Privacy Statement

01Personal Information We Collect

Information you give us

When you contact us, register to receive alerts or other information by email, text, or instant message, or purchase something from our Site, we collect the personal information you provide as part of the buying and selling process — such as your name, postal address, phone number, and email address; payment information, including your credit or debit card number and other card details, billing information, and account authentication information; the Products you purchase; and any other information you directly provide to us.

Information automatically collected

We use cookies and similar tools that make our Site easier to use. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your browser (if you allow it), enabling the site or service provider to recognize your browser and capture certain information. They also help us understand your preferences based on prior or current Site activity, and to compile aggregate data about Site traffic and interaction so we can improve our Site experience and tools. We may also use trusted third-party services that track this information on our behalf.

When you browse our Site, we automatically receive information such as your device's internet protocol (IP) address (which may be used to estimate your general location), the operating system running on your device, access times, browser type and language, and the website you visited before ours — helping us learn about your browser and operating system.

02How We Use Personal Information

We use the information we collect primarily to provide, maintain, protect, and improve our Site, Products, and Services, and to develop new products. We use personal information collected through our Site to:

• Create and secure your account and identify you as a user in our system
• Improve our Products, Site, Services, and business
• Understand and enhance your experience with us
• Facilitate your order and deliver the Products you request
• Respond to your comments or questions and provide Services
• Send you confirmations, invoices, updates, support, and other messages
• Communicate with you about promotions, upcoming events, and news about Products and Services, and for other marketing purposes
• Link or combine your information with other information we receive from third parties to better understand your needs and improve service
• Protect, investigate, and deter fraudulent, unauthorized, or illegal activity

03How We Share Personal Information

We may share your personal information as follows:

• If you opt in to receiving our marketing materials, we may share personal information with our partners and others for their own marketing uses. Those uses are subject to their own privacy policies.
• We may share information with vendors, service providers, contractors, and agents who perform services on our behalf. These providers are prohibited from using your information except to perform their work or as required by law.
• We may share personal information in connection with a business deal or negotiation involving the sale or transfer of all or part of our business or assets, including a merger, financing, acquisition, or bankruptcy transaction or proceeding.
• We may share personal information for legal, protection, and safety purposes.
• We may share information to comply with laws or as permitted by law.
• We may share information to respond to lawful requests and legal process.
• We may share information with other companies and brands owned or controlled by the Company, including our subsidiaries.
• We may share information to protect the rights and property of the Company, our agents, customers, and others, including to enforce our agreements, policies, and terms of use.
• We may share information in an emergency, including to protect the safety of our employees, agents, customers, or any person.

04How We Secure Your Information

We take the security of your personal information seriously and use reasonable electronic, personnel, and physical measures to protect it from loss, theft, alteration, or misuse. Even the best security measures cannot fully eliminate all risk, and we cannot guarantee that only authorized persons will view your information. We are not responsible for third-party circumvention of any privacy settings or security measures.

Wherever we or a trusted third-party service collect sensitive information, such as credit card data, that information is encrypted and transmitted securely. You can verify this by looking for a closed lock icon or "https" at the beginning of the web address. Purchases made on our Site are encrypted using secure socket layer (SSL) technology and stored with AES-256 encryption. Although no method of transmission or storage is 100% secure, we follow PCI-DSS requirements and implement additional industry-standard safeguards.

We are dedicated to protecting your personal information; however, you are responsible for keeping your password confidential. Change your password immediately if you believe someone has gained unauthorized access to it or your account, and notify us immediately if you learn of any loss of, or unauthorized access to or disclosure of, personal information in our custody.

05Your California Privacy Rights

This section describes the rights of California residents under the California Consumer Privacy Act of 2018 ("CCPA") and its implementing regulations.

Right to opt out of sale of personal information

We do not sell or trade your personal information, or otherwise transfer it outside the situations described above, so we do not offer an opt-out for sale of personal information.

Right to access your personal information

Subject to applicable law, you may review, verify, or correct your personal information. To submit such a request, email us or write to the Company at 420 Lexington Avenue, Suite 2035, New York, NY 10170. Only you, or a person legally authorized to act on your behalf (an "Authorized Agent"), may make a verifiable consumer request. You may request this information up to two times in a 12-month period.

Right to delete your personal information

You have the right to request deletion of your personal information. To submit such a request, email us or write to the Company at 420 Lexington Avenue, Suite 2035, New York, NY 10170. Only you, or an Authorized Agent, may make a verifiable consumer request.

Authorized agents

If you use an Authorized Agent to submit a request to know or delete, we may require the agent to submit proof of authorization to act on your behalf. We may accept as proof:

• Written permission from you, or
• A power of attorney under California Probate Code §§ 4000–4465

We may also require the Authorized Agent to verify their identity directly with us.

Accessibility

We recognize the need to develop electronic and information technology products and services that are accessible and usable by all people, including those with disabilities and special needs. We provide technical and customer support to accommodate the needs of users with disabilities and to address issues related to the accessibility of our Products, including:

• General customer support: (781) 451-0150 — Monday–Friday, 8:30 a.m. to 5:00 p.m. EST, excluding holidays
• Privacy policy inquiries: (781) 451-0150 — Monday–Friday, 8:30 a.m. to 5:00 p.m. EST, excluding holidays

Non-discrimination

We will not discriminate against you for exercising any right under the CCPA. Unless permitted by the CCPA, we will not:

• Deny you Products or Services
• Charge you different prices or rates for Products or Services, including through discounts, other benefits, or penalties
• Provide you with a different level or quality of Products or Services
• Suggest that you will receive a different price, rate, level, or quality of Products or Services

06Consent

How do you get my consent?

By using our Services, we assume you have consented to the collection, use, and disclosure of your personal information as explained in this Privacy Policy. When you provide personal information to complete a transaction, verify a credit card, place an order, arrange delivery, or return a purchase, we treat that as consent to our collecting and using it for that specific purpose. If we ask for your personal information for a secondary reason, such as marketing, we will ask for your express consent or give you the opportunity to decline.

You may change or withdraw your consent at any time using the instructions above, subject to legal or contractual restrictions and reasonable notice. Withdrawing or changing your consent to certain uses of your personal information may affect our ability to provide the products or services you request, and your ability to access this Site. If you opt out of marketing materials, we may still send non-marketing emails, such as order confirmations.

07Request to Unsubscribe from Further Messages

By providing your email address, you give us permission to send you emails about the Company, new products, and other updates. You may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of each email.

How do I withdraw my consent?

If you change your mind after opting in, you may withdraw consent for us to contact you, or for the continued collection, use, or disclosure of your information, at any time by contacting us, clicking "Unsubscribe" at the bottom of any email, or writing to:

08Age of Consent

By using this Site, you represent that you are at least the age required to purchase Curaleaf products in your state or province of residence, or that you are the age of majority in your state or province of residence and have given consent for any minor dependents to use this Site. If we learn or have reason to suspect that a user is under age 18, we will promptly delete any personal information in that user's account.