Data Collection & Age Verification

When you browse our Site, we automatically collect "Device Information," including your IP address, browser type, and time zone. We use industry-standard technologies to ensure a seamless shopping experience:

• Cookies: Essential data files to maintain cart items and visitor preferences.
• Analytics: Tools such as Google Analytics to help us analyze store interaction and optimize navigation.
• Age & Identity Verification: In accordance with UK law, CBD products are restricted to adults aged 18 and older. We may collect and verify age-related data during checkout to comply with legal sales mandates.

Upon placing an order, we collect "Order Information," including your name, billing/shipping addresses, payment details, email address, and telephone number.

Our Legal Basis for Processing

We process your personal data under the following legal grounds:

• Contractual Necessity: To fulfill, process, and ship your orders securely.
• Legal & Regulatory Obligation: For HMRC tax reporting, age restriction compliance, and UK retail mandates.
• Legitimate Interests: To safeguard our store against fraudulent transactions and continuously refine our product offerings.
• Consent: For promotional newsletters and special offers where you have explicitly opted in.

Information Sharing & Couriers

We share necessary data with trusted third-party providers strictly to facilitate our commerce operations:

• Shopify: Powers our online storefront infrastructure.
• Fulfilment & Delivery Partners: Such as Royal Mail or courier networks to deliver your orders in discreet packaging.
• Legal & Regulatory Bodies: To meet UK legal obligations, respond to lawful requests, or protect the rights and safety of our business.

Your Statutory Rights

As a UK resident, you hold the following rights under the UK GDPR:

• The right to be informed and access a copy of your personal data.
• The right to correct inaccurate or incomplete information.
• The right to erasure ("right to be forgotten") and restricted processing.
• The right to data portability.

Data Retention

We retain your Order Information for a minimum of 7 years to satisfy UK HM Revenue & Customs (HMRC) accounting requirements. Following this statutory period, or upon a valid request for erasure, your data will be permanently deleted or anonymized.