Who We Are
This website is operated by Taylor’s CBD LTD (“Taylor’s CBD”, “we”, “us” or “our”), a limited company registered in the United Kingdom under company number 14787122.
Our website address is taylorscbd.com.
This Privacy Policy explains how we collect, use and protect information when you visit our website, create an account, place an order, subscribe to our newsletter or otherwise interact with us online.
What This Privacy Policy Covers
This Privacy Policy applies to Taylor’s CBD and our website. It explains the information we may collect, why we need it, how it may be used and shared, and the choices and rights available to you.
Our website may contain links to websites operated by other organisations. We are not responsible for how those websites collect or use your information, and we recommend reviewing their own privacy information before providing personal data to them.
Information You Choose to Give Us
Much of the personal information we hold is information that you choose to provide when using our website or purchasing from us.
Depending on how you use the website, this may include your name, email address, telephone number, billing address, delivery address, account information, order information and any other information necessary to provide the service you have requested.
If you subscribe to our newsletter, we will also process the information you provide for that purpose.
Customer Accounts and Orders
Taylor’s CBD uses WooCommerce to operate its online shop.
If you create a customer account or place an order, information such as your name, email address, telephone number, billing and delivery addresses and order history may be stored as part of the normal operation of our ecommerce website.
We use this information to process and fulfil orders, administer customer accounts, provide customer service, communicate with you about an order, maintain appropriate business records and meet our legal, accounting and regulatory obligations.
Payments
Online card payments are processed using Viva Wallet.
Taylor’s CBD does not store your full credit or debit card details. Payment information required to process a transaction is handled by our payment provider in accordance with its own security and privacy arrangements.
We may retain appropriate information relating to a payment or transaction as part of our order and financial records, but this does not include storing your full payment card details ourselves.
Delivery and Order Fulfilment
Taylor’s CBD uses Royal Mail for the delivery of customer orders.
When necessary to fulfil an order, relevant information may be provided to Royal Mail, such as the recipient’s name, delivery address and other information reasonably required to arrange or manage delivery.
We only provide information necessary for the relevant delivery or fulfilment purpose.
Newsletter and Marketing
You may choose to subscribe to marketing and newsletter communications from Taylor’s CBD through the newsletter form on our website.
Our newsletter service is provided using Brevo. When you choose to subscribe, the information you provide through the newsletter form may be processed using Brevo so that we can send you the communications you have requested.
Marketing communications are optional. You can unsubscribe at any time using the unsubscribe link provided in our marketing emails.
We do not send marketing communications simply because you have visited our website or placed an order unless we have an appropriate lawful basis to do so.
Website Analytics and Visitor Journeys
We use website analytics and performance information to understand how people find and use our website, which content and products receive attention, how visitors move through the website and how we can improve the online experience.
Taylor’s CBD uses Journey Analytics, a first-party website journey measurement system developed by apluskdesign.
Journey Analytics is designed around a simple privacy principle: understand the journey without needing to know the person.
Journey Analytics may record information about website activity such as pages viewed, the order in which pages are visited, dates and times of activity, referral or traffic source information where available, website interactions, engagement information and configured website events or goals.
Journey Analytics uses pseudonymous visitor and session identifiers to connect website activity into journeys. These identifiers are designed to distinguish website activity without requiring Journey Analytics to know a visitor’s name, email address, telephone number or other personal profile information simply for journey measurement.
Logged-in Customer Journeys
Customers may choose to create and log into a Taylor’s CBD customer account.
When a customer is logged in, Journey Analytics may continue measuring their website journey using pseudonymous visitor and session identifiers. This allows us to understand how customers use the website before and after logging in without Journey Analytics needing to attach the customer’s WordPress or WooCommerce account identity, name, email address, customer account details or other personal profile information to the journey simply for analytics purposes.
Other internal or administrative website roles are excluded from Journey Analytics tracking according to our current configuration.
WooCommerce may need to know who a customer is in order to operate their account, process an order and provide customer service. Journey Analytics does not need to know who that customer is simply to understand how the website is being used.
How Journey Analytics Recognises Website Activity
Journey Analytics uses first-party pseudonymous visitor and session identifiers to recognise activity on our website.
These identifiers are normally stored using first-party browser storage. A Journey Analytics session is currently treated as ending after 30 minutes of inactivity.
For supported website events where server-side confirmation is required, pseudonymous Journey Analytics identifiers may also be mirrored into limited first-party cookies so that a confirmed website event can be associated with the appropriate visitor or session journey.
This does not require the contents of forms, customer account information or other personal profile information to be stored in Journey Analytics simply to measure the journey.
Journey Analytics is currently configured with a data-retention target of 365 days. This setting may be reviewed or changed as our website, operational requirements or privacy practices develop.
Google Analytics
We also use Google Analytics to help us understand website usage and performance.
Google Analytics is separate from Journey Analytics and may use cookies or similar technologies to collect information about how the website is used. Where consent is required for analytics technologies, these should only be used in accordance with the choices available through our website’s cookie and consent controls.
