Privacy Policy

last updated: April 2018

  1. Introduction

Total CBD provides an online store for customers through their online site. At Total CBD the privacy and security of our customers, respondents and visitors are of paramount importance. Total CBD is committed to protecting the data you share with us. This privacy policy explains how Total CBD processes information that can be used to directly or indirectly identify an individual (“Personal Data”) collected through use of its website and platform.

For the purposes of this policy, Total CBD defines the term “Customer” as an entity with which Total CBD has an established relationship, the term “Respondent” as any individual who purchases products provided by Total CBD or who is included as a contact in a Customer’s account and the term “Visitor” as an individual that visits our front-end website (for example www.cbd.co.uk).

Any information stored on Total CBD’s platform is treated as confidential. All information is stored securely and is accessed by authorised personnel only. Total CBD implements and maintains appropriate technical, security and organisational measures to protect Personal Data against unauthorised or unlawful processing and use, and against accidental loss, destruction, damage, theft or disclosure.

  1. Collection and use

2.1. General

The following sections cover the specifics of each of the three groups from which data is collected: website Visitors, Respondents and Users.

2.2 Website Visitors

If you are a Visitor to our website only, and not a Respondent to a survey, purchaser or a user of our other web sites, then this section is relevant for you.

By visiting this website, you consent to the collection and use of your Personal Data as described herein. If you do not agree with the terms set out herein, please do not visit this website. If required by applicable law, we will seek your explicit consent to process Personal Data collected on this website or volunteered by you. Kindly note that any consent will be entirely voluntary. However, if you do not grant the requested consent to the processing of your Personal Data, the use of this website may not be possible.

Total CBD may collect, record and analyse information of Visitors to its website. We may record your IP address and use cookies. Total CBD may add information collected by way of pageview activity. Furthermore, Total CBD may collect and process any Personal Data that you volunteer to us in our website’s forms, such as when you register for and account or sign up for information and newsletters. If you provide Total CBD with your social media details, Total CBD may retrieve publicly available information about you from social media.

Such Personal Data may comprise your IP address, first and last name, your postal and email address, your telephone number, your job title, data for social networks, your areas of interest, interest in Total CBD products, and certain information about the company you are working for (company name and address), as well as information as to the type of relationship that exists between Total CBD and yourself.

Total CBD gathers data about visits to the website, including numbers of Visitors and visits, Geo-location data, length of time spent on the site, pages clicked on or where Visitors have come.

2.2.1 Purpose of processing personal data

Total CBD uses the collected data to communicate with Visitors, to customise content for Visitors, to show ads on other websites to Visitors, and to improve its website by analysing how Visitors navigate its website.

2.2.2 Sharing personal data

Total CBD may also share such information with service vendors or contractors in order to provide a requested service or transaction or in order to analyse the Visitor behaviour on its website.

2.2.3 Cookies

Cookies are small pieces of information sent by a website to a Visitor’s hard disk. Cookies cannot be used to run programs or deliver viruses to your computer. By continuing to visit the website, you agree to the placement of cookies on your device. If you choose not to accept our cookies, we cannot guarantee that your experience will be as fulfilling as it would otherwise be. We may also place cookies from third parties for functional and marketing purposes. The use of cookies is widespread and benefits the surfer. For further information, see Total CBD Cookie Policy

2.2.4 Links to other sites

Please be aware that while visiting our site, Visitors can follow links to other sites that are beyond our sphere of influence. Total CBD is not responsible for the content or privacy policy of these other sites.

2.3 Inquires

If you wish to inquire about your Personal Data that may have been collected by Total CBD purchases, we recommend that you contact us via our contact form or email us at contactus@cbd.co.uk

2.4 Users

2.4.1. General

In order to provide services to its customers, Total CBD collects certain types of data from them. Furthermore, Total CBD collects information from customers when they sign up to the newsletter, make a purchase or create an account. This section will describe how these types of data are collected and used by Total CBD as well as geographical differences that effect this policy. Data entered or transferred into Total CBD by Users such as texts, questions, contacts, media files, etc., remains the property of the User and may not be shared with a third party by Total CBD without express consent from the User.

