Privacy policy
Who we are
Buy Cannabis Seeds (Seed Semillia) is the data controller for personal data collected through this website. We are a UK online-only seed bank trading since 2010. To reach us about anything in this policy — including a data request — use our contact form. It reaches us directly and is the fastest way to get a response.
What we collect, and why
- Order details — your name, email address, delivery address and any delivery note. We need these to take payment and post your order. Lawful basis: performance of a contract.
- Your seed list and preferences — stored in your own browser (localStorage), not on our servers, so your basket survives a refresh. Clearing your browser data removes it.
- Newsletter email — only if you sign up. Lawful basis: consent. Unsubscribe any time.
- Server logs — standard web logs including IP address, kept for security and fraud prevention. Lawful basis: legitimate interests.
We do not use advertising cookies, we do not run ad networks, and we never sell your data.
Website analytics
We use Microsoft Clarity to understand how people use the site — which pages get read, where visitors get stuck, and what breaks. It records anonymised usage such as page views, clicks, scrolling and general device information, and sets its own cookies to recognise a returning session.
What it never sees: we have configured Clarity to mask everything you type on our checkout and contact forms. Your name, email address, delivery address and message content are hidden from the recording before it leaves your browser.
Lawful basis: our legitimate interest in maintaining and improving the site. Microsoft acts as our processor and may use the data as described in the Microsoft Privacy Statement. You can opt out entirely by enabling Do Not Track or a tracker blocker in your browser — the site works exactly the same either way.
Who we share it with
Only where necessary to fulfil your order: Royal Mail (delivery address), our payment provider (payment reference), and our hosting provider (which stores the order database on our behalf). No one else.
How long we keep it
Order records are retained for six years, as UK tax law requires. Newsletter data is kept until you unsubscribe.
Your rights
Under UK GDPR you can request a copy of your data, ask us to correct or erase it, object to processing, or ask for it to be ported elsewhere. Message us and we'll respond within one month. If you're unhappy with our response you can complain to the Information Commissioner's Office (ico.org.uk).
Security
The site runs over HTTPS. Order data is stored on a UK-accessible server with access limited to us. Because we don't yet take card payments on-site, we never see or store card details.