Last updated: 22 October 2026
Who we are
CannaPower (Canna Power UK) is the trading name of 37sms1 Ltd, a company registered in England and Wales (company number 11779647). Our registered office is 129 Station Road, London NW4 4NJ, and our shop is at Unit 612, The Stables Market, London NW1 8AH. VAT number: 339685746.
37sms1 Ltd is the data controller for the personal data described in this policy, and is registered with the Information Commissioner’s Office (ICO).
Contact us about your data at info@canna-power.co.uk or 020 3538 1303.
What we collect
- Contact details: name, email address, phone number, delivery and billing address.
- Business details (wholesale customers): company name and VAT number.
- Order details: what you bought, when, and delivery information. Card payments are handled by our payment provider, Viva.com; we never see or store your full card number.
- Newsletter details: your email address and the date, time and page where you signed up.
- Messages you send us by email or through our forms.
- Website usage data: IP address, browser and device type, and pages visited, collected through cookies (see Cookies below).
How we use it, and our legal basis
| Purpose | Legal basis under UK GDPR |
|---|---|
| Processing and delivering your order, handling returns | Contract |
| Keeping tax and accounting records | Legal obligation |
| Answering your questions and providing customer support | Legitimate interests |
| Reminding you about items left in your basket at checkout | Legitimate interests (you can opt out at any time) |
| Sending our newsletter (new products, offers, CBD guides and shop news) | Consent |
| Sending our weekly email to customers who’ve bought from us, unless they ticked the box at checkout to say no | Legitimate interests (UK law lets a shop email its own customers about its own similar products, as long as they can say no at checkout and in every email) |
| Inviting you to review your order, if you tick the box at checkout | Consent |
| Website analytics | Consent (given through our cookie banner) |
| Counting visits and page views to improve our website (no cookies) | Legitimate interests |
| Checking you are 18 or over, preventing fraud and keeping the website secure | Legitimate interests and legal obligation |
Our newsletter
We send our newsletter to people who sign up through the form on our website. You can unsubscribe at any time using the link at the bottom of every email, or by emailing us. We stop sending within 72 hours of an unsubscribe. Our newsletter is sent through Klaviyo. It shows us whether an email was opened and which links were clicked. We use that to see which emails people find useful, and to stop emailing people who never open them.
If you buy from us, we’ll send you our weekly email about our own similar products unless you tick the box at checkout to say no. You can unsubscribe at any time with the link in any email, or by emailing hello@canna-power.co.uk.
We do not sell, rent or share your email address with other companies for their own marketing.
Who we share your data with
We only share data with service providers who help us run the business, under contracts that require them to protect it:
- Klaviyo (Klaviyo, Inc.): keeps our newsletter list and sends our newsletter and our weekly email to customers.
- Microsoft (Outlook): sends our order emails and holds the emails you send us.
- Kinsta: hosts our website.
- Viva.com: processes card payments.
- Delivery companies: to deliver your order.
- Google Analytics: website analytics, only if you accept analytics cookies.
- Contentsquare: shows us how visitors use our pages so we can improve them, only if you accept analytics cookies.
- Koko Analytics: counts visits and page views on our own website, so the data stays with us. It uses no cookies, stores nothing on your device and keeps only totals, not who you are.
- Jetpack (Automattic): website security and statistics.
- Trustindex: displays our Google, Tripadvisor and Trustindex reviews on the website.
- Our accountants and professional advisers, where needed.
- The authorities, if the law requires it.
Transfers outside the UK
Some of our providers process data in the European Union, which the UK recognises as giving adequate protection. Where data is processed elsewhere, such as the United States, we rely on approved safeguards, including the UK International Data Transfer Addendum.
Klaviyo stores our newsletter list in the United States. Klaviyo is certified under the UK Extension to the EU-US Data Privacy Framework, which the UK recognises as giving adequate protection.
How long we keep it
- Order and accounting records: 6 years, as required by UK tax law.
- Newsletter subscribers: until you unsubscribe. After that we keep your email address only on a do-not-email list, so we never contact you again by mistake.
- Customer service messages: up to 2 years.
- Analytics data: as set in Google Analytics, up to 14 months.
Cookies
We use essential cookies to run the shop and basket. We only use analytics cookies, such as Google Analytics, if you agree to them through our cookie banner. You can change your choice at any time using the cookie settings link on our website.
We also count visits and page views with Koko Analytics, which runs on our own website, uses no cookies and keeps only totals. If you don’t want your visits counted, email hello@canna-power.co.uk and we’ll stop counting visits from your internet connection.
Or press this button to stop counting your visits in this browser: It saves one small cookie, cp_koko_optout, for a year, only to remember your choice.
Your rights
You have the right to:
- access the personal data we hold about you
- correct inaccurate data
- ask us to delete your data
- restrict or object to how we use it, including objecting to direct marketing at any time
- withdraw consent at any time
- receive your data in a portable format
To use any of these rights, email info@canna-power.co.uk. We will reply within one month.
Age
Our products and website are for adults aged 18 and over. We do not knowingly collect data from anyone under 18.
Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will post any changes on this page and update the date at the top.
