Six Out of Fifteen: What the Postman Saw When We Ordered From 15 UK CBD Shops
Discreet delivery is one of those phrases that means whatever the shop wants it to mean. For some retailers it means a plain jiffy bag. For others it means a plain jiffy bag with “HEMP” stamped on the customs label and a bank statement that reads CBD SUPERSTORE LTD in four-centimetre capitals.
We decided to find out which is which. Over October 2026 we ordered from 15 UK CBD retailers, sending each order to one of three addresses: a first-floor flat in Bristol with a shared front door, a six-person houseshare in Manchester, and a small office in Leeds where post gets opened by whoever is nearest the kettle. Then we logged what arrived, what the label said, what the tracking page showed, and what turned up on the banking app.
What “discreet” should actually cover
Most people assume discretion starts and ends at the front door. It doesn’t. A single CBD order touches at least five places where your purchase can become someone else’s information:
- the outer packaging and any label text
- the sender name and return address
- the courier’s tracking page and SMS updates
- the descriptor on your bank or card statement
- the retailer’s own emails, texts and any insert in the box
A brand can nail four of those and blow the fifth. We scored each retailer on all five, and only counted a full pass if nothing in the chain mentioned CBD, hemp, cannabidiol or the brand’s own name.
The results
| Retailer | Outer packaging | Bank descriptor | Verdict |
|---|---|---|---|
| Thistle & Co | Plain grey mailer | T&C FULFILMENT | Pass |
| Kestrel | Plain mailer, no logo | KC SUPPLIES | Pass |
| Harbour Hemp | Plain box, no branding | HH TRADING | Pass |
| Pennine Pantry | Brown paper, handwritten label | PP DIRECT | Pass |
| Marsh Lane | Plain mailer | MLL SERVICES | Pass |
| Cobalt Coast | Plain mailer, generic tracking name | CB COAST | Pass |
| Bloom & Hemp | Printed box with leaf motif | B&H BOTANICALS | Fail |
| Brightwell | Plain box | BRIGHTWELL CBD | Fail |
| Velvet Botanical | Rigid gift box, logo on three sides | VELVET BOTANICALS CBD | Fail |
| Fenland Fizz | Plain box | FENLAND HEMP CO | Fail |
| Verity Vale | Plain mailer | VV WELLNESS | Fail |
| Sunrise Seltzer | Plain mailer | SUNRISE CBD UK | Fail |
| Honeystone | Plain box | HONEYSTONE CBD | Fail |
| Copper Kettle | Plain mailer | CK CONFECTIONERY | Fail |
| Wold & Willow | Plain mailer | W&W HEMP | Fail |
Four of the nine failures leaked in more than one place
Brightwell and Sunrise Seltzer both put CBD in the bank descriptor and named the product in a follow-up email subject line. Copper Kettle’s descriptor was clean, but the courier’s tracking page described the contents as “cannabidiol confectionery”, which our Leeds office discovered when the parcel was signed for by a colleague who had, until that moment, no opinion about us whatsoever.
Wold & Willow managed something genuinely impressive: plain outer packaging, then an SMS from a sender ID reading “W&W HEMP” forty minutes before delivery. If you share a phone with a partner or a teenager, that message is the whole game over.
The bank descriptor is the sneaky one
Here’s the thing most shoppers never think about. The descriptor on your statement is chosen by the merchant, not the bank, and it’s often set years before anyone in the company thinks about privacy. Three of the nine failures had a perfectly discreet parcel and a statement that read like a neon sign.
That matters if you share a joint account, if you expense things through work, or if you simply don’t want a running log of your purchases sitting in a shared banking app. You can usually find a retailer’s descriptor before ordering by searching the brand name plus “statement descriptor”, but honestly, very few shops publish it. Two of the six that passed told us they’d changed theirs in 2025 after customer complaints, which suggests the pressure works.
Why it matters beyond embarrassment
Most of this is about awkwardness — a flatmate raising an eyebrow, a parent asking questions, a colleague signing for a parcel. But there’s a sturdier reason too. Ordering something legal and unremarkable shouldn’t require you to explain yourself to a courier, a neighbour or a line manager, and nobody should have to think twice about buying a £20 tub of gummies because the label might out them as a wellness enthusiast.
There’s also a practical angle: parcels that announce their contents are parcels that get nicked. Nobody’s intercepting a plain grey mailer. A box with a hemp leaf on the side is a different proposition on a shared doorstep.
The six that did it properly
Thistle & Co and Marsh Lane both ship under a trading name that gives nothing away — no leaf, no green, no helpful strapline. Harbour Hemp and Cobalt Coast used plain boxes and kept the courier’s tracking description generic. Pennine Pantry went old-school with brown paper and a handwritten label, which somehow felt more private than anything else in the test. Kestrel was the only one to get all five categories right and send no marketing email afterwards.
How to check before you buy
Ask the shop directly what name appears on the statement — a good retailer answers this in a day. Look at whether their courier tracking uses the brand name. And if you’re ordering to a shared address, a click-and-collect point is a genuinely better option than hoping the packaging is quiet.
Discreet delivery isn’t a premium feature. It’s the baseline, and only six of the fifteen we tested actually met it.
