Privacy Policy

1. Who We Are

Hemp Hub Ltd operates the website hemphub.store. We are the data controller for the personal information we collect through this website. If you have questions about this policy, please contact us at info@hemphub.store.

2. Information We Collect

We collect the following types of personal data when you use our website or place an order:

• Identity Data: First name, last name.
• Contact Data: Email address, billing address, delivery address, telephone number.
• Transaction Data: Details of products you have purchased from us, order history, and payment references.
• Technical Data: IP address, browser type and version, time zone setting, operating system, and device information.
• Usage Data: Information about how you use our website, including pages visited and time spent.
• Marketing Data: Your preferences for receiving marketing communications from us.

3. How We Use Your Information

We use your personal data for the following purposes, based on the legal grounds shown:

• Processing and fulfilling your orders (contractual necessity).
• Managing your account and providing customer support (contractual necessity).
• Sending order confirmations and shipping updates (contractual necessity).
• Sending marketing emails about new products and offers (consent — you can opt out at any time).
• Age verification to ensure compliance with UK law (legal obligation).
• Improving our website and understanding how customers use our services (legitimate interest).
• Fraud prevention and security (legitimate interest).

4. Payment Security

We use industry-standard encryption via our payment processors (WooCommerce Payments and PayPal). We never collect, store, or have access to your full card details. All payment processing is handled by PCI-DSS compliant third-party providers.

5. Data Sharing

We share your personal data only with the following third parties, and only to the extent necessary:

• Payment processors: To process your transactions securely.
• Shipping providers: To deliver your order (name, address, and contact number only).
• Email marketing: MailPoet, to send newsletters if you have opted in.
• Analytics: Google, to help us understand website traffic (anonymised data only).

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

6. Cookies

Our website uses the following cookies:

• Age verification cookie: Remembers that you have confirmed you are 18+ (30-day expiry).
• WooCommerce session cookies: Maintain your shopping cart and checkout session.
• WordPress cookies: Essential for website functionality.

You can disable cookies in your browser settings, but this may affect your ability to use certain features of our website.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Order data is retained for 6 years in accordance with UK tax and accounting obligations. Marketing data is retained until you unsubscribe.

8. Your Rights (UK GDPR)

Under UK data protection law, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your personal data (where there is no compelling reason for continued processing).
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please email info@hemphub.store. We will respond within 30 days.

9. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.