Cannaray Wellness Ltd (“Cannaray Wellness”, “we”, “us”, “our”) operates this website and related services.
This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website, purchase products, complete questionnaires, order at-home blood tests, or otherwise interact with us.
Cannaray Wellness currently operates as a wellness platform and retailer of health-related products and services. Cannaray Wellness does not provide medical advice, diagnosis, or treatment. Where clinical services are required, these are delivered by regulated independent partner providers, including Mediva Pharmacy for consultation, prescribing and dispensing, Alderley for laboratory analysis, and RDI for blood test kit fulfilment and logistics.
Please read this Privacy Policy carefully. By using our website and services, you acknowledge that your personal data will be handled as described in this Privacy Policy.
For the purposes of UK data protection law, Cannaray Wellness Ltd is a data controller for the personal data we collect and use in relation to:
- website visits, account creation, ecommerce purchases, order fulfilment, customer service, marketing preferences, blood test coordination through our platform
In some circumstances, our partner providers may act as independent data controllers in relation to the services they provide to you directly. This includes:
- Mediva Pharmacy, in relation to consultations, prescribing, dispensing, identity verification, patient safety checks, and related clinical governance
- Alderley, in relation to laboratory testing and processing of samples
- RDI, in relation to fulfilment and dispatch of testing kits and related logistics data
Where these providers act as independent controllers, they are responsible for their own handling of your data in accordance with their own privacy notices.
Personal Information We Collect or Process
We may collect and process the following categories of personal data:
Identity and contact data
- full name, billing address, shipping address, email address, telephone number, date of birth, gender, where relevant to the service
Account and order data
- login details, account preferences, order history, items viewed, purchased, or added to basket, transaction records, customer service records
Payment data
- payment card details processed via our payment providers, billing and transaction confirmations
Questionnaire and health-related data
Where you complete a blood test, treatment suitability questionnaire, or provide information relevant to a health-related product or service, we may collect:
- questionnaire responses, health and lifestyle information, height, weight, BMI and related measurements, relevant medical history disclosed by you, information relevant to blood testing or suitability assessments, sample identifiers and test order references, blood test results made available through our services or partner systems
Data concerning health is treated as special category data under UK GDPR and is given additional protection.
Technical and usage data
- IP address, browser type and version, device identifiers, time zone and location data inferred from IP, pages visited, referral sources, website interactions
Marketing and communications data
- your marketing preferences, responses to campaigns, communications with us by email, contact form, or other channels
How We Use Your Personal Information
Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:
Provide our website and customer services
- create and manage your account, process orders and payments, provide customer support, manage returns, replacements and complaints
Fulfil product and service orders
- arrange dispatch of products and test kits, manage logistics and delivery, transmit relevant order information to fulfilment providers such as RDI, coordinate blood test orders and service requests
Coordinate access to partner services
Where you request a service that requires third-party delivery, we may share necessary information with relevant partners so that they can provide that service. For example:
blood test order and identifying details with RDI for kit fulfilment, sample and identifying details with Alderley for laboratory processing, treatment questionnaire and related information with Mediva Pharmacy where you request access to a regulated treatment pathway. With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping). With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites. When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
With our affiliates or otherwise within our corporate group.
In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer
Provide results and service updates
- notify you about order status, notify you when results are available, send you service-related communications, provide information relevant to your purchase or requested service
Improve our services
- analyse how users interact with our site, improve website functionality and customer experience, monitor performance and service quality
Marketing
- send promotional emails or SMS where permitted, show relevant advertising, where you have consented where required, measure campaign performance
Legal and regulatory purposes
comply with applicable legal obligations, prevent fraud and misuse, enforce our terms, protect our business, staff, customers, and users. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.
Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
Important clarification about partner services
Cannaray Wellness does not currently provide clinical consultations, diagnosis, prescribing, dispensing or laboratory testing directly.
Where you use services that involve: treatment suitability review, prescribing, dispensing, laboratory analysis, those services are carried out by independent partner providers.
These providers may receive and process your personal data, including health data, in order to provide those services. In many cases, they will act as independent data controllers for the data they need to process for their own legal, clinical, professional and regulatory obligations.
We encourage you to review the privacy notices of those partner providers where available.
Third Party Websites and Links
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
Children's Data
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.
Security and Retention of Your Information
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.
Your Rights and Choices
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
Right to Access / Know. You may have a right to request access to personal information that we hold about you.
