information we hold about you is inaccurate or incomplete, you may request that we correct it. Contact us at info@croppak.com and we will update your information promptly.

6.3 Right to Deletion

You may request that we delete your personal information, subject to certain exceptions (such as where we are legally required to retain records). To request deletion, contact us at info@croppak.com with the subject line "Personal Information Deletion Request." We will process your request within 30 days and confirm the deletion in writing.

6.4 Right to Withdraw Consent

You may withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal and contractual restrictions. Withdrawing consent may affect our ability to provide certain services, such as fulfilling outstanding orders. You can withdraw consent by contacting us at info@croppak.com.

6.5 Right to Opt Out of Marketing

You may opt out of receiving marketing communications from us at any time by:

• Clicking the unsubscribe link in any marketing email
• Emailing us at info@croppak.com with the subject line "Unsubscribe"
• Contacting us by phone or mail using the contact information below

Opting out of marketing communications will not affect transactional emails related to your quote requests or orders.

6.6 Right to Opt Out of Targeted Advertising

You can opt out of interest-based advertising from Google, Facebook, Pinterest, LinkedIn, and other advertising networks by visiting the following opt-out pages:

• Google Ads Settings
• Facebook Ad Preferences
• Pinterest Ad Preferences
• LinkedIn Ad Settings
• Digital Advertising Alliance opt-out
• Digital Advertising Alliance of Canada opt-out

7. Data Security

We take reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security)
• Restricted access to personal information on a need-to-know basis
• Regular security reviews and updates to our systems and processes
• Secure deletion of personal information when it is no longer required

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8. PIPEDA Compliance

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law. Our practices are guided by the following PIPEDA principles:

• Accountability - We are responsible for personal information under our control and have designated a privacy officer to oversee compliance
• Identifying purposes - We identify the purposes for which personal information is collected at or before the time of collection
• Consent - We obtain consent for the collection, use, or disclosure of personal information, except where inappropriate
• Limiting collection - We collect only the information necessary for the identified purposes
• Limiting use, disclosure, and retention - We use and disclose personal information only for the purposes for which it was collected, and retain it only as long as necessary
• Accuracy - We strive to keep personal information accurate, complete, and up to date
• Safeguards - We protect personal information with appropriate security safeguards
• Openness - We make this Privacy Policy readily available and provide information about our privacy practices on request
• Individual access - We provide individuals with access to their personal information and the ability to challenge its accuracy and completeness
• Challenging compliance - Individuals may challenge our compliance with PIPEDA by contacting us or the Office of the Privacy Commissioner of Canada

9. Privacy Officer

Our Privacy Officer is responsible for overseeing our compliance with PIPEDA and this Privacy Policy. If you have any questions, concerns, or complaints about our handling of your personal information, you may contact our Privacy Officer at:

10. Complaints

If you have a complaint about our handling of your personal information, we encourage you to first contact us directly using the information above. We will investigate and respond to your complaint within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the Office of the Privacy Commissioner of Canada:

• Website: www.priv.gc.ca
• Phone: 1-800-282-1376
• Mail: Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, Quebec K1A 1H3

11. Third-Party Links

Our Site may contain links to third-party websites, including those of our advertising partners, shipping carriers, and regulatory bodies. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children's Privacy

Our Site and services are intended for business-to-business (B2B) customers aged 19 and older. We do not knowingly collect personal information from individuals under 19. If you believe we have inadvertently collected such information, please contact us at info@croppak.com and we will delete it promptly.

13. Cross-Border Data Transfers

Because we serve customers in both Canada and the United States, and because our third-party service providers (Google, Meta, Pinterest, LinkedIn, and others) may store and process data in the United States and other countries, your personal information may be transferred to and stored in jurisdictions outside Canada. By using our Site and submitting information to us, you consent to these cross-border transfers. We take steps to ensure that your information receives a comparable level of protection regardless of where it is processed.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page and update the "Effective Date" at the top of this document. If we make material changes, we will provide a more prominent notice (such as a notification on our homepage or an email to subscribers). We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us at: