Version of Privacy Policy; August 2018

OK CBD is a brand under Halco Products Ltd. This Privacy Policy is applicable to this Site and not necessarily to other Halco Products sites on the World Wide Web. Please read the privacy policy applicable to the site you are visiting. If you do not agree with this Privacy Policy, please do not use this Site. By accessing and using this Site, you hereby agree to the terms of this Privacy Policy.

Please also refer to the Terms & Conditions of sale before purchasing from OK CBD.

Contact Details

OK CBD
The Threshing Barn
Woodhayes
Honiton
Devon
EX14 4TP

Phone: 0333 41 41 454
Email: info@okcbd.co.uk / sales@okcbd.co.uk 
Data Protection Officer:  Clare Shobbrook

Data Controllers

Halco Products Ltd act as the controller of any data given by a User. Our web developers Blaze Concepts also act as controllers of this data as the managers of this Website.

Information That We May Collect & Why

In terms of a sale, we will collect the following information to fulfil your order and to provide us with contact details, should we need to contact you regarding the order.

  • Full name
  • Email address
  • Phone number
  • Billing & delivery address
  • IP Address

For Internal Business Analysis

We may collect the following information, in addition to the above, for our own internal business analysis:

  • Order history
  • Pages visited on this website
  • IP Address

For Marketing Purposes

We may collect the following information to send email marketing communications where consent has been given:

  • Full Name
  • Email Address
  • Date of Birth
  • Order History

How We Use Your Information

We use various third parties for internal analysis, customer services and where marketing communications consent has been given, to tailor marketing materials to our customers’ interests. You can find out more about marketing communications in the next section.

If you are simply browsing this site and do not enter any personal details, only anonymous data to do with how you use the website will be tracked. This is to help us make ongoing improvements to the user experience on our website. Please see our Cookie Policy for more information.

If you are placing an order or creating an account, we may use certain trusted third parties to process your data. This is so that we can analyse customer activity as a whole to make business, service and product improvements and to assist with customer service.

Please see below for a list of the third parties that we may use to process your data and the data that we share with them.

We will never sell your data and will only share your data with third parties that enable us to analyse our business data or deal with communications most effectively. We do not collect or buy data about you from any outside sources.

Data Processors For This Website

We may use the following third parties to process your data in order for us to provide our services and manage internal processes. These organisations have been audited to ensure compliance with the EU General Data Protection Regulations. Processors located in non-EU states have all been approved by the European Commission as having an adequate level of data protection.

Halco Products Ltd

The Data Controller

Data Processed: Name, address, email, DOB, payment information, purchase history

Reason for Processing: As the owners of this website, Halco Products Ltd are the main controllers and processors for any data held for our customers/website users. Data is processed in order to carry out the services offered by OK CBD.

Their Privacy Policy

Blaze Concepts

Website Management & Development

Data Processed: Name, address, email, DOB, payment information, purchase history

Reason for Processing: As our web developers, Blaze Concepts process your data on behalf of OK CBD in order to order to deliver the services of this Website.

Their Privacy Policy

PCA Predict

Address Lookup

Data Processed: Address

Reason for Processing: To allow the auto-filling of addresses to improve convenience for visitors/customers when creating an account or placing an order.

Their Privacy Policy

Klaviyo/Active Campaign

Email & Segmentation/Analysis

Data Processed: Name, Email Address, Location, order history, IP address, pages visited

Reason for Processing: We use Klaviyo/Active Campaign to send out emails to our subscribers. We also use it to segment our customers based on previous purchases so that we can send the most relevant promotional emails. We may also use this to send service emails should there be a disruption in our service or a problem with a customer’s order.

Their Privacy Policy

Metorik

Segmentation & Analysis

Data Processed: Name, address(es), email address, phone number

Reason for Processing: We use this software for internal business analysis. We also use it for customer services purposes to find or check details of an order or to look up any details required based on a customer request.

Their Privacy Policy

MOZ

Search Engine Optimization Software

Data Processed: Anonymous website visits

Reason for Processing: Internal analysis and website development

Their Privacy Policy

Google Analytics

Website Analysis

Data Processed: Anonymous website metrics (e.g. clicks, pages visited, website visits, conversions)

Reason for Processing: Internal analysis and website development

Their Privacy Policy

Reviews.co.uk

Customer Review Requests and Platform

Data Processed: Name and email address

Reason for Processing: When you place an order with us, your name and email address will be sent to Reviews.co.uk who may send you an email request to review Our products and/or service. This gives you the opportunity to let us know what your experiences were with the service received from OK CBD. This also provides a platform for others to view impartial reviews about OK CBD when considering a purchase. You can unsubscribe from Reviews.co.uk emails at any time.

Their Privacy Policy

Sagepay

Payment Processor

Data Processed: Name, email, addresses, payment card details

Reason for Processing: To process payments of behalf of OK CBD

Their Privacy Policy

Sage 50 Accounts

Accounting

Data Processed: Name, billing address

Reason for Processing: Accounting purposes

Their Privacy Policy

Outlook

Email (Customer Services)

Data Processed: Email (+ name/addresses/any further details provided by the customer)

Reason for Processing: To process and reply to customer enquiries

Their Privacy Policy

How We Use Your Data

How We Use Your Data In Relation To A Sale

Any data given to us in relation to a sale will be processed in order to fulfil the requirements of the sale. We may then process this data for the purposes of internal business analysis.

Lawful Basis for Processing

Our lawful basis for processing this information is: Contractual

How We Use Your Data In Relation To Business Analysis

When you agree to our terms & conditions, you agree to us analysing your purchase history and personal data, such as gender and age. This is for the purposes of internal analysis so that we can get to know our customer base in order to develop the Website, our products and services. We may also use this data along with your IP address (where cookies are enabled) to show you personalised product recommendations and to improve your experience of using our Website.