Right to Delete. You may have a right to request that we delete personal information we maintain about you.
Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
If you reside in the UK or European Economic Area, and subject to exceptions and limitations provided by local law, you may exercise the following rights in addition to the rights outlined above:
Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.
Withdrawal of Consent: Where we rely on consent to process your personal information, you have the right to withdraw this consent. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent before its withdrawal.
You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.
We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.
Complaints
If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities here.
International Transfers
Please note that we may transfer, store and process your personal information outside the country you live in.
If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.
Contact
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at lmandoul@cannaray.co.uk For the purpose of applicable data protection laws, we are the data controller of your personal information.
Cookies
We use cookies when you visit our website. Cookies help us to provide you with a good experience when you browse this website and allow you to make full use of the online shopping and personalised features available on this website.
What is a cookie?
Cookies are small files of letters and numbers that are downloaded onto your computer or mobile or other handheld device when you access certain websites. Cookies allow a website to recognise a user’s device and help your browser navigate through the website by allowing you to log in automatically or remembering settings you selected during earlier visits (among other functions). Cookies do not harm your computer. If you would like to learn more about cookies in general you can visit the
All About Cookies website.
Use of cookies on this website
Cookies help us to provide you with a good experience when you browse this website and allow you to make full use of the online shopping and personalised features available on this website. We do not use cookies to collect or record information such as your name, address or payment details.
Why we use cookies
We use cookies on this website for the following main purposes:
Strictly Functional Cookies: these cookies are for technical purposes essential for the operation of this website and/or your use of it, such as keeping track of your current shopping session and enabling you to proceed to checkout and pay for products;
Statistical Cookies: these cookies collect statistical information about how visitors use this website, calculate views, analyse popular products by quantifying clicks. This is so we can improve the way this website works and measure the success of competitions and campaigns;
Personalisation Cookies: these cookies allow us to distinguish you from other users of this website, so we can personalise your shopping experience and allow us to improve your use of the website. These help ensure all that is displayed on our site is more relevant to your interests and so we can remember choices you make (such as your user name, language or the country you are in);
Marketing Cookies: these cookies ensure the marketing content that you receive on sites other than our own is relevant and reflects the interests you have shown when browsing on our site. They are used to deliver ads relevant to you, for example based on an action you take on this site. They help us to limit the number of times that you may see an online advert, and also help us measure the effectiveness of some of our digital marketing campaigns so we can improve how we advertise in the future.
Third party cookies: these cookies are used by third parties to collect data when you are on our website and sometimes when you are on other websites. We do not receive their data. They can be used for any of the above reasons but are mainly used to help provide behavioural targeted advertising to you online. These also enable us to fulfil our contractual obligations to third parties, for example to pay a partner if you have made a purchase on this website by following a link from their website.
Most web browsers automatically accept cookies when they are dropped on your computer, mobile or other handheld device. You can adjust your browser settings so that it will refuse cookies. By accepting cookies by visiting our website, you consent to cookies being used in accordance with this Cookies Policy. You can change your mind at any time about your consent. If you do not consent to cookies, or have changed your mind about cookies, you must either disable cookies through your browser or refrain from using this website. Please go to ‘How To Manage Cookies’ section below for information on how to manage and disable cookies.
Our cookies
Strictly functional cookies
These cookies help make a website usable and are essential in helping you move around our site and use its features. Without these cookies you would not be able navigate our site and gain access to secure areas such as signing into your account.
_ab | Shopify | Used in connection with access to admin
_orig_referrer | Shopify | Used in connection with shopping cart
_secure_session_id | Shopify | Used in connection with navigation through a storefront
Cart | Shopify | Used in connection with shopping cart
cart_sig | Shopify | Used in connection with checkout
cart_ts | Shopify | Used in connection with checkout
checkout_token | Shopify | Used in connection with checkout
Secret | Shopify | Used in connection with checkout
Secure_customer_sig | Shopify | Used in connection with customer login
Storefront_digest | Shopify | Used in connection with customer login
Statistical cookies
These cookies help us to understand how users interact with our site and provide statistical analysis of our site. In order to keep our site easy to use, working properly and up-to-date, we use web analytics services to help us understand how people use our site. For example we see which areas are most popular, identify when errors occur and can test different features to see which works best.
