Legal
Privacy policy
Last updated: 27 September 2026
1. Who we are
Rich & Bad Flavours (“we”, “us”) operates richandbadflavours.com. We are the data controller for personal information collected through this site.
2. What we collect
Account details (email, display name), order details (shipping address, phone, items purchased), site usage (pages visited, device type) and any information you send us via forms or chat.
3. How we use it
To fulfil orders, provide customer support, personalise product recommendations, run our AI cannabis guide (VybzAI), and improve the site. We do not sell your personal data.
4. Legal basis (UK/EU)
Contract (fulfilling your order), legitimate interests (fraud prevention, improving the service), and consent (marketing emails, cookies you opt in to).
5. Sharing
We share the minimum required with: payment processors, shipping carriers, our hosting/backend provider, and analytics. All are bound by data-processing agreements.
6. Retention
Account data is kept while your account is active. Order records are kept for 7 years to meet tax and consumer-law obligations.
7. Your rights
You can request access, correction, deletion or export of your data at any time. Contact us at hello@richandbadflavours.com.
8. Cookies
We use strictly-necessary cookies for the cart and session, and optional analytics cookies you can decline.
9. Contact
hello@richandbadflavours.com — data protection queries.