2.4.2 Collection of User data

During a Customers registration and later on Total CBD’s website, they provide information such as name, company name, email, address, telephone and other relevant data (Total CBD does not hold any payment details). This information is used by Total CBD to identify the Customer and provide them with support, services, mailings, sales and marketing actions, billing and to meet and other contractual obligations.

Total CBD Customers can at any time access and edit, update or delete their contact details by logging in with their username and password to Total CBD s website www.cbd.co.uk. Total CBD Customers may create more accounts with different privilege levels within their account. It is the responsibility of the Customer that creates other Customer accounts, to choose the level of access each User should have. Once these new Customers log into Total CBD, they meet the definition of Customer in this policy. Total CBD will not retain Customer data longer than is necessary to fulfil the purposes for which it was collected or as required by applicable laws or regulations.

2.4.3 Processing in the European Economic Area (EEA)

For Customers with accounts located in Total CBD’s European Data Region, all processing of Personal Data is performed in accordance with privacy rights and regulations following the EU Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 (the Directive), and the implementations of the Directive in local legislation. From May 25th, 2018, the Directive and local legislation based on the Directive will be replaced by the Regulations (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, known as the General Data Protection Regulation (GDPR), and Total CBD’s processing will take place in accordance with the GDPR.

2.4.3.1 Controller

Total CBD processes Personal Data both as a Processor and as a Controller, as defined in the Directive and the GDPR:

The Total CBD entity which you as a Customer entered an agreement with when using Total CBD s platform, will be the Controller for User data, as outlined above in “Collection of User data” section.
For Respondent data, as outlined in the “Collection of Respondent data” section, the Customer will be the Controller in accordance with Directive and GDPR, and Total CBD will be the Processor.
Total CBD adheres to the Directive of 1995 and the GDPR from May 25th, 2018. Consequently, Total CBD processes all data provided by its Customers with accounts in its European Data Region, in the European Economic Area (EEA) only.

All data collected by Total CBD through surveys will be stored exclusively in secure hosting facilities provided by UK Fast. Total CBD has a data processing agreement in place with its provider, ensuring compliance with the Directive. All hosting is performed in accordance with the highest security regulations. All transfers of data internally in the EEA is done in accordance with this data processing agreement.

  1. Retention and deletion

Total CBD will not retain data longer than is necessary to fulfil the purposes for which it was collected or as required by applicable laws or regulations. For Respondent data, Total CBD’s Customers have control of the purpose for collecting data, and the duration for which the Personal Data may be kept. For Respondent data, Customers with an active account will therefore have the responsibility to delete data when required. When a users’s account is terminated or expired, all Personal Data collected through the platform will be deleted, as required by applicable law.

  1. Acceptance of these Conditions

We assume that all Visitors of our website, Respondents to surveys powered by Total CBD and Total CBD’s website customers have carefully read this document and agree to its contents. If someone does not agree with this privacy policy, they should refrain from using our website. We reserve the right to change our privacy policy as necessity dictates. Continued use of Total CBD’s website and platform after having been informed of any such changes to these conditions implies acceptance of the revised privacy policy. This privacy policy is an integral part of Total CBD’s terms of use.

  1. Our Legal Obligation to Disclose Personal Information

We will reveal a user’s personal information without his/her prior permission only when we have reason to believe that the disclosure of this information is required to establish the identity of, to contact or to initiate legal proceedings against a person or persons who are suspected of infringing rights or property belonging to Total CBD or to others who could be harmed by the user’s activities or of persons who could (deliberately or otherwise) transgress upon these rights and property. We are permitted to disclose personal information when we have good reason to believe that this is legally required.

  1. Total CBD’s Data Protection Officer

Total CBD has a “Data Protection Officer” who is responsible for matters relating to privacy and data protection. This Data Protection Officer can be reached at the following address:

  1. For Further Information

If you have any further questions regarding the data Total CBD collects, or how we use it, then please feel free to contact us by email at: Info@cbd.co.uk, or in writing at:

Total CBD
Attn: Data Protection Officer
4 Beacon Rd
Stretford
Manchester
M17 1AF