Privacy Policy
At 123CBD, accessible from 123cbd.ie, protecting your privacy is one of our highest priorities. 123CBD was established in 2020 with a simple approach: put the customer first and go above and beyond when it comes to privacy, security, discreetness and trust.
We know that privacy matters to our customers. That is why we aim to collect as little personal data as possible and only use the information genuinely needed to process your order, provide customer support, improve our service, and keep our website running safely and securely. We do not believe in collecting unnecessary information, and we are committed to handling your personal data responsibly, securely and transparently.
Discreetness is a core part of how we operate. From the way we package orders to the way we process customer information, we are always mindful that many of our customers value privacy and confidentiality when shopping online.
We also take discreet shipping seriously. Orders are packed as discreetly as possible, vacuum sealed where appropriate, and shipped in plain, anonymous outer packaging. We do not place 123CBD branding, logos or obvious product identifiers on the outside of parcels. Where possible, orders may be shipped under a different company or fulfilment name to help protect customer privacy and discretion. We also aim to use private couriers where possible, helping to reduce unnecessary handling and limit the number of depots, warehouses or delivery stages your parcel passes through before arriving with you.
If you have any questions about this Privacy Policy or how we handle your data, please contact us and we will be happy to help.
Who this policy applies to
This Privacy Policy applies to our online activities and explains how we collect, use and protect information shared by visitors and customers of 123CBD through our website. It does not apply to information collected offline or through channels other than this website, unless stated otherwise.
By using our website, you consent to this Privacy Policy and agree to its terms.
Our approach to privacy and data minimisation
We aim to limit the amount of personal data we collect to what is necessary for the operation of our business and the fulfilment of your order. Depending on how you use our website, this may include information required to:
- process and deliver your order
- communicate with you about your order or enquiry
- provide customer support
- protect against fraud, abuse, or misuse of our website
- comply with legal and regulatory obligations
- improve the performance, security and usability of our website
We do not intentionally collect information that we do not need.
Information we collect
The personal information we collect depends on how you interact with us.
Information you provide directly to us
When you place an order, contact us, create an account, sign up to our mailing list, or otherwise interact with us, you may provide us with information such as:
- your name
- billing and delivery address
- email address
- telephone number
- order details
- account details
- messages, emails, attachments, or other information you send to us
Information collected automatically
When you visit our website, some information may be collected automatically to help us operate, secure and improve the website. This may include:
- IP address
- browser type and version
- device type
- internet service provider (ISP)
- date and time of visits
- pages visited and navigation behaviour on the website
- referring and exit pages
- basic diagnostic and analytics information
This information is generally used for website administration, security, fraud prevention, performance monitoring and analytics.
How we use your information
We use personal information only where there is a legitimate reason to do so. This may include using your information to:
- process, fulfil and deliver your orders
- provide order updates and customer support
- respond to messages, enquiries or complaints
- operate, maintain and improve our website and services
- detect, prevent and investigate fraud, misuse or security issues
- keep appropriate internal business records
- send service-related emails or messages about your order
- send marketing communications where you have opted in or where otherwise permitted by law
- comply with legal, tax, regulatory or accounting obligations
Discreet shipping and packaging
We understand that privacy does not stop at checkout. Discreet shipping is a key part of our service.
All orders are packed as discreetly as possible. Orders are vacuum sealed where appropriate and shipped in plain, anonymous outer packaging. We do not place 123CBD branding, logos, or obvious product identifiers on the outside of parcels. Where possible, shipments may be sent under a different company name or fulfilment name in order to help protect customer privacy and discretion.
We also aim to use private courier services where possible. This can help reduce unnecessary handling and limit the number of depots, warehouses or delivery stages your parcel passes through before reaching you.
Please note that some delivery and customs information may still need to appear on shipping documentation where required by law, the courier, or the destination country.
