UK CBD rules
How old do you have to be to buy CBD in the UK?
The short responsible answer is 18—but the legal explanation depends on whether the product is a food, cosmetic, vape or prescribed medicine.
The answer in a nutshell
- CBD oils, gummies, drinks and capsules: the FSA advises under-18s to avoid CBD foods and encourages “not suitable under 18” labelling.
- Retail purchases: many responsible CBD retailers operate an 18+ rule and may request approved proof of age.
- CBD vapes: vape age restrictions have their own legal timetable and differ by nation and nicotine content; all-vape under-18 restrictions become UK-wide on 29 October 2026.
- CBD cosmetics: FSA food advice does not directly govern a non-ingested cosmetic, but retailer policies and cosmetic safety instructions still apply.
- Prescribed products: medical decisions are made through the clinician and pharmacy route, not ordinary CBD retail rules.
Is CBD legally restricted to over-18s?
There is no useful one-word answer for every CBD-labelled item. UK rules regulate products according to what they are and how they are presented. An edible CBD oil is treated as a food; a skin cream is a cosmetic; a vaping liquid engages vape and product-safety rules; and a product making medical claims may be a medicine. The word CBD does not erase those category differences.
For CBD foods, the Food Standards Agency identifies children—meaning people under 18—as a vulnerable group and advises them to avoid CBD unless under medical direction. Its current business guidance encourages labels that say a CBD food is not suitable for people under 18. That is powerful official safety guidance, but it should be described accurately rather than turned into a claim that one identical criminal age-of-sale offence applies to every CBD oil, gummy, balm and vape.
A retailer is still entitled to set an 18+ condition of sale. In practice, this is the clearer and safer standard, which is why thCBDx is intended for UK adults aged 18 and over.
CBD oil, gummies, capsules and drinks
Products that are swallowed—including drops, tinctures, sprays, gummies, capsules and CBD drinks—are generally CBD foods or food supplements. They sit within the novel-food regime. The FSA advises that healthy adults should limit CBD from all food sources to 10mg per day and that vulnerable groups, including under-18s, should avoid it.
A brightly coloured gummy remains subject to that advice even if it looks like ordinary confectionery. Businesses should avoid child-focused presentation, make the CBD content clear and keep products out of children's reach. Parents should not treat a retail gummy or oil as a harmless sweet, vitamin or home treatment.
The FSA's public CBD register is also relevant. Inclusion shows that a product is linked to a novel-food application moving through the process; it is not an endorsement or a guarantee of final authorisation. Age checks do not compensate for a product with an unsuitable market status, unclear ingredients or medical claims.
What about CBD vapes?
Vapes require separate care. Nicotine-containing vaping products are currently restricted to buyers aged 18 or over. In Scotland, existing requirements cover nicotine and non-nicotine vapes. In England, Wales and Northern Ireland, the Tobacco and Vapes Act 2026 extends the under-18 sales restriction to non-nicotine vapes from 29 October 2026.
That future UK-wide date matters when describing the law on 3 August 2026. It would be inaccurate to pretend the new provision is already in force everywhere, but it would be equally irresponsible to market a CBD vape to children in the gap. Government retail guidance calls for suitable age-verification policies for vaping products, and thCBDx treats every CBD vape page as adult-only.
The FSA's 10mg food advice should not be converted into a vaping allowance. CBD vaping is an inhalation format, not a CBD food. See our complete CBD vaping guide for product, legal and recycling information.
CBD balms, creams and cosmetics
A genuine topical cosmetic is not consumed as food, so the FSA's CBD-food intake guidance does not directly determine its age of sale. Cosmetics instead need to comply with applicable cosmetic product and safety rules. A retailer may nevertheless make the full CBD range 18+ to operate one consistent safety and verification policy.
Young skin, allergies, essential oils and other active ingredients can raise their own considerations. “Topical” also does not mean medicinal: an ordinary CBD cosmetic must not be presented as treating pain, eczema, inflammation or another medical condition without the appropriate medicines status.
Prescribed CBD and children
FSA guidance includes the important phrase “unless under medical direction”. This does not create a route for a parent to select a retail CBD supplement for a child. A prescribed cannabis-based medicine is a different product supplied through a regulated clinical and pharmacy pathway for specific circumstances.
If a child or young person has a health concern, the appropriate step is to speak to a qualified healthcare professional. Affiliate product pages, customer reviews, social media posts and symptom finders are not substitutes for a clinical assessment.
Why retailers use age verification
An online retailer may ask for a date of birth, use an independent age-estimation or identity service, request ID on delivery or apply a Challenge 25-style policy. A store can refuse a transaction when its age policy is not satisfied, even where the legal basis differs from alcohol or tobacco.
Age gates are only one control. Responsible retail also means accurate categories, adult-focused advertising, clear warnings, no medical claims, appropriate product status and a dependable business identity. A simple “I am over 18” popup should not be presented as proof that every product behind it is compliant.
thCBDx policy
thCBDx is an independent affiliate information site for UK adults aged 18 and over. We do not sell or dispatch products, and purchases are completed with the named retailer. Retailers may conduct their own age checks and apply stricter rules.
We do not recommend consumer CBD products for children, convert symptoms into product suggestions or present CBD as a medicine. Our product comparisons focus on labels, format, ingredients, price and published evidence.
Frequently asked questions
Do you have to be 18 to buy CBD oil?
The FSA advises under-18s to avoid CBD foods and encourages under-18 warning labels. Most responsible retailers use an 18+ policy, although the precise legal category should not be oversimplified.
Can a 16-year-old buy CBD gummies?
A responsible retailer should not supply consumer CBD gummies to someone aged 16. The FSA advises children under 18 to avoid CBD foods unless under medical direction.
Can a parent give a child CBD?
Retail CBD products should not be selected as a treatment for a child. Speak to an appropriate healthcare professional; prescribed products use a separate clinical route.
Are CBD vapes 18+?
Nicotine vapes are currently age-restricted. Scotland also covers non-nicotine vapes, and UK-wide under-18 rules for all vapes take effect on 29 October 2026. Responsible CBD vape retailers already apply adult age checks.
Do you need ID to order CBD online?
A retailer may require age verification as a condition of sale. The method varies, and the final retailer—not thCBDx—processes the purchase.
Sources and scope
This article is general consumer information, not legal or medical advice. Checked 3 August 2026.