English Q4 Earnings Webcast FAQ Contact Us About Investors Brands Press Releases Careers Powered By HEXO® PRIVACY POLICY IMPORTANT – PLEASE READ CAREFULLY: HEXO Operations Inc. (“HEXO”, “We”, “we”, “Us”, “us”, “Our” or “our”) is committed to protecting your privacy. This Privacy Policy applies to the collection, use and disclosure of personal information, including personal information relating to you (“you”, “You”, “user” or the “User”), by HEXO in connection with HEXO’s Hexo.com web site (the “Web Site”), HEXO’s recreational use-related products (the “Products”), any of HEXO’s recreational use-related business and/or your use or interactions with any of same and any and all services, features, tools and web applications made available through and in association with the Web Site or any other aspect of HEXO’s recreational use-related business (collectively, the “Services”). WHAT PERSONAL INFORMATION WE COLLECT In connection with the Web Site and the Services, HEXO collects personal information about identifiable individuals (“Personal Information”) relating to use of the Web Site, Services, and Products by Users. Personal Information includes such things as your name, mailing address, e-mail address, age, income, date of birth, gender, financial information and credit records, as well as your opinions, requests for certain products or services, information regarding products or services we may receive from you, preferences, purchase patterns and any other information related to the Products or Services gathered due to our relationship with you. We only collect such Personal Information as is reasonably required to provide Products and Services to you and as otherwise provided in this Privacy Policy. If the personal information we require is collected for a reason other than as outlined in this Privacy Policy, your consent will be obtained before or at the time the information is collected. You may view your Personal Information on file with HEXO, and may request that corrections be made to such Personal Information. Any requests to view or correct your Personal Information on file with HEXO can be directed by e-mailed request to our designated Privacy Officer at the e-mail address referred to in the section “MISCELLANEOUS” below. WHY WE COLLECT PERSONAL INFORMATION Personal Information submitted to us, whether through the Web Site, the Services, the Products, or otherwise, may be used by us for the purposes specified in this Privacy Policy or as otherwise communicated to you in connection with your use of the Services. In addition to the other purposes identified in this Privacy Policy, we may use your Personal Information to: deliver to you and enable your use of the Products, Services, and Website, and process transactions related to your use of the same; personalize and improve the Web Site, Products and/or Services; address inquiries, complaints, submissions and feedback relating to the Services and/or the Web Site; compile your and other Users’ Personal Information to generate de-identified data (data with identifying information removed) for use by HEXO and its affiliates for business and research and development purposes, to enhance and expand upon our products and services or to promote the interests of HEXO and its customers; contact you with your consent, including to promote and advertise our products and services to you and to offer you discounts, promotions, and other offers relating to the Services or Products or other HEXO products or services; store, copy, or back up your Personal Information for providing the Services and for security and archival purposes; verify compliance with agreements between you and us, including the Terms and Conditions of Use associated with the Web Site and Services; conduct questionnaires or research about your opinion of current Services or of potential new Services that may be offered in the future or offer enrolment in contests, raffles, competitions, or draws; survey your activity through the Web Site and/or the Services, and your use of the Products; comply with legal and regulatory requirements; and achieve other purposes as may, from time to time, be permitted by law. We may engage other companies and individuals (“Third Party Service Providers”) to make some or all of the uses of the Personal Information referred to above on our behalf, and/or to perform some or all of the Services on our behalf. Third Party Service Providers may require or be provided with access to your Personal Information in order to make some or all of the uses of the Personal Information referred to above on our behalf and/or to perform the Services on our behalf. We make commercially reasonable efforts to ensure that all Third Party Service Providers acting on our behalf provide a comparable level of protection for your Personal Information to the level of protection that we provide. Personal Information that we collect may be uploaded, moved, stored, processed in, backed up, transmitted and/or transferred between any of the countries in which we operate (including across international borders), to enable us to use the Personal Information in accordance with this Privacy Policy. By providing your information to HEXO, you consent to us using your personal information for the purposes outlined above. WHEN WE MAY DISCLOSE PERSONAL INFORMATION Any Personal Information provided by you, or that is derived automatically by or through the Web Site and/or the Services, is not sold, rented, or shared by us with any third party without your consent, except as described in this Privacy Policy. We may disclose your Personal Information to any of our employees, officers, insurers, professional advisers, agents, Third Party Service Providers, suppliers or subcontractors, to the extent that such disclosure is reasonably necessary for the purposes set out in this Privacy Policy. YOUR CONSENT HEXO obtains your consent to collect, use or disclose your personal information, except as permitted by law. The method of obtaining consent depends on the circumstances and the sensitivity of the information. Consent may be oral or written, express or