GDPR & PRIVACY POLICY
Last Updated: May 2026
1. Introduction
This Privacy Policy explains how CBD Flower UK collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website, you agree to the collection and use of information in accordance with this policy.
2. Company Information
CBD Flower UK is operated by Supplement Corner LTD, a company registered in England and Wales.
Company Name: Supplement Corner LTD
Company Number: 16898684
Registered Address:
32a 249 Birmingham Road
Bromsgrove
United Kingdom
B61 0DD
Website: CBD Flower UK
Email: info@cbdfloweruk.co.uk
3. What Personal Data We Collect
We may collect and process the following personal data:
- Full name
- Billing address
- Shipping address
- Email address
- Telephone number
- Payment information
- Order history
- IP address
- Device and browser information
- Website usage data
- Marketing preferences
- Cookie data
Payment details are processed securely by third-party payment providers. We do not store full card details on our servers.
4. How We Collect Your Data
We collect data when you:
- Place an order
- Create an account
- Subscribe to newsletters
- Contact customer support
- Browse our website
- Participate in promotions or surveys
- Accept cookies on our website
5. How We Use Your Data
We use your information to:
- Process and deliver orders
- Verify customer identity
- Process payments
- Provide customer support
- Improve our products and services
- Prevent fraud and misuse
- Comply with legal obligations
- Send order updates and service communications
- Send marketing communications where consent has been provided
6. Lawful Basis for Processing
Under UK GDPR, we process personal data under the following lawful bases:
- Performance of a contract
- Legal obligations
- Legitimate business interests
- Customer consent
- Fraud prevention and security purposes
7. Marketing Communications
We may send promotional emails or marketing communications where you have opted in to receive them.
You may unsubscribe from marketing communications at any time using the unsubscribe link included in emails or by contacting us directly.
Marketing consent is never pre-selected by default.
8. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to:
- Improve website functionality
- Remember customer preferences
- Analyze website traffic
- Support security features
- Deliver relevant marketing
Cookies may include:
- Essential cookies
- Analytics cookies
- Performance cookies
- Marketing cookies
Users may control cookie settings through their browser preferences or our cookie consent banner.
9. Sharing Your Information
We may share your data with trusted third parties where necessary, including:
- Payment processors
- Delivery couriers
- Website hosting providers
- IT service providers
- Marketing platforms
- Analytics providers
- Fraud prevention services
All third parties are required to handle personal data securely and lawfully.
We do not sell customer personal data to third parties.
10. International Data Transfers
Some third-party service providers may process data outside the United Kingdom.
Where international transfers occur, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
11. Data Retention
We retain personal data only for as long as necessary to:
- Fulfil customer orders
- Meet legal and tax obligations
- Resolve disputes
- Enforce agreements
- Maintain business records
Certain transactional data may be retained for up to 6 years in accordance with UK financial and accounting regulations.
12. Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
- SSL encryption
- Secure payment gateways
- Firewall protection
- Restricted data access
- Website security monitoring
While we take reasonable steps to protect data, no online transmission or storage system can be guaranteed as completely secure.
13. Your Rights Under UK GDPR
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent at any time
- Request transfer of your data
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, contact us at:
14. Subject Access Requests
You may request a copy of the personal data we hold about you by contacting us.
We may require proof of identity before processing such requests.
Requests are normally processed within one month in accordance with UK GDPR regulations.
15. Data Breach Procedures
In the event of a serious personal data breach, we will investigate the incident promptly and notify the appropriate supervisory authority within 72 hours where legally required.
Affected individuals may also be informed where necessary.
16. Third-Party Links
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of external websites.
Users should review the privacy policies of third-party websites separately.
17. Age Restriction
Our products are intended only for individuals aged 18 years or older.
We do not knowingly collect personal data from persons under the age of 18.
18. Governing Law
This Privacy Policy and any disputes arising from it shall be governed by and interpreted in accordance with the laws of England and Wales.
Any disputes shall be subject to the exclusive jurisdiction of the courts of the United Kingdom.
19. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
20. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes.
Updated versions will be published on this page with a revised effective date.
21. Contact Us
If you have any questions regarding this Privacy Policy or your personal data, please contact:
Supplement Corner LTD
32a 249 Birmingham Road
Bromsgrove
United Kingdom
B61 0DD
Email: info@cbdfloweruk.co.uk
Website: CBD Flower UK