Last updated: 25 June 2026
This Privacy Policy describes how Calm Leaf CBD ("we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from calmleaf.co.uk (the "Site").
For the purpose of this Privacy Policy, "you" and "your" refers to you as the user of our Services.
We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy explains how we collect, use, and protect your data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our Site and services, you agree to the collection and use of your information as described in this policy.
We collect personal information to provide and improve our Services. The types of information we collect include:
We use cookies and similar technologies to automatically collect information about how you interact with our Site. This may include your IP address, device and browser type, and browsing activity.
We may receive information from third-party service providers who help us operate our Site, such as Shopify (our e-commerce platform) and our payment processors who collect payment information to fulfil your order.
We use your personal information for the following purposes:
Our website uses cookies to improve your user experience and run analytics. In compliance with UK law, we ask for your permission before placing non-essential cookies on your device via a cookie consent banner or pop-up. You can manage your cookie preferences through your browser settings.
We may share your personal information with third parties in the following circumstances:
Our products are restricted to adults aged 18 and over. This website is not intended for use by individuals under the age of 18. We use an age check to ask users to confirm their age. We do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us immediately to request its deletion.
We take reasonable steps to protect your personal information. However, no security measure is perfect, and we cannot guarantee absolute security. We will retain your personal information for as long as necessary to provide our services, comply with legal obligations, and resolve disputes.
We may transfer, store, and process your personal information outside the UK. When we transfer your data outside the UK, we ensure a similar degree of protection is afforded to it by relying on recognised transfer mechanisms like the UK's adequacy regulations or Standard Contractual Clauses.
Under UK data protection law, you have rights including:
To exercise any of these rights, please contact us using the details below.
If you have any concerns about our use of your personal information, you can make a complaint to us. You also have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO).
To show we are a real business and to help banks verify us, we provide the following contact details:
We comply with all UK CBD laws to ensure safe, legal products.