How We Use Your Data In Relation To Marketing Communications

We will only send marketing emails where you have given us permission to do so either at the checkout or through dedicated signup forms. You can unsubscribe from these emails at any time either from a link at the bottom of every email or by emailing us directly at info@okcbd.co.uk and asking to be removed from our marketing lists.

By signing up to receive our emails you agree to us capturing data through a third party on your email opens, email link clicks and subsequent related purchases. We do this to track and analyse the effectiveness of our campaigns. We may also use this data for profiling so that we can send you emails relevant to your previous purchases or products that you have shown an interest in.

If you do not agree to the above then please do not sign up to our newsletter. If you are already subscribed and wish to remove your data, please contact us.

Lawful Basis for Processing

Our lawful basis for processing this data is: Consent

How We Use Your Data In Relation To Other Email Communications

By placing an order with us, you agree for us to send any necessary service emails to update you on the status of your order or to make you aware of any issues with the website or your order. You can also opt out of these emails however you would no longer receive any order confirmations or updates. If you would like to do this, please contact us and we will ensure that you do not receive such updates.

If you use the contact form to email us for support, we will not use any details disclosed in this email for any other purposes than to reply to your query. We may however keep a record of your email(s) for internal analysis of customer feedback/complaints, or to refer to should you need to contact us about a previous issue in future.

Lawful Basis for Processing 

Our lawful basis for processing this data is: Contractual

How We Store & Protect Your Information

Your data is stored securely with our hosting provider on a VPS server. All data transferred between your browser and the server is encrypted. If you hold an account on this Website, your account password is also encrypted.

Any data held by third parties cannot be accessed by anyone outside of the Company or the third parties themselves. Third party platforms are password protected and can only be accessed by internal staff or staff of the third party in question. These companies have been audited by ourselves for GDPR compliance.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Our Data Retention Policy

We will retain any data we hold about you whilst you are actively using our services, until the point that you request removal or after a period of 7 years from the last order placed.

User accounts and data records for users that have no associated orders will be removed after 2 years of inactivity.

Your Right to Access, Corrections & Data Erasure

We respect your privacy rights and provide reasonable access to the Personal Data that you have provided to us through the use of our services.

How to Request Access, Amendments or Erasure of Your Data

If you wish to receive a record of data we hold about you, or for us to amend or erase any of your data, please contact us. We will follow company procedure, responding in a timely manner and satisfying the request within 30 days as per the requirements of the GDPR.

We require confirmation of identity in order to process your request. This involves the completion of a data access/modification/erasure request form. An electronic copy of this form will be emailed to you in the first instance. If a reply is not received after 14 days we will send a copy of the form by post, provided we have an address for you.

If we do not receive a completed form, we will be unable to complete your request as this will be deemed insufficient evidence of identity.

Amending Your Own Data

At any time, you may access and change your name, phone number, contact email and delivery and billing addresses yourself from within your Account. This will automatically update any records that we hold.

Unsubscribing from Marketing Emails

If you wish to unsubscribe from marketing emails you can do so at any time by clicking the link at the bottom of any of our marketing emails.

Our Cookie Policy

We use cookies for a variety of reasons detailed below. Unfortunately in most cases there are no industry standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that you do not disable cookies as they are most likely vital to providing services that you use on this Site.

What are Cookies?

Cookies are small text files that we place in your computer’s browser to store your preferences and are used by many websites for user experience and analysis purposes.

We use cookies to help identify your computer so we can tailor your user experience, track shopping basket contents and remember where you are in the order process.

You can disable any cookies already stored on your computer, but these may stop our website from functioning properly.

What Are They Used For?

The Cookies We Set

If you create an account with us, we will use cookies for the management of the signup process and general administration. These cookies will usually be deleted when you log out however in some cases they may remain afterwards to remember your site preferences when logged out.

We use cookies when you are logged in so that we can remember this fact. This prevents you from having to log in every single time you visit a new page. These cookies are typically removed or cleared when you log out to ensure that you can only access restricted features and areas when logged in

This site offers newsletter or email subscription services and cookies may be used to remember if you are already registered and whether to show certain notifications which might only be valid to subscribed/unsubscribed users.

This site offers e-commerce or payment facilities and some cookies are essential to ensure that your order is remembered between pages so that we can process it properly.

When you submit data to through a form such as those found on contact pages or comment forms cookies may be set to remember your user details for future correspondence.

We also use cookies to track the pages you visit via Google Analytics. This helps us to understand and improve the user experience of visitors to this Website.

Third Party Cookies

In some cases, we also use cookies provided by trusted third parties. The following section details which third party cookies you might encounter through this site.

This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.

For more information on Google Analytics cookies, see the official Google Analytics page.

Third party analytics are used to track and measure usage of this site so that we can continue to produce engaging content. These cookies may track things such as how long you spend on the site or pages you visit which helps us to understand how we can improve the site for you.

From time to time we test new features and make subtle changes to the way that the site is delivered. When we are still testing new features these cookies may be used to ensure that you receive a consistent experience whilst on the site whilst ensuring we understand which optimisations our users appreciate the most

As we sell products it’s important for us to understand statistics about how many of the visitors to our site make a purchase and as such, this is the kind of data that these cookies will track. This is important to you as it means that we can accurately make business predictions that allow us to monitor our advertising and product costs to ensure the best possible price.

How to Disable Cookies

You can accept or block all cookies from websites you visit by default or receive an alert whenever a cookie is offered by a website’s server by adjusting the settings on your browser (see your browser Help for how to do this).

Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of the this site, therefore we do not recommend disabling cookies.