Home
Home
Laws
Cannabis Research
Call our information center at
UK-Logotypes (color).png
England Cannabis
Privacy Policy

Privacy Policy

Last Updated: 24 July 2025

Cannabis.org.uk (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website (https://www.cannabis.org.uk), contact us, or otherwise interact with us.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

We operate as an informational platform focused on cannabis education and policy awareness in the United Kingdom. We do not sell cannabis or related products and do not offer medical or financial advice.

We are the data controller in relation to personal data collected through our Website.

For questions regarding this Privacy Policy, please contact: privacy@cannabis.org.uk

2. What Data We Collect

We may collect and process the following categories of personal data:

a. Information You Provide

  • Name and email address;
  • Any personal details submitted via contact forms;
  • Business contact information (if applicable).
  • Any other personal data you choose to share with us (e.g., via enquiry, referral, or directory submission forms).

b. Automatically Collected Data

When you use our Website, we may automatically collect:

  • Technical data (e.g. IP address, browser type, operating system).
  • Usage data (pages visited, time on site, referring URLs).
  • Cookies and similar tracking technologies.

c. Survey and Poll Data

If you choose to participate in a poll, survey, or questionnaire on our Website, we may collect the information you submit, which may include your preferences, opinions, or demographic details. This data may be collected anonymously or in association with other information you have provided, depending on the context of the survey. Where surveys collect personal data, we will obtain your explicit consent before processing it.

3. Legal Basis for Processing

Under UK GDPR, we must have a legal basis to process your personal data. We rely on the following:

  • Consent – where you have given us clear consent (e.g., to receive communications or to share details with third parties).
  • Legitimate interests – for example, to analyse website usage or improve our services.
  • Legal obligation – where processing is necessary to comply with applicable law.
  • Contract – where we need to perform obligations under a contract with you.

4. How We Use Your Data

We may use your personal data for the following purposes:

  • To respond to your queries and messages;
  • To maintain and improve the functionality and content of our Website;
  • To communicate with you about updates or information you have requested;
  • To analyse traffic and website usage (e.g., via Google Analytics);
  • To facilitate introductions to third-party partners (only with your consent);
  • To comply with our legal and regulatory obligations;
  • To analyse trends and feedback from polls or surveys to enhance our content and services;
  • To generate anonymised or aggregated data for internal use or sharing with stakeholders.

We do not conduct automated decision-making or profiling that has legal or similarly significant effects on you.

5. Sharing Your Information

We do not sell your personal data. We may share your data in the following circumstances:

  • Service Providers – with third parties who provide IT, analytics, hosting, or communication services.
  • Consent-Based Referrals – if you opt-in to be contacted by third-party organisations, such as business directories or financial institutions, we may share your details accordingly.
  • Legal Obligations – if required to do so by law, legal process, or regulatory authorities.
  • Business Transfers – if we undergo a merger, restructure, or acquisition.
  • Research and Insights Partners – Aggregated and anonymised survey results may be shared with collaborators or public interest groups, but no personally identifiable information will be disclosed without consent.

All third parties are required to respect the security of your data and to treat it in accordance with the law.

6. International Transfers

We primarily store your personal data within the UK. If your data is transferred outside the UK (e.g., to a service provider), we will ensure appropriate safeguards are in place under the UK GDPR, such as:

  • Adequacy regulations (if the destination country is deemed "adequate" by the UK government);
  • Standard Contractual Clauses (SCCs) approved by the UK ICO.

When transferring personal data outside the UK, we ensure that such transfers are subject to appropriate safeguards, such as Standard Contractual Clauses (SCCs) or adequacy decisions, to ensure your data is protected to a standard comparable to UK data protection laws.

7. Data Retention

We retain personal data only as long as necessary for the purposes it was collected or to comply with legal or regulatory requirements. When your personal data is no longer required, it will be securely deleted or anonymised.

Personal data collected through polls and surveys will be retained only as long as necessary to fulfil the purpose for which it was collected, unless otherwise required by law. Where possible, results will be anonymised and stored in aggregated form.

8. Your Rights

Under the UK GDPR, you have the following rights:

  • Right to access – you can request a copy of the personal data we hold about you.
  • Right to rectification – you can request correction of inaccurate data.
  • Right to erasure – you can request deletion of your data where there is no legal basis for continued processing.
  • Right to restrict processing – you can request we limit the use of your data.
  • Right to data portability – you can ask to receive your data in a structured format.
  • Right to object – you can object to processing based on legitimate interests.
  • Right to withdraw consent – where processing is based on your consent, you can withdraw this at any time.

To exercise any of these rights, please contact us at privacy@cannabis.org.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint

9. Children’s Privacy

Our Website is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately.

10. Security

We implement appropriate technical and organisational security measures to protect your personal data. However, no data transmission or storage system can be guaranteed to be completely secure. You use our Website at your own risk.

We limit access to your personal data to those employees, agents, contractors, and third parties who have a business need to know. They are subject to a duty of confidentiality and are trained in data protection best practices.

This Website may contain links to third-party websites. We are not responsible for the content, privacy, or data security practices of such third parties. We recommend reviewing their privacy policies before submitting any personal data.

12. Do Not Track

Some browsers offer "Do Not Track" features. We do not currently respond to such signals. You may, however, control cookies through your browser settings or our cookie management tool.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version with a revised “Effective Date” at the top. Your continued use of the Website after updates indicates your acceptance of the changes.

14. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: privacy@cannabis.org.uk