No products in the cart.
Last updated: 31 August 2026
Distillate Direct (“we”, “us”, “our”) operates distillatedirect.shop. This policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices you have. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
Who we are
Our website address is https://distillatedirect.shop. We are a Canadian mail-order cannabis retailer shipping within Canada only.
Age restriction
This site is intended solely for adults of legal age to purchase cannabis in their province or territory (19+ in most of Canada, 18+ in Alberta, 21+ in Quebec). We do not knowingly collect personal information from anyone under the legal age. If we learn that we have collected information from an underage person, we will delete it.
What we collect and why
Account information
When you create an account we collect your name, email address, and a password (stored only as a secure hash – we never see or store your password in readable form). You may optionally add a phone number and saved addresses.
Order information
When you place an order we collect your billing and shipping address, the contents of your order, order totals, and correspondence relating to that order. We keep order records so we can fulfil, track, and support your purchase, and to meet our record-keeping obligations.
Payment information
Orders are paid by Interac e-transfer. We do not collect or store credit card numbers, banking credentials, or e-transfer security answers on this website. Payment confirmation is handled outside the site through your own bank or payment provider.
Age verification
We may ask you to confirm your age, and in some circumstances to provide government-issued photo identification, before an order is released. Where identification is provided it is used only to verify age and eligibility, and is not retained longer than necessary for that purpose.
Technical information
Like most websites, our server and security tools automatically record IP addresses, browser type, device information, referring pages, and timestamps. We use this for security, fraud prevention, and diagnosing problems.
Cookies
We use cookies to keep your shopping cart and session working, to remember your preferences, and to understand how the site is used. Essential cookies are required for the cart, checkout, and login to function. You can block or delete cookies in your browser, but parts of the site will stop working correctly if you block essential cookies.
Reviews
If you submit a product review we collect the content you write, the name you supply, and your IP address, and we display the review publicly on the relevant product page.
Marketing email
If you opt in, we use your email address to send offers and product news. Every marketing email includes an unsubscribe link, and opting out takes effect immediately. Opting out of marketing does not stop transactional email about orders you have placed.
How we use your information
- To process, fulfil, ship, and support your orders
- To verify that you are of legal age to purchase
- To communicate with you about an order or an enquiry
- To send marketing communications where you have opted in
- To detect, prevent, and investigate fraud, abuse, and security incidents
- To improve our products, site, and service
- To meet legal and regulatory obligations
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.
Who we share information with
We share only what is necessary, and only with providers who help us operate:
- Shipping carriers – name, delivery address, and contact details, so your order can be delivered
- Our web host – which stores the site and its database on our behalf
- Email delivery and marketing providers – to send transactional and opted-in marketing email
- Analytics and security services – which process technical data such as IP addresses
- Law enforcement or regulators – only where we are legally required to do so
Where your information is stored
Our site and database are hosted on servers operated by our hosting provider. Some service providers may process or store data outside Canada, in which case that information may be subject to the laws of the country where it is held.
How long we keep it
- Order records – retained for as long as required for accounting, tax, and regulatory purposes
- Account information – retained while your account is open
- Marketing contact details – until you unsubscribe
- Reviews – retained and displayed until you or we remove them
- Security and server logs – retained for a limited period, then discarded
How we protect it
The site is served over encrypted HTTPS connections. Passwords are stored only as hashes. Administrative access is restricted, and we use security tooling to monitor for unauthorised access. No system can be guaranteed completely secure, but we take reasonable steps to protect the information in our care and to respond quickly if a problem arises.
Your rights
You may:
- Access the personal information we hold about you
- Correct information that is inaccurate or out of date
- Request deletion of your account and associated data, subject to records we are legally required to keep
- Withdraw consent to marketing at any time
- Export a copy of your data
- Complain to the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been breached
Logged-in customers can view past orders and update account details from the My Account page. For anything else, contact us using the details below and we will respond within a reasonable time.
Changes to this policy
We may update this policy from time to time. The revision date at the top of this page shows when it last changed. Material changes will be highlighted on the site.
Contact us
Questions about this policy, or about the information we hold about you, can be sent through our contact page.