_landing_page, _orig_referrer | Shopify | Track landing pages
_s, _shopify_fs, _shopify_s, _shopify_uniq, _shopify_visit, _shopify_y, _y | Shopify | Shopify analytics
_shopify_sa_p, _shopify_sa_t | Shopify | Shopify analytics relating to marketing and referrals
tracked_start_checkout | Shopify | Shopify analytics relating to checkout
Additionally other third party pixels and tags are used which in turn may place cookies:
Google Analytics. We use Google Analytics to help measure how users interact with our website. Please see their Privacy Policy for further information.
Marketing cookies
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual. Without these cookies online adverts you encounter will be less relevant to you and your interests.
Facebook Pixel. Used to deliver targeted advertisements to user who visit our website. Please see their Privacy Policy for further information.
Google Doubleclick. Used to deliver targeted advertisements to user who visit our website. Please see their Privacy Policy for further information.
Criteo. Used to deliver targeted advertisements to user who visit our website. Please see their Privacy Policy for further information.
Third party cookies
Some cookies may be set by third parties when you visit this website. Generally, these third party cookies do not collect personal data from which the third party would be able to identify individual customers.
These third parties may be suppliers who partner with us to deliver our website, companies that participate with us in affiliate marketing programmes and other third parties who deliver products that enhance the user experience and consequently assist generating sales. Data from these cookies is collected directly by those third parties and not by us. These cookies are controlled by the third parties, who must ensure they comply with their legal obligations when using cookies and collecting your information, including by making their privacy policies available to you and allowing you to change your mind. Please check the third-party websites for more information about these cookies and how to manage them. If not specified in the preceding sections, third-party applications used and where to find their privacy policies are listed below.
Rakuten Advertising third party cookie policy
COOKIE ID - rmuid
PURPOSE -Targeting cookies used by Rakuten Advertising Affiliate Network. Rakuten Advertising Privacy Policy here.
EXPIRY - Expires within 365 Days
How to manage cookies
You can enable or disable cookies by changing your website browser settings to accept or reject cookies as required. How to do this will depend on the browser you use. We have provided further information below on how to check which browser you use and how to manage cookies. Please bear in mind that if cookies are not enabled on your computer, your activities will be restricted to browsing this website and you will not be able to add products to your shopping bag and buy them.
Checking with browser you use
If you are using a PC - go to 'Help' and select the 'About' option.
If you are using a Mac - click on the Apple menu within the browser and select the 'About' option.
Once you know which browser you are using, follow the instructions below to check if you have cookies enabled on your computer
Checking cookies
PCs
Microsoft Internet Explorer 6,7,8
Go to 'Tools' at the top of your browser window. Select 'Internet options'. Click on the 'Privacy' tab
Ensure that your Privacy level is set to Medium or below to enable cookies
Mozilla Firefox
Go to 'Tools' and select Options
Click the Privacy icon
Click on Cookies and choose 'allow sites to set cookies'
Google Chrome
Go to 'Tools' and select Options
Click 'Under the Hood' and select the 'Content settings' button within the 'Privacy' section
Choose 'Allow local data to be set'
Macs
Safari on OSX
Click 'Safari' and select 'Preferences'
Click 'Security' then 'Accept cookies'
Mozilla and Netscape on OSX
Click on 'Mozilla' or 'Netscape' and select 'Preferences'
Find ‘Cookies’ under 'Privacy & Security'
Select 'Enable cookies for the originating web site only'
Microsoft Internet Explorer on OSX
Click 'Explorer' and select 'Preferences'
Find 'Cookies' under ‘Receiving Files’
Select 'Never Ask'
Opera
Click 'Menu' and select 'Settings'
Select 'Preferences' and then 'Advanced'
Select 'Accept cookies'
If you are not happy with the way that we use cookies then you should delete Cannaray cookies having visited the site, or you should browse the site using your browser’s anonymous usage setting (called “Incognito” in Chrome, “InPrivate” for Internet Explorer, "Private Browsing" in Firefox and Safari etc.)
Other details
Our Cookies Policy explains how we at Cannaray collect data from your computer, mobile or other device when using our website. If you would like to get in touch please contact us at info@cannaray.co.uk.
We reserve the right to modify this Cookie Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this Cookie Policy, we will notify you here that it has been updated.
Age restrictions
The website is not intended for children under 18 years of age, and we do not knowingly collect personal information from children under 18. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from, or about, a child under 18, please contact us at hello@cannaray.co.uk.
Changes to this Privacy Notice
We reserve the right to modify this Privacy Notice at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this Privacy Notice, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.