Privacy Policy
About this policy
This Privacy Policy explains how Curaleaf International (Australia) Pty Ltd (we, us, our) collects, holds, uses and discloses personal information when you:
- visit our website;
- contact us;
- register for, access or use our products or services;
- interact with us through third party partners, distributors, content providers or service platforms; or
- otherwise deal with us.
We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
The personal information we collect
The kinds of personal information we may collect include:
Communication Data
Information contained in correspondence, enquiries, feedback, support requests, forms, surveys and other communications you send to us.
Service Data
Information you provide when using our products or services, creating an account, submitting requests, completing transactions, or otherwise interacting with our systems, together with information generated in the course of providing those products or services.
Technical and Usage Data
Information such as IP address, login information, browser type and version, device identifiers, operating system, time zone, approximate location, referring URLs, pages viewed, session activity, clicks, and other technology or usage information relating to the devices and systems you use to access our website or services.
Marketing and Preference Data
Your preferences in receiving marketing communications from us and your communication preferences.
Sensitive Information
We do not generally seek to collect sensitive information unless it is reasonably necessary for our functions or activities and permitted by law. Where required, we will obtain your consent before collecting sensitive information.
How we collect personal information
We may collect personal information:
- directly from you, including when you contact us, submit forms, create an account, request information, or use our products or services;
- automatically, including through cookies, analytics tools, server logs and similar technologies when you use our website or digital services; and
- from third parties, including group companies, service providers, business partners, distributors, content providers, publicly available sources, and other parties connected with the products or services we provide.
Where reasonable and practicable, we collect personal information directly from you.
Why we collect, hold, use and disclose personal information
We may collect, hold, use and disclose personal information for purposes including to:
- provide, administer, operate, maintain and improve our website, products and services;
- set up and manage accounts, registrations and subscriptions;
- communicate with you and respond to enquiries or requests;
- provide customer support, troubleshooting, testing, maintenance, reporting and hosting;
- personalise content, functionality and user experience;
- send service-related notices, updates and administrative communications;
- where permitted by law, send marketing communications and information about our business, products or services;
- conduct analytics, research, auditing and business planning;
- protect our legal rights and legitimate business interests;
- comply with legal, regulatory and reporting obligations; and
- otherwise carry out our functions and activities.
We will only use personal information for the purpose for which it was collected, for related purposes you would reasonably expect, or otherwise as permitted or required by law.
What happens if you do not provide personal information
If you do not provide the personal information we reasonably require, we may not be able to:
- provide you with requested information, products or services;
- respond properly to your enquiries;
- create or maintain your account; or
- enable you to use certain features of our website or services.
Disclosure of personal information
We may disclose personal information to:
- our employees, officers and related bodies corporate;
- contractors, consultants and advisers;
- IT, hosting, analytics, communications and other service providers;
- payment, identity verification, logistics or fulfilment providers, where relevant;
- business partners, distributors, resellers or third party content providers involved in delivering services to you;
- insurers, auditors, legal and other professional advisers;
- regulators, government agencies, law enforcement bodies, courts and tribunals; and
- any other person where you have consented or where disclosure is permitted or required by law.
We do not sell personal information to third parties.
Overseas disclosure
Some of our service providers, group entities or business partners may be located outside Australia or may store or process personal information overseas.
Where this is likely, the countries or jurisdictions in which recipients are likely to be located may include: the United States, Canada, the United Kingdom, Switzerland, Guernsey, Turkey, and members of the European Union.
We will take reasonable steps in the circumstances to ensure that overseas recipients handle personal information in a manner consistent with Australian privacy law, unless an exception under the Privacy Act applies.
Data security
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.
These steps may include technical, administrative and physical safeguards such as:
- access controls and authentication measures;
- system monitoring and logging;
- encryption and secure transmission methods where appropriate;
- staff confidentiality obligations; and
- policies and procedures for information handling and incident response.
