Village Brands Inc. (“Company”, “we”, “our”, or “us”), the producer of Flyte cannabis products, values the people who visit our Flyte website, including you (“you”), and we respect your privacy. This privacy policy (the “Policy”) describes the kinds of personal information we collect about you through the Flyte website located at www.flyte.ca (the “Website”, as further defined in the Terms of Use), why we collect it, how we use it, how we protect it, and when we share it with third parties. It also describes the choices you can make about your personal information. In this Policy, “personal information” means information about an identifiable individual.
If you do not agree to the terms of this Policy, please do not use the Website.
If this Policy changes, we will post an updated version on the Website. You can tell if this Policy has changed by checking the “Last Updated” date at the bottom. We may also, in our discretion, notify you of changes in other ways, such as by email if you have provided one. If you continue to use the Website after the Policy has changed or notice of the change has been given, you are deemed to have accepted the changes.
By voluntarily providing us with personal information, you consent to its collection, use and disclosure in accordance with this Policy. You acknowledge that your personal information may be transferred from your location to the offices and servers of the Company and the authorized third parties described in this Policy, some of whom may be located in the United States or elsewhere outside Canada.
1. Information We Collect
We collect personal information only to the extent necessary for the purposes set out in section 3(a), and only when we have a legal basis to do so. In most cases, we collect it directly from you when you interact with us through the Website, by email or by telephone. We collect personal information only by fair and lawful means, and we will not knowingly collect or use personal information without consent except as permitted by law.
When you use the Website, we collect the following types of information.
(a) Information you voluntarily provide to us. When you submit our “Contact Us” form or otherwise contact us, we collect the information you choose to provide, such as your name, email address, phone number, province of residence and the content of your message. To enter the Website, you must click “I am 19+” to confirm that you are of legal age. We do not ask for your date of birth.
(b) Information collected through automated means.
General usage data. When you use the Website, we may collect data about the hardware and software you use, such as your device type and model, web browser, operating system version, and referring or exit web pages. We may also collect your Internet Protocol (“IP”) address, approximate location derived from it, the date and time of your visit, how long you use the Website in each session, and which pages and features you view.
Cookies and log files. We use browser cookies, which are small text files placed on your device by a website, and log files, which record certain information when you visit the Website, including your IP address. We use cookies and log files to: remember that you have passed the age gate; recognize you when you return; keep track of activity on the Website and which pages and products you view; and study how visitors use the Website so we can improve its design, content and function. We call this “Browsing Data”. We may use third-party service providers, such as website hosting providers, to help collect and store Browsing Data on our behalf.
You can accept or decline cookies by changing your browser settings. If you turn off or block cookies, you can still use the Website, but some features (such as remembering your age confirmation) may not work. To learn more about cookies, including how to see, manage and remove them, visit AllAboutCookies.org.
2. Consent
Except as expressly provided in this Policy or as otherwise permitted by law, we obtain your consent to collect personal information and to use or disclose it. Consent may be express or implied. We will usually seek consent at the time of collection and make reasonable efforts to ensure you understand the purposes for which the information will be used or disclosed. In some cases, we may seek consent after collection but before use, such as when we wish to use personal information for a purpose not previously identified. We try to limit the circumstances in which we collect sensitive personal information.
You may make inquiries, or change or withdraw your consent to the collection, use or disclosure of your personal information, at any time, subject to legal or contractual restrictions and reasonable notice, by contacting our privacy officer (see section 9). Despite any withdrawal of consent, we may continue to collect, use and disclose your personal information to the extent we are legally required or permitted to do so. Withdrawing consent may affect our ability to respond to your inquiries or provide you with certain features of the Website.
