Spirit of Hemp Limited is committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. We may change this policy from time to time by updating this page and so you should check it regularly to ensure that you are happy with any changes. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
For the purpose of the Data Protection Act 1998 (the Act), the data controller is Spirit of Hemp Limited.
3. We may change this policy from time to time by updating this page and so you should check it regularly to ensure that you are happy with any changes.
4. When you visit our website, we’ll automatically collect certain information about the device you are using to access it. This will include information about the website browser you are using and the IP address of your internet connection. We may also identify your device with a unique, randomly generated, identifier.
5. As you browse our website we’ll continue to collect information about the website pages that you look at during your visit, how long you visit them, and what links you click on each page. We may also record what keywords you used to locate our website and what third-party website referred you to our website.
6. The information we collect about you is referred to as Device Information. It’s not personally identifiable to you (for example, we don’t collect or associate your name or address with this Device Information) and it’s not stored on our systems for any longer than we need to store it in order to allow you to use our website for the purposes in which it is intended.
7. We collect Device Information from you using Cookies. These are small data files that are placed on the browser you use, on your device, to visit the website. Cookies often include an anonymous and unique identifier (so we know it’s your device).
8. Certain cookies are placed on our website in order to make it work. For example, when you add items to the shopping basket/cart we need to store this information on a cookie. Where cookies we place on your computer are:
10. We may, from time to time, also collect information about your actions on the website and record those actions in log files. This data will include your IP address and may include the device that you are using, the browser that you are using, your internet service provider and be attached to date and time stamps. We’ll only include this information for as long as necessary.
For the avoidance of doubt, if at any time you wish to disable our cookies you may do so through the settings on your browser, but if you do so you will not be able to use certain important features of our service.
11. When you use our website to make a purchase of one of the goods or services that we offer for sale, or when you register for an account on our website (without making a purchase) you may be asked to provide certain personal information about you.
12. We may collect and process the following data about you:
13. When you make a purchase on our website you may also be asked to enter your credit or debit card details. You may be redirected to a ‘payment gateway’ website to enter your card details, or you might be asked to enter these directly onto our website.
14. Your full credit or debit card details are never stored on any databases we hold. You may be asked if you want to ‘store’ your purchase information for faster checkout at a later date, where you do store this information the full card information is never stored on any databases we hold. Instead we send the full information to our payment processor, who then send back a secure ‘token’ which we then use to place future purchases. To help you identify stored cards, we may store the last 4 digits of the card, the type of card (e.g. Visa or MasterCard) and the expiry date.
Where you wish, you can always delete a stored card within your customer account.
15. We call this data Personal Information.
17. Where we have given you (or where you have chosen) a password which enables you to access certain parts of this website you must keep this password confidential and secure.
18. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
19. We use Device Information we collect in order to help us screen for potential risk and fraud, to improve and optimise our website (by generating data about how our customers browse and interact with our website) and to analyse the success of our marketing and other advertising campaigns.
20. We use Personal Information that we collect to:
21. With your consent, we may, from time to time, provide you with information or advertising relating to the products and services that we provide.
22. We will share personal information and device information with third parties in their capacity as a data processor on our behalf. We’ll only share your information with third parties in so far as they assist us with using your information.
23. We may also share your personal information and device information in order to comply with applicable laws and regulations or to respond to any lawful request for information we receive, or to otherwise protect our rights.
23a. We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
We may disclose your personal information to third parties:
24. We may, from time to time, share your device or personal information to provide you with targeted advertisements or marketing communications we believe might be of interest to you. This may include sharing some of your information with third party networks such as Google, Bing or Facebook.
25. Our website does not alter it’s data collection and use practices when we see a Do Not Track signal from your browser.
26. If you are a resident of a country where the European Union’s GDPR is applicable, you have certain rights.
27. To exercise your rights to access your data, receive a copy of that data, or to rectify a mistake, please contact us.
29. For more information please contact us using the details below.
30. You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at Spirit of Hemp Limited, Priory bank, Lewes Road Forest Row or by email firstname.lastname@example.org
31. Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
32. The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you
35. In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you.