Privacy Policy
Last Updated: 25/11/2025
Heffernan's Hemp ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, heffernanshemp.com. We are fully committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).
What Data We Collect and Why
The table below explains the types of data we collect and our reasons for doing so.
| Category of Data | Examples |
|---|---|
| Identity & Contact Data | Name, billing/delivery address, email, phone |
| Transaction Data | Order history, order number, items purchased |
| Payment Data | We NEVER store full card numbers. Payments are processed securely by Stripe/PayPal. |
| Technical & Usage Data | IP address, browser type, pages visited, time spent |
| Marketing & Communications Data | Your marketing preferences |
How We Collect and Share Your Data
How We Collect Your Data
- Directly from you when you register, place an order, subscribe to our newsletter, or contact us.
- Automatically via cookies and similar technologies (see our Cookie Policy below).
- From trusted third parties (e.g., analytics providers, payment processors, delivery companies).
Who We Share Your Data With
We only share data where strictly necessary and under written contract. We never sell your personal data.
- Stripe / PayPal (Secure payment processing)
- Royal Mail / DPD / couriers (Delivery of your order)
- Klaviyo / Mailchimp (Sending order updates & marketing)
- Google Analytics (Understanding how the site is used)
Your Rights and Our Responsibilities
Your Rights Under UK GDPR
You have the right to access, rectify, erase, restrict, object to processing, and portability of your data. You can also withdraw consent and complain to the ICO.
To exercise any right, email info@heffernanshemp.com. We will respond within one month.
International Transfers
Where we use providers outside the UK/EEA, we only transfer data where an adequacy decision exists or under the UK International Data Transfer Agreement (IDTA).
Security, Cookies, and Contact
Security
We use industry-standard encryption (TLS/SSL), regular penetration testing, and PCI-DSS Level 1 compliant payment processors.
Cookies & Tracking
We use essential cookies to make the site work and optional analytics/marketing cookies only with your consent. Full details are in our separate Cookie Policy.
Contact Us or Make a Complaint
Data Protection Officer
Heffernans Hemp Ltd
86-90 Paul Street, London EC2A 4NE
Email: info@heffernanshemp.com
If you are unhappy with how we handle your data, please contact us first.