This policy explains how Dr Strains CBD (“we”, “us”) collects and uses personal information when you visit this website. We aim to collect as little as possible and to be clear about what we do with it. Last updated: 3 November 2026.

Who is responsible for your data

Dr Strains CBD is the data controller for personal information collected through this website. You can reach us about anything in this policy through our Contact page.

What we collect

• Information you send us. If you contact us through our contact form or by email, we receive the details you choose to give, such as your name, email address and message.
• Technical information. Like most websites, our hosting provider records standard server logs (for example IP address, browser type, pages requested and the time of the request) to keep the site secure and working.
• Cookies and similar technologies. We use cookies that are needed for the site to work (for example security, caching and remembering preferences). See “Cookies” below.

How we use it

• To reply to your enquiry and keep a record of our correspondence.
• To run, secure and improve the website, including understanding which pages are useful.
• To meet our legal obligations.

We do not sell your personal information, and we do not use it for automated decision-making.

Our lawful bases

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on: legitimate interests (answering enquiries, running and securing the site), consent (non-essential cookies, where required), and legal obligation where the law requires us to keep or share information.

Cookies

Essential cookies are used so the site works properly and stays secure. You can block or delete cookies in your browser settings; some parts of the site may not work as intended if you block essential cookies.

Links to other websites

Our pages link to other websites, including official sources. Those sites have their own privacy policies, and we are not responsible for how they handle your data.

Who we share it with

We only share personal information with service providers that help us run the website (such as our web hosting and email providers), under contracts that require them to protect it, or where the law requires us to. Some providers may process data outside the UK; where they do, we rely on appropriate safeguards recognised under UK data protection law.

How long we keep it

We keep enquiries only for as long as we need them to deal with your question and any follow-up, and then delete them. Server logs and analytics data are kept for limited periods set by our providers.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct or delete it;
• object to or ask us to restrict how we use it;
• ask for your data to be transferred to you or another organisation, where applicable;
• withdraw consent at any time where we rely on consent.

To use any of these rights, get in touch through our Contact page. We will respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.