Last updated: 18/02/2026

This Privacy Policy explains how we collect, use, store and protect your personal data when you use www.only-cbd.co.uk (“Website”).

This Website is operated by:

Jammsy Limited trading as OnlyCBD
Registered Office:
17 St Peter’s Close
Bognor Regis
England
PO21 5QA

Company Number: 16733732
Email: hello@only-spores.co.uk

Jammsy Limited is the Data Controller responsible for your personal data under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Our Commitment to Data Protection

We are committed to protecting your privacy and handling your personal data in accordance with:

  • UK GDPR
  • Data Protection Act 2018
  • Privacy and Electronic Communications Regulations (PECR)

We will only collect and use your data where we have a lawful basis to do so.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Identity Data

  • Full name
  • Billing address
  • Delivery address

2.2 Contact Data

  • Email address
  • Telephone number

2.3 Financial Data

  • Payment transaction details (processed securely via third-party payment providers)
  • We do not store full card details

2.4 Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Time zone setting
  • Cookies and usage data

2.5 Transaction Data

  • Products purchased
  • Order history
  • Delivery information

2.6 Marketing and Communications Data

  • Preferences for receiving marketing
  • Communication history with us

We do not knowingly collect data from individuals under 18.

3. How We Collect Your Data

We collect data through:

  • Orders placed on our Website
  • Account registration
  • Contact forms
  • Newsletter sign-up
  • Cookies and tracking technologies
  • Direct email communication

4. Lawful Bases for Processing (UK GDPR)

Under UK GDPR, we rely on the following lawful bases:

Contractual Necessity

To process and fulfil your orders.

Legal Obligation

To comply with tax, accounting, and regulatory requirements.

Legitimate Interests

To improve our services, prevent fraud, and secure our Website.

Consent

For marketing communications and non-essential cookies.

You may withdraw consent at any time.

5. How We Use Your Data

We use your personal data to:

  • Process and fulfil orders
  • Manage payments and refunds
  • Provide customer support
  • Send order confirmations and updates
  • Prevent fraud and misuse
  • Improve our Website and services
  • Send marketing communications (where consent is given)

We do not sell your personal data.

6. Sharing Your Data

We may share your data with trusted third parties, including:

  • Payment processors
  • Courier and delivery services
  • Website hosting providers
  • IT and security providers
  • Professional advisers (accountants, legal advisers)

All third-party processors are required to comply with UK GDPR and process data securely.

We may disclose data if required by law or regulatory authorities.

7. International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

  • UK-approved Standard Contractual Clauses
  • Transfers to countries with adequacy decisions

8. Data Retention

We retain personal data only for as long as necessary:

  • Order and financial records: minimum 6 years (for tax purposes)
  • Marketing data: until consent is withdrawn
  • Customer service communications: as reasonably required

Data is securely deleted when no longer required.

9. Your Rights Under UK GDPR

You have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent

To exercise any of these rights, contact:
hello@only-spores.co.uk

We may request proof of identity before fulfilling your request.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk

10. Data Security

We implement appropriate technical and organisational measures including:

  • SSL encryption
  • Secure payment gateways
  • Restricted access to data
  • Firewall and hosting security measures

However, no online system is completely secure, and transmission of data is at your own risk.

11. Cookies and Tracking

We use cookies in accordance with PECR regulations.

Cookies may include:

  • Essential cookies (required for Website functionality)
  • Analytics cookies
  • Marketing cookies

You can manage cookie preferences via your browser settings or our cookie banner.

A separate Cookie Policy may provide additional information.

12. Marketing Communications

We will only send marketing emails where:

  • You have opted in, or
  • You have purchased from us and soft opt-in applies under PECR.

You can unsubscribe at any time by:

13. Third-Party Links

Our Website may contain links to external websites.

We are not responsible for the privacy practices of third-party websites.

14. Changes to This Policy

We reserve the right to update this Privacy Policy at any time.

The latest version will always be available on our Website.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact:

Jammsy Limited trading as OnlyCBD
17 St Peter’s Close
Bognor Regis
England
PO21 5QA

Email: hello@only-spores.co.uk