Last Updated: November 29, 2019
Xtracted CBD is committed to protecting our customer's privacy. Please take the time to review this notice which explains what information we collect about you, how we use it, and your rights. Xtracted CBD (“we” or “us”) is the data controller of the personal data collected via or in connection with www.xtractedcbd.com (the “Site”).
We collect personal data from you when you provide it to us directly and through your use of the Site. This information may include:
Depending on how you use our Site, your interactions with us, and the permissions you give us, the purposes for which we use your personal data include:
We rely on the following legal basis, under data protection law, to process your personal data:
We love to communicate with our customers and so, depending on your marketing preferences, we may use your personal data to send you marketing messages by email, phone or post. Some of these messages may be tailored to you, based on your previous browsing or purchase activity, and other information we hold about you.
If you no longer want to receive marketing communications from us (or would like to opt back in!), you can change your preferences at any time by contacting us (details below), clicking on the ‘unsubscribe’ link in any email, or updating your settings in your account. If you unsubscribe from marketing, please note we may still contact you with service messages from time to time (e.g. order and delivery confirmations, and information about your legal rights).
You may also see ads for our Site on third party websites, including on social media. These ads may be tailored to you using cookies (which track your web activity, so enable us to serve ads to customers who have visited our Site). Where you see an ad on social media, this may because we have engaged the social network to show ads to our customers, or users who match the demographic profile of our customers. In some cases, this may involve sharing your email address with the social network. If you no longer want to see tailored ads you can change your cookie and privacy settings on your browser and these third-party websites.
We share customers’ personal data with third parties in the following circumstances:
If we sell any business assets, the personal data of our customers may be disclosed to a potential buyer. In this event, we will make reasonable attempts to ensure the buyer will be bound by the terms of this Privacy Policy. Otherwise where we have your consent or are otherwise legally permitted to do so.
We use service providers based around the world. Consequently, your personal data may be processed in countries outside of USA, EU, including in countries where you may have fewer legal rights in respect of your data than you do under local law. If we transfer personal data outside the USA, EU, we will, as required by applicable law, ensure that your privacy rights are adequately protected by appropriate safeguards. Please contact us if you would like more information about these safeguards.
We will keep your personal data for as long as we need it for the purposes set out above, and so this period will vary depending on your interactions with us. For example, where you have made a purchase with us, we will keep a record of your purchase for the period necessary for invoicing, tax and warranty purposes. We may also keep a record of correspondence with you (for example if you have made a complaint about a product) for as long as is necessary to protect us from a legal claim. Where we no longer have a need to keep your information, we will delete it. Please note that where you unsubscribe from our marketing communications, we will keep a record of your email address to ensure we do not send you marketing emails in future.
This Site ensures that data is encrypted when leaving the Site. This process involves the converting of information or data into a code to prevent unauthorised access. This Site follows this process and employs secure methods to ensure the protection of all credit and debit card transactions. Encryption methods such as SSL are utilised to protect customer data when in transit to and from this Site over a secure communications channel.
Whilst we do everything within our power to ensure that personal data is protected at all times from our Site, we cannot guarantee the security and integrity of the information that has been transmitted to our Site.
Our Site is not intended for, and should not be used by, children under the age of 18. We do not knowingly collect personal data from children under 18.
Our Sites uses cookies and similar technologies to provide certain functionality to the Site, to understand and measure its performance, and to deliver targeted advertising.
If you are in EU, You have certain rights in respect of your personal data, including the right to access, portability, correct, and request the erasure of your personal data.
You also have the right to object to your personal data being used for certain purposes, including to send you marketing. See ‘Marketing’ above, for more details of how to opt-out of marketing.
We will comply with any requests to exercise your rights in accordance with applicable law. Please be aware, however, that there are a number of limitations to these rights, and there may be circumstances where we are not able to comply with your request. To make any requests regarding your personal data, or if you have any questions or concerns regarding your personal data, you should contact us using the details below. You are also entitled to contact your local supervisory authority for data protection.
On this website, the controller has integrated components of Everyware and PayPal. Everyware and PayPal are online payment service providers. Payments are processed via so-called Everyware and PayPal accounts, which represent virtual private or business accounts. Everyware and PayPal are also able to process virtual payments through credit cards when a user does not have an Everyware or PayPal account. An Everyware and PayPal account are managed via an e-mail address, which is why there are no classic account numbers. Everyware and PayPal makes it possible to trigger online payments to third parties or to receive payments. Stripe and PayPal also accept trustee functions and offers buyer protection services.
The personal data transmitted to Everyware and PayPal is usually first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. The processing of the purchase contract also requires such personal data, which are in connection with the respective order.
Everyware and PayPal will, if necessary, pass on personal data to affiliates and service providers or subcontractors to the extent that this is necessary to fulfil contractual obligations or for data to be processed in the order.
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.
We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact our Data Protection Officer. Our Data Protection Officer clarifies to the data subject whether the provision of the personal data is required by law, contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.
If you have any queries on any aspect of our Privacy Policy, please contact our Data Protection Officer by emailing contact@xtractedcbd.com or by visiting our Contact Page.
We know you hate pop-ups, we do too! This will be the only one you receive, promise!
Xtracted CBD’s website and products listed on the website are not for use by or sale to persons under the age of 18. The statements made regarding these products have not been evaluated by the Food and Drug Administration (“FDA”). The efficacy of these products has not been confirmed by FDA-approved research or any other recognized government agency. These products are not intended to diagnose, treat, cure or prevent any disease. Any and All information published on the website is not meant as a substitute for or an alternative to information or advice from health care practitioners or physicians. Please consult your health care professional or physician about potential interactions or other possible complications before using any product listed on the website. DO NOT assume that just because you purchased similar products in the past, products listed on the website will have the same effect.
Are you 18 years of age or older and agree?
Yes NoEnter your email below and receive a discount code for 10% off of your order! It is the least we can do for choosing Xtracted CBD for your CBD needs!
We Respect Your Privacy | We will Never Spam You!