Privacy Policy
Activist Edibles ("we," "us," "our") operates officialactivistedibles.co.uk (the "Site"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights under UK law.
By using our Site and placing an order, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
The data controller for all personal data collected through this Site is Activist Edibles, operating via officialactivistedibles.co.uk. You can contact us regarding data matters at any time using the contact details at the bottom of this policy.
2. What Data We Collect
We collect only the personal data necessary to process and fulfil your order. We do not collect data for marketing purposes, newsletters, or analytics. The data we collect includes:
- Identity data: your full name
- Contact data: your email address, telephone number (if provided), and messaging platform handle (WhatsApp, Telegram, Signal — if used to contact us)
- Delivery data: your shipping address, including postcode, city, and country
- Transaction data: details of products ordered, order value, and payment confirmation status
- Communication data: any messages you send us via our contact form or messaging platforms
- Age verification data: confirmation that you have declared yourself to be 18 years of age or older
3. How We Collect Your Data
We collect data when you:
- Place an order on our Site
- Complete the age verification gate on our Site
- Contact us via our contact form, WhatsApp, Telegram, Signal, email, or Instagram direct message
We do not use tracking pixels, advertising cookies, or third-party analytics platforms to collect data about your browsing behaviour.
4. Why We Use Your Data (Legal Basis)
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing and fulfilling your order | Identity, contact, delivery, transaction data | Performance of a contract (Article 6(1)(b) UK GDPR) |
| Communicating about your order | Contact data, communication data | Performance of a contract |
| Complying with age verification obligations | Age verification declaration | Legal obligation (Article 6(1)(c) UK GDPR) |
| Responding to customer enquiries | Contact data, communication data | Legitimate interests (Article 6(1)(f) UK GDPR) |
| Fraud prevention and business security | Transaction and contact data | Legitimate interests |
5. How Long We Keep Your Data
We retain your personal data only for as long as is necessary for the purposes set out above, or as required by law. Specifically:
- Order data: retained for 6 years in line with UK financial record-keeping obligations
- Communication data: retained for 12 months, then deleted
- Age verification records: retained for as long as required to demonstrate compliance
6. Who We Share Your Data With
We do not sell, rent, or trade your personal data to any third party. We share data only where strictly necessary:
- Delivery carriers: your name and address are shared with the postal or courier service used to dispatch your order
- Payment processors: payment information is processed by our payment provider; we do not store card details
- Legal obligation: we may disclose data to law enforcement or regulatory bodies if required by UK law
7. International Transfers
If you are ordering from within the European Union or European Economic Area, your data may be transferred to and processed in the United Kingdom. The UK has been granted an adequacy decision by the European Commission, meaning your data receives equivalent protection to that provided within the EU.
8. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:
- Right of access: you may request a copy of the personal data we hold about you
- Right to rectification: you may request correction of inaccurate or incomplete data
- Right to erasure: you may request deletion of your data where there is no legitimate reason for us to continue processing it
- Right to restriction: you may request that we restrict processing of your data in certain circumstances
- Right to data portability: you may request your data in a structured, machine-readable format
- Right to object: you may object to processing based on legitimate interests
To exercise any of these rights, contact us using the details below. We will respond within one calendar month of receiving your request.
9. Cookies
Our use of cookies is explained separately in our Cookie Policy on this page. We use only essential cookies necessary for the functioning of the Site.
10. Complaints
If you are unhappy with how we handle your data, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concern before you contact the ICO, so please contact us first.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the date of the most recent revision. Continued use of the Site following any update constitutes your acceptance of the revised policy.