No method of transmission over the internet or electronic storage is completely secure. However, we seek to use commercially reasonable safeguards to protect personal information.
Retention of personal information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, regulatory or reporting requirements, resolve disputes, and enforce agreements.
When personal information is no longer required, we will take reasonable steps to destroy it or de-identify it, unless we are required or authorised by law to retain it.
Access and correction
You may request access to the personal information we hold about you, and you may request that we correct personal information if it is inaccurate, out-of-date, incomplete, irrelevant or misleading. You may also request the deletion or erasure of your personal information where permitted by applicable law, including where it is no longer necessary for the purposes for which it was collected, subject to any legal requirements or permissions that allow us to retain or continue processing it.
We may need to verify your identity before responding to your request. In some circumstances, the law permits us to refuse access or correction, in whole or in part. If that occurs, we will provide reasons where required.
To make a request, please contact us using the details below.
Complaints
If you believe we have breached the Privacy Act or the Australian Privacy Principles, you may make a complaint by contacting us using the details below. Please include sufficient details so that we can understand and investigate the issue.
We will review your complaint and respond within a reasonable period.
If you are not satisfied with our response, you may be able to refer your complaint to the Office of the Australian Information Commissioner (OAIC).
Direct marketing
Where permitted by law, we may use your personal information to send you information about our products, services, updates, events or promotional activities that may interest you.
You can opt out of receiving marketing communications at any time by using the unsubscribe function in the communication or by contacting us using the details below.
Where you subscribe to, or otherwise consent to receive, our newsletter, we may collect and use your email address, name if provided, subscription preferences and records of your consent for the purposes of sending, administering and managing the newsletter, maintaining communication preferences, and monitoring delivery and engagement.
We will send newsletters only where permitted by law and, where required, with your consent. Each newsletter will identify Curaleaf International (Australia) Pty Ltd as the sender, include our contact details, and provide a clear and functional unsubscribe facility.
You may unsubscribe from our newsletter at any time, free of charge, by using the unsubscribe link in the newsletter or by contacting us using the details below. We will action unsubscribe requests within five business days. Unsubscribing will not require you to create an account, log in or provide additional personal information.
Unsubscribing from the newsletter will not necessarily stop service-related, transactional, administrative or other non-marketing communications that we are required or authorised to send, or that relate to your relationship with us.
We may use third-party email marketing, hosting, analytics and technology service providers, including providers located overseas, to distribute newsletters, manage subscriptions, process unsubscribe requests and analyse newsletter performance. Any such handling of personal information will be subject to the disclosure and overseas-disclosure arrangements described in this Privacy Policy.
Cookies and similar technologies
Our website may use cookies, pixels, local storage and similar technologies to:
- remember user preferences;
- maintain website functionality and security;
- understand how users interact with our website;
- improve performance and user experience; and
- support analytics and, where applicable, advertising activities.
Cookies may be session-based or persistent. You can usually control cookies through your browser settings. If you disable or block cookies, some parts of the website or services may not function properly.
Third party websites and services
Our website or services may contain links to, or integrations with, third party websites, platforms or services. We do not control those third parties and are not responsible for their privacy practices. We encourage you to review their privacy policies before providing personal information to them.
Anonymity and pseudonymity
Where lawful and practicable, you may have the option of dealing with us anonymously or by using a pseudonym. However, in many cases we will need your identity or contact details to provide services, respond to requests, or comply with legal obligations.
Children
Our website and services are not directed to children unless expressly stated otherwise. If we learn that we have collected personal information from a child in circumstances where consent was required and not validly obtained, we will take appropriate steps to address that.
Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be posted on our website and will take effect from the date of posting.
Contact details
If you have any questions, requests or complaints about this Privacy Policy or our handling of personal information, please contact:
Curaleaf International (Australia) Pty Ltd
Level 5, 126 Phillip Street, Sydney, NWS, 2000, Australia
ACN 691 460 429 / ABN 18 691 460 429
Email: data.protection@curaleafint.com
Last update 21/07/2026