implied. Your express consent (verbal, written or electronic agreement) is obtained to collect, use or disclose sensitive personal information. Implied consent is obtained in circumstances where a customer relationship already exists, express consent has previously been given, or the purpose of using the personal information is reasonably apparent to you. You can change your consent preferences at any time by contacting our designated Privacy Officer at the e-mail address referred to in the section “MISCELLANEOUS” below. You may “opt-out” or withdraw your consent to the collection, use and disclosure of your Personal Information as set out in this Privacy Policy at any time. Withdrawal of your consent may result in the Services or certain aspects of the Services being unavailable to you. After withdrawal, HEXO reserves the right to limit your access or prevent you from accessing the Services, through the Web Site or otherwise. INFORMATION WE AUTOMATICALLY GATHER We may receive and store certain types of computer information whenever you interact with the Web Site or the Services. Examples of the information that we may automatically receive and store may include the Internet protocol (IP) address used to connect your computer to the Internet; computer and connection information such as browser type and version, operating system, and platform; and the full Uniform Resource Locators (URL) click stream to, through, and from our Web Site, including date and time information relating to your visits. Such automatically gathered information may be used by HEXO for the operation of the Services provided to you via the Web Site or otherwise, to maintain the quality of the Services provided through the Web Site or otherwise, and to provide HEXO with general statistics relating to use of the Services and/or Web Site. We may use IP addresses to analyze trends, administer the web site, track user’s movement, to determine what Services are the most popular, advertise, and gather broad demographic information for aggregate use. HOW WE PROTECT AND SECURE YOUR PERSONAL INFORMATION HEXO secures your Personal Information from unauthorized access, use and disclosure by third parties. We use a variety of security technologies and procedures to help protect your Personal Information. For example, we may secure the Personal Information you provide on computer servers in a controlled, secure environment, protected from unauthorized use. We may also protect Personal Information through the use of encryption software. All of our Third Party Service Providers are required under their contracts with us to maintain your confidentiality and may not use your information for any unauthorized purpose. We review our procedures and security measures regularly to ensure that they are properly administered and remain effective and appropriate for the sensitivity of the information. There are always risks associated with providing Personal Information and sensitive data, whether in person, by phone, mobile, or tablet device, via the Internet or via other technologies. You acknowledge that the transmission of information and data over the Internet is inherently insecure, and there are no security systems that are completely safe or fool-proof against hacking or tampering. We will take reasonable precautions to prevent and minimize such risks in connection with your Personal Information, but HEXO offers no (and hereby expressly disclaims any) guarantee, representation, warranty, or covenant of any kind with respect to securing your Personal Information from unauthorized access, use and disclosure by third parties. You are solely responsible for controlling access to your accounts associated with the Web Site and/or the Services, and maintaining the confidentiality and security of your accounts and related password information. We will not keep Personal Information for any longer than is necessary for the purposes identified in this Privacy Policy. Personal Information no longer required will be destroyed, erased, or made anonymous. THIRD PARTY PRIVACY POLICIES AND LINKS The Web Site may include hyperlinks to, and details of, third party web sites or Internet resources. HEXO does not endorse, approve of, verify, attest to, or offer any representation or warranty with respect to, the accuracy of the content of such web sites that are linked. If you decide to leave the Web Site and access these third-party sites, you do so at your own risk. When you click on one of those links you are contacting another web site or Internet resource that may collect information about you, including Personal Information, voluntarily or through cookies. The privacy policies of such third parties may not mirror those of HEXO. We have no control over other web sites or Internet resources or their policies regarding the collection, use and disclosure of your Personal Information, and HEXO accepts no responsibility or liability for the privacy practices of third parties, including any unauthorized collection, use or disclosure of your Personal Information through third party web sites or Internet resources. CHANGES TO THIS PRIVACY POLICY Our Privacy Policy may be updated from time to time. We encourage you to review the current Privacy Policy from time to time. The collection, use and disclosure of Personal Information by HEXO will be governed by the version of this Privacy Policy in effect at that time. All new or otherwise modified terms take effect immediately. MISCELLANEOUS We welcome your comments regarding this Privacy Policy. If you would like more information on this Privacy Policy or our organizational privacy policies, if you believe that we have not adhered to the terms of this Privacy Policy, or if you would like to view and/or request that corrections be made to your Personal Information on file with us, please contact our designated Privacy Officer at compliance@hexo.com. Brands Adult-Use Medical Resources FAQ Terms of Use Privacy Policy Social Media Policy Company Management Contact Us Environmental, Social, Governance Investors Financial Information Analyst Coverage SEDAR Filing Governance © 2021 HEXO Corp.