3. Using the Information We Collect
(a) Purpose – why we collect, use and disclose information
We will identify the purposes for which we collect personal information before or at the time we collect it. We will not collect personal information that is not necessary and, except as set out below, will not use or disclose it for any other purpose without first obtaining your consent. We use and disclose personal information only for business purposes, which may include:
• to respond to your questions, comments and other messages sent through the “Contact Us” form or otherwise;
• to confirm that you are of legal age to access the Website;
• to understand how visitors use the Website, address problems with it, and improve its design, content and function;
• internal business purposes, such as managing our business and operations;
• to obtain feedback from you;
• to establish or exercise our legal rights or defend against legal claims;
• to investigate, detect, prevent or take action regarding errors, illegal or prohibited activities, suspected fraud, or actual or potential threats to the safety of any person or to our business or property;
• to manage or transfer our assets or liabilities, such as in an acquisition, merger or financing;
• to comply with legal, accounting and regulatory requirements, including requirements of Health Canada and other governmental or regulatory authorities, applicable laws, and any search warrants, subpoenas or court orders; and
• any other reasonable purpose for which you provide consent.
We do not sell cannabis through the Website, and we do not use personal information collected through the Website to promote cannabis in any manner prohibited by the Cannabis Act (Canada) or provincial law. Where personal information is to be used for a new purpose for which consent cannot reasonably be implied, we will identify the new purpose and obtain your consent before using it, unless otherwise permitted by law.
(b) Disclosure to third parties
We do not sell or rent your personal information, and we do not share it in personally identifiable form with any third party except as provided in this Policy or as otherwise permitted or required by law.
Third parties with whom we may share your information include: (a) our service providers, such as website hosting, form-handling and email providers, and cloud service providers in Canada and the United States; and (b) our financial, insurance, legal, accounting and other professional advisors. When we transfer personal information to a service provider, we provide only the information needed to perform the service and use contractual or other means to require a comparable level of protection while the information is used or processed by them. Details about the personal information we make available to our service providers are available by contacting our privacy officer (see section 9). We will promptly communicate any request you make to correct or erase your personal information to any service provider that holds that information.
We may disclose your personal information without your knowledge or consent where we are permitted or required to do so by applicable law, a request of a government, regulatory or law enforcement agency, a search warrant, subpoena or court order, or where we believe in good faith that it is necessary to comply with such a law, request, warrant, subpoena or order, or to protect our business or assets, our personnel or the public.
Subject to applicable law, we may also use and disclose your personal information without your knowledge or consent where necessary in connection with a proposed or completed business transaction, as described in the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, and the Personal Information Protection Act (British Columbia). In each case, we and the other parties to the transaction will agree to limit the purposes for which the personal information may be used and disclosed, to protect it by means appropriate to its sensitivity, and to return or destroy it if the transaction does not proceed. If the transaction proceeds, you will be notified within a reasonable time that your personal information has been disclosed, and you may contact the entity that received it with any questions about its handling.
(c) Retention of personal information
Subject to legal or accounting requirements, we retain personal information only for as long as necessary for the purposes for which it was collected, as described in this Policy, and for reasonable backup, archival, audit or similar purposes. Personal information that is no longer required will be destroyed, erased or made anonymous, although copies of deleted information may continue to exist on backup media. You may request the erasure of your personal information at any time and, subject to any exceptions permitted under applicable law, we will try to do so without undue delay. Written requests should be sent to our privacy officer (see section 9).
If we have disclosed your personal information to a third party in accordance with this Policy, we will require that it be retained by that third party only for as long as necessary to complete the purpose for which we provided it.
(d) Use of anonymized information
Despite anything else in this Policy, we may remove personal identifiers from your information and keep and use it in de-identified form, which may be combined with other information to generate aggregated information. De-identified or aggregated information is not “personal information” for the purposes of this Policy and is owned by us. We may use and share it for any lawful purpose.
4. Accuracy
We make reasonable efforts to ensure that personal information in our records, or disclosed to third parties for the purposes described above, is accurate, complete and up to date. If you show that your personal information is inaccurate or incomplete, we will amend it as appropriate. Please tell us promptly if you find inaccuracies in our records or if your personal information changes. Notices and requests about inaccuracies or changes should be sent in writing to our privacy officer (see section 9).
