Privacy and Cookies Policy

Last Updated: 12 June 2025

At The Cannabis Seed Shop (www.thecannabisseedshop.uk), a UK-based limited company selling legal cannabis seeds to customers aged 18+, we’re committed to protecting your privacy and keeping our website user-friendly. This Privacy and Cookies Policy explains how we collect, use, and safeguard your data, and how we use cookies, in line with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and Privacy and Electronic Communications Regulations (PECR). We collect minimal data, delete it quickly, and use cookies sparingly to ensure a smooth experience.

1. About Us

Company: The Cannabis Seed Shop Limited
Registered Address: [Insert your registered company address]
Contact Email: [Insert contact email, e.g., privacy@thecannabisseedshop.uk]
Data Controller: We’re responsible for your personal data.

Questions? Reach out at [Insert contact email].

2. Data We Collect

We collect only what’s essential:

• Members Club: Your email address if you join our newsletter or members club.
• Orders/Auctions: Temporary data (e.g., name, address, payment details) during checkout or auction bids, handled by our payment processor and deleted immediately after fulfillment.
• Website Use: Anonymized technical data (e.g., IP address, device info) via cookies, Google Analytics, and X Analytics for performance monitoring.

We don’t store names, addresses, or payment details. No sensitive data (e.g., health, biometric) is collected.

3. How We Collect Data

Data comes from:

• You: Email for members club or temporary order/auction details.
• Automatically: Anonymized data via cookies, Google Analytics, X Analytics, or Webador’s servers when you browse.
• Third Parties: Our payment processor ([Insert processor, e.g., Stripe or PayPal]) handles order/auction data, but we don’t keep it.

4. Cookies and Tracking

Cookies are small text files stored on your device to make our site work and improve performance. We use:

• Essential Cookies: Required for shop, auction, checkout, and secure navigation. These can’t be disabled.
• Analytics Cookies: Anonymized data via Google Analytics and X Analytics to track page views and site performance. These don’t identify you.

We don’t use cookies for ads or cross-site tracking. Manage cookies via our consent pop-up or browser settings (e.g., Chrome: Settings > Privacy > Cookies). Disabling analytics cookies won’t affect your experience. Webador’s hosting cookies are essential and always active.

5. How We Use Your Data

We use data only for necessary purposes, per UK GDPR:

6. Sharing Your Data

We don’t sell or share data for marketing. We share only what’s needed:

• Payment Processor: [Insert processor name] handles payments/orders/auctions. We don’t store this.
• Royal Mail: Temporary address for 1st-class next-day tracked/non-tracked delivery, deleted after shipping.
• Webador: Processes anonymized technical data for hosting.
• Analytics: Google Analytics and X Analytics process anonymized data. See Google’s Privacy Policy and X’s Privacy Policy.
• Legal Requirements: Minimal data shared if required by UK law (e.g., HMRC).

All third parties are UK GDPR-compliant.

7. Data Storage and Deletion

We keep data for the shortest time:

• Order/Auction Data: Deleted after shipping and payment.
• Members Club Emails: Kept until you unsubscribe, then deleted.
• Analytics/Cookie Data: Anonymized, retained only for performance monitoring.
• Legal Data: Anonymized transaction data (e.g., order totals) kept for UK tax compliance, no personal details.

8. Data Security

We protect your data:

• Encryption: Payments and transfers are encrypted via our payment processor.
• Webador Hosting: Secure UK servers.
• Minimal Storage: No personal data stored, reducing risks.

No system is 100% secure, but we take every precaution.

9. UK-Only Operations

We operate solely in the UK, so your data stays under UK GDPR jurisdiction. No international transfers occur, as our payment processor, Royal Mail, Webador, and analytics providers process data in the UK or under UK-compliant agreements.

10. Your Rights

Under UK GDPR, you have rights:

• Access: See what data we hold (likely just your email).
• Rectification: Fix errors.
• Erasure: Delete your data (e.g., unsubscribe).
• Restriction: Limit data use.
• Portability: Get your data in a usable format.
• Object: Stop data use (e.g., marketing).
• Withdraw Consent: Opt out of emails/cookies.

Email [Insert contact email] to exercise rights. We’ll respond within 30 days. Contact the Information Commissioner’s Office (ICO) at www.ico.org.uk or 0303 123 1113 if unhappy.

11. Age Restriction

Our site is 18+ only. We don’t collect data from under-18s. Suspected underage data is deleted immediately.

12. Third-Party Links

Links to third parties (e.g., payment processor) may appear. We’re not responsible for their privacy practices. Check their policies.

13. Postage

We ship UK-only via Royal Mail 1st-class next-day tracked/non-tracked, per your choice. Address data is shared with Royal Mail and deleted post-shipment.

14. Updates

We may update this policy. Check the “Last Updated” date. Major changes will be shared via site or email.

15. Contact

Questions? Contact:

• Email: [Insert contact email]
• Address: [Insert registered address]