Legal basis for processing under GDPR
Where the General Data Protection Regulation (GDPR) applies, we process your personal data on one or more of the following legal bases:
- Contract – where processing is necessary to fulfil your order or provide a service you have requested
- Legitimate interests – where processing is necessary for running, protecting and improving our business, website and customer experience, provided your rights do not override those interests
- Consent – where you have given us permission, for example to receive marketing emails
- Legal obligation – where we are required to process data to comply with tax, accounting, legal or regulatory obligations
Log files
Like most websites, 123CBD uses server log files and similar technical records. These may include IP addresses, browser type, ISP, date and time stamps, referring and exit pages, and other technical information. This data helps us administer the website, troubleshoot issues, monitor performance, improve security, and understand overall website usage trends. Log data is not used by us to personally profile visitors.
Cookies
123CBD uses cookies and similar technologies to help the website function properly, improve performance, remember preferences, and understand how visitors use the site.
Cookies may be used for purposes such as:
- keeping the website functioning correctly
- remembering certain settings or preferences
- improving website speed, performance and usability
- measuring traffic and visitor behaviour
- supporting security and fraud prevention
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.
Marketing and third-party services
We may use trusted third-party services to help us operate our website, process payments, deliver orders, analyse website traffic, or communicate with customers. These providers will only receive the information necessary for them to perform their services for us.
Where third-party tools such as analytics providers, payment processors, email marketing platforms, or couriers are used, those providers may process personal data in accordance with their own privacy policies and data protection obligations.
We do not sell your personal data.
Third-party links and websites
Our website may contain links to third-party websites. If you follow a link to another website, please note that their privacy practices are their own and are not governed by this Privacy Policy. We encourage you to review their privacy policies before providing any personal information.
Data retention
We keep personal data only for as long as it is reasonably necessary for the purpose it was collected, including to fulfil orders, provide support, maintain business and tax records, resolve disputes, enforce agreements, and comply with legal or regulatory obligations.
When personal data is no longer required, we will securely delete it, anonymise it, or otherwise dispose of it in accordance with applicable law and our internal retention practices.
How we protect your data
We take privacy and security seriously and use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include restricted access to personal data, secure service providers, password protection, website security controls, and internal processes designed to limit unnecessary access to customer information.
However, no website, platform or transmission method can ever be guaranteed to be 100% secure, and for that reason we cannot guarantee absolute security.
Your GDPR data protection rights
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection rights, you may have the following rights in relation to your personal data:
- The right of access – to request a copy of the personal data we hold about you
- The right to rectification – to request correction of inaccurate or incomplete personal data
- The right to erasure – to request deletion of your personal data in certain circumstances
- The right to restrict processing – to request that we limit how we use your personal data in certain circumstances
- The right to object – to object to certain types of processing, including some forms of direct marketing or processing based on legitimate interests
- The right to data portability – to request transfer of your personal data to you or another provider where applicable
- The right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time
- The right to lodge a complaint – to complain to your local data protection authority if you believe your rights have been breached
If you would like to exercise any of these rights, please contact us. We may need to verify your identity before processing your request. We will respond within the timeframe required by applicable law.
International visitors and non-EU users
If you access our website from outside Ireland, your information may be processed in Ireland, the European Union, the United Kingdom, or in other countries where our service providers operate. By using our website and providing your information, you understand that your information may be transferred and processed in accordance with this Privacy Policy, subject to applicable data protection safeguards where required.
Children’s privacy
Protecting children online is important to us. 123CBD does not knowingly collect personal information from children. Our website and products are intended for adults only. If you believe that a child has provided personal information through our website, please contact us immediately and we will take reasonable steps to remove that information from our records where appropriate.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, legal obligations, website functionality, or data processing practices. Any updates will be posted on this page, and the revised version will take effect from the date it is published unless otherwise stated.
Contact us
If you have any questions about this Privacy Policy, your personal data, or how we handle your information, please contact us through the contact details provided on our website.