Privacy policy

Effective Date: November 4, 2025

At Pure Native CBD, we are committed to protecting your privacy while ensuring transparency regarding the personal data we collect. This Privacy Policy outlines what data we collect, why we collect it, how we use it, and your rights concerning that data.

We encourage you to read this policy in its entirety. By using our website and services, you acknowledge the practices described herein.

1. Scope of This Policy and Data Controller

This policy applies to personal data collected when you interact with Pure Native CBD.

Data Controller: Pure Native CBD is the Data Controller responsible for the processing of your personal data.

Registered Office and Main Trading Address: Please insert your official UK registered address here. 321-323 High Road, Office 762, Chadwell Heath, Essex, RM6 6AX

2. Age Restriction and Eligibility

Our website and services are intended only for individuals who are 18 years of age or older.

By submitting your personal data and purchasing products, you affirm that you are 18 years of age or older and agree that we may use your data for the purpose of age verification, as required by law.

3. Personal Data We Collect

A. Data Collected During an Order/Purchase: To fulfill your order and provide service, we collect:

Identity Data: Your name.

Contact Data: Billing address, shipping address, telephone number, and email address (used for order confirmation and communication).

Financial Data: Billing information (handled securely by our third-party payment processor; we do not store full credit card numbers).

Transaction Data: Details about the products you purchased.

B. Sensitive Health Data (If Voluntarily Provided): If you choose to communicate health related information to us via email, feedback forms, or surveys (e.g., questions about product suitability for a condition), this is considered Special Category Data under GDPR. We will only process this data based on your explicit consent for the sole purpose of responding to your inquiry or improving our non medical product range. We will not store this data unless necessary for legal compliance or order fulfillment.

C. Data Collected When Browsing Our Website: We automatically collect certain Device Information for technical and analytical purposes:

Device type, IP address, Browser type.

Access times and Cookies (see our separate Cookie Policy).

4. How and Why We Use Your Information (Legal Bases)

We process your personal data under the following legal bases:

Purpose of Processing

Type of Data Used

Legal Basis

Fulfilling Orders & Service Emails

Identity, Contact, Financial, Transaction

Contract (Necessary to perform the contract of sale)

Age Verification

Identity, Contact, Device

Legal Obligation (Compliance with age restrictions for CBD sales)

Marketing Communications

Identity, Contact, Profiling

Consent (You must explicitly opt-in)

Improving Services & Internal Records

Transaction, Device, Feedback

Legitimate Interests (Improving our business efficiency and products)

5. Disclosure to Third Parties

We will not sell, distribute, or lease your personal information to third parties for marketing purposes. We only share data with necessary service providers who are contractually required to protect your data, including:

Payment Processors (e.g., for secure financial transactions).

Shipping Carriers (to deliver your orders).

Age Verification Services (if applicable).

6. Data Security, Storage, and Retention

We employ technical and organizational security measures (including encryption) to protect your information. We are based in the UK, and we strive to store and process data within the UK or EEA. If we transfer data internationally, we ensure appropriate safeguards (such as standard contractual clauses) are in place.

Data Retention:

Order Data: Generally kept for seven (7) years for tax and accounting purposes.

Marketing Data: Kept until you withdraw consent (unsubscribe).

7. Your Data Rights

Under UK data protection law (including GDPR), you have specific rights, including: the Right of Access, the Right to Rectification, the Right to Erasure (Right to be Forgotten), the Right to Restrict Processing, and the Right to Object to Processing.

You can withdraw your consent to our use of your personal data at any time.

8. Contact Information and Changes

Pure Native CBD may update this Privacy Policy periodically.

If you have questions, comments, or wish to exercise any of your data rights, please contact our dedicated Data Protection Contact:

Email: privacy@purenativecbd.co.uk. Address: Your UK Registered Office Address (See Section 1)