5. Access and Your Choices About Your Personal Information
You may request access to your personal information in writing by contacting our privacy officer (see section 9). Including “Request personal information” in the subject line of your email will help us respond. We will respond within a reasonable time, and at minimal or no cost to you, in accordance with applicable law. We will tell you what personal information we hold about you, how it has been used, and any third parties to whom it has been disclosed.
In some circumstances we may not be able to give you access to all or some of your personal information, or may refuse to process certain requests, for example where a request is unreasonably repetitive or systematic, would be extremely impractical, or would require disproportionate technical effort. In those cases, we will tell you in writing why we cannot provide the information requested.
If you contact us to exercise any of these rights, we may ask you for enough information to verify your identity. We will use that information only for this purpose.
6. Security – How Information Is Protected
We maintain physical, electronic, technological and organizational safeguards designed to protect your personal information against loss, theft and unauthorized access, disclosure, copying, use or modification. These include user IDs, passwords and encryption technology; secure websites; secure electronic storage; and limiting access to personal information to employees and contractors who need it and who are bound by confidentiality obligations. When destroying personal information, we delete electronic records and shred physical materials. While we make reasonable efforts to destroy all copies of personal information, deleted information may continue to exist on backup media, but will not be used unless permitted by law.
While we try to maintain a secure and reliable Website, we cannot guarantee the confidentiality of any communication or material transmitted to or from the Website or by email. Communicating over the Internet may involve transmitting data internationally and across networks not owned or operated by us. By communicating with us electronically, you acknowledge and agree to this, and agree that we are not responsible for personal information that is lost, altered, intercepted or stored by a third party without authorization.
Your personal information may be transferred to, processed in and stored on servers in countries outside Canada, including the United States, and may be subject to laws that do not offer the same protection as Canadian law. Those laws may require disclosure of your personal information to governmental authorities in circumstances different from those in Canada. By submitting your personal information to us, you consent to its transfer, processing and storage outside Canada.
If a privacy breach involving your personal information creates a real risk of significant harm to you, we will notify you and the relevant privacy regulators as required by applicable law, as soon as feasible after we become aware of it.
7. Links to Other Sites
The Website may link to third-party websites, including social media platforms (such as Instagram and Facebook) and the websites of authorized cannabis retailers. These websites operate independently of us and have their own privacy and security policies. Any personal information you provide on them is provided directly to that third party and is subject to its privacy policy. This Policy does not apply to those websites, and we are not responsible for their content or practices. Please review the privacy policy of any website you visit.
8. Age Restriction
The Website is not intended for use by anyone under the age of nineteen (19), or the minimum legal age for cannabis in their province or territory of residence if it is higher. We do not knowingly collect or use personal information from anyone under that age. If we learn that we have unknowingly collected personal information from such a person, we will make commercially reasonable efforts to delete it.
9. Accountability – Requests, Questions and Comments
We have designated a privacy officer who is accountable for the protection of personal information and for our compliance with this Policy. If you have any questions or comments about this Policy or our compliance with it, or wish to make a request or a complaint, please contact our privacy officer in writing through the Contact Us page or by email at support@villagebrands.ca (Attention: Privacy Officer). We will respond within a reasonable time and at minimal or no cost to you, in accordance with applicable law.
You also have the right to contact the relevant privacy regulator if you have concerns about our compliance with applicable privacy laws. In British Columbia, this is the Office of the Information and Privacy Commissioner for British Columbia; federally, it is the Office of the Privacy Commissioner of Canada.
10. Governing Law
This Policy, and your interactions with the Company and the Website, are governed by the laws of the Province of British Columbia and the federal laws of Canada applicable there, excluding conflict of laws principles. The courts of British Columbia have exclusive jurisdiction over all matters arising under or in connection with this Policy and your interactions with the Company. If this Policy is inconsistent with applicable law, applicable law prevails and this Policy applies only to the extent permitted by law.
Last Updated: October 26, 2026.