This privacy statement demonstrates CBD Sanctuary Ltd firm commitment to privacy.
General Statement of Principles
Personal information is collected when customers purchase any item from our store, as part of the buying and selling process. Personal information refers to the purchaser’s name, address and email address. When browsing through our store, we automatically receive the customer’s computer’s internet protocol (IP) address in order to provide us with information that helps us learn about the browser and operating system. We require the customer’s permission, to send any email marketing regarding our online shop, new products and relevant updates.
The customer consents to our collecting personal information for the specific reason to complete transactions, verify credit cards, place an order, arrange for a delivery or return a purchase. Any secondary reason for personal information, such as marketing, we will ask our customers to express consent directly, or provide the customer with the opportunity to say no. A customer can opt-out at any time by withdrawing their consent for us to contact them, for the continued collection, use or disclosure of their information, by contacting us at firstname.lastname@example.org
Online e-commerce Platform:
Our store is hosted on WooCommerce. This online e-commerce platform enables us to sell our products and services to our customers. Our customer’s data is stored through WooCommerce’s data storage and databases. Customers data is stored on a secure server behind a firewall.
If a customer chooses a direct payment gateway to complete their purchase, then the direct payment gateway stores the credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). The purchase transaction data is stored only as long as is necessary to complete the purchase transaction. After that is complete, the purchase transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
Our third-party providers will only collect, use and disclose information to the extent necessary to allow them to perform the services they provide to us. Please note that third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for customers purchase-related transactions. Please read their privacy policies to better understand the way in which these providers handle personal information.
Protection of Personal Information:
We take reasonable precautions and follow industry best practices to make sure that all personal information is protected, by not being inappropriately lost, misused, accessed, disclosed, altered or destroyed. Credit card information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
The first two cookies contain information about the cart as a whole and helps WooCommerce determine when cart contents/data changes. The third cookie contains information that enables WooCommerce to find cart data in the database for each customer. The fourth cookie contains information relating to the Recent Viewed Products widget. The final cookie allows customers to dismiss any Store Notices should they be enabled. No personal information is stored within these cookies.
We may disclose personal information if we are required by law to do so or if a customer violates our Terms & Conditions.
Our customers can access, correct, amend, or delete any personal information the company may have, as well as register a complaint, or ask for further information please contact our Privacy Compliance Officer at email@example.com
63-66 Hatton Garden Fifth Floor,
London EC1N 8LE