Information processed through Google Analytics is subject to Google’s applicable privacy and data-processing arrangements.
Google Search Console
We use Google Search Console to understand how our website performs in Google Search.
Search Console provides aggregated information such as search queries, impressions, clicks, click-through rates and search positions. Journey Analytics may use this aggregated Search Console information as additional search intelligence to help us understand how people discover our website and how search performance relates to website content and visitor journeys.
This aggregated Search Console information does not tell Journey Analytics that a particular named or pseudonymous visitor searched for a specific Google search query.
Cookies and Similar Technologies
Our website uses cookies, browser storage and similar technologies for different purposes.
Some technologies are necessary for the website and online shop to function correctly. For example, WooCommerce may use cookies or similar technologies to maintain shopping basket, checkout, account or session functionality.
Journey Analytics primarily uses first-party browser storage containing pseudonymous visitor and session identifiers. Limited first-party identifier cookies may also be used for supported website events where server-side confirmation needs to be associated with the appropriate pseudonymous journey.
Google Analytics may use analytics cookies or similar technologies. Other services used by the website may also use technologies necessary to provide their respective functions.
Where consent is required for non-essential cookies or similar technologies, visitors should be provided with appropriate choices through the website’s cookie and consent controls.
You can also manage or delete cookies and other stored website information using your browser settings. Disabling technologies that are strictly necessary for the operation of the online shop may affect how parts of the website function.
How We Use Personal Information
We may use personal information where appropriate to:
- provide and manage customer accounts;
- process, fulfil and deliver orders;
- process payments and maintain transaction records;
- respond to customer enquiries and provide customer service;
- communicate with you about orders or services you have requested;
- send newsletter or marketing communications where you have chosen to receive them or where otherwise permitted by law;
- operate, protect and improve our website and online shop;
- understand website performance and visitor journeys;
- maintain appropriate business, accounting and tax records; and
- comply with our legal and regulatory obligations.
The lawful basis on which we process personal information will depend on the purpose for which it is being used. This may include processing necessary to perform a contract with you, compliance with a legal obligation, our legitimate interests in operating and improving our business and website, or your consent where consent is required.
Who We Share Information With
We do not sell your personal information.
We may use trusted service providers where necessary to operate Taylor’s CBD and provide our products and services. These may include:
- Viva Wallet for payment processing;
- Royal Mail for order delivery;
- Brevo for newsletter and marketing communications;
- WooCommerce and relevant website technology providers;
- website hosting, technical, security and support providers;
- Google in connection with services such as Google Analytics and Google Search Console; and
- professional, legal, accounting or regulatory services where reasonably necessary.
Where a service provider requires access to personal information, we aim to provide only the information reasonably necessary for the relevant purpose and to use providers with appropriate data-protection and security arrangements.
We may also disclose information where required by law, a court order, regulatory authority or other legally binding requirement.
International Data Processing
Some of the technology and service providers used by Taylor’s CBD may process or store information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the information receives an appropriate level of protection and that relevant safeguards required by applicable data-protection law are used.
How Long We Keep Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet our legal, accounting, tax, contractual and regulatory obligations.
Different types of information may therefore be retained for different periods.
Customer and order information may be retained where necessary for order administration, customer service, accounting, tax, legal and business-record purposes.
Newsletter and marketing information may be retained while it is appropriate for us to provide the communications you have requested, subject to your right to unsubscribe or withdraw consent where applicable.
Journey Analytics is currently configured with a data-retention target of 365 days.
How We Protect Information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.
No method of transmitting or storing information electronically can be guaranteed to be completely secure. We therefore regularly review the systems, services and practices used to operate our website and business.
Your Data Protection Rights
Under UK data-protection law, you may have rights in relation to your personal information depending on the circumstances and the lawful basis on which it is being processed.
These may include the right to:
- ask for access to personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to erase personal information in certain circumstances;
- ask us to restrict the processing of personal information in certain circumstances;
- object to certain processing;
- receive certain personal information in a portable format where applicable; and
- withdraw consent where we rely on consent as the basis for processing.
You also have the right to complain to the UK’s data-protection regulator, the Information Commissioner’s Office (ICO), if you have concerns about how your personal information has been handled.
External Websites and Social Media
Our website may contain links to external websites, services or social media platforms.
Once you follow a link to another website or service, its own privacy practices and terms will apply. Taylor’s CBD is not responsible for how an external organisation collects, stores or uses information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, technology, business practices or legal and regulatory requirements.
When we make changes, the updated policy will be published on this page and the “Last updated” date will be revised where appropriate.
Contact Us About Privacy
If you have a question about this Privacy Policy, would like to exercise a data-protection right or have a concern about how Taylor’s CBD uses your personal information, please contact us at:
Taylor’s CBD LTD
Company number: 14787122
Email: hello@taylorscbd.com
Last updated: 8 September 2026