Privacy Policy | MedCannabis Cure UK
Legal

Privacy Policy

Last updated: 1 September 2026

Medcann Pharma Ltd (trading as MedCannabis Cure UK / MEDCANN Pharmacy™) is committed to protecting your privacy. This policy explains what personal and health information we collect, why we collect it, and how we protect it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

MedCannabis Cure UK is operated by Medcann Pharma Ltd (Company Registration No. 13383526), a company registered in England and Wales, and holds GPhC Premises Registration No. 9013239. Our Superintendent Pharmacist is Jay Vekaria (GPhC No. 2083802). We act as the data controller for the personal data described in this policy.

2. Information We Collect

We may collect the following categories of information:

  • Contact details: name, email address, phone number, postal address.
  • Identity information: date of birth, proof of UK residency where required.
  • Health information (special category data): medical history, diagnoses, current and previous medications, treatment history, and consultation notes.
  • GP and clinical contacts: your GP’s name and practice, where provided.
  • Technical information: IP address, browser type, and website usage data (see our Cookie Policy).

3. How We Use Your Information

We use your information to:

  • Assess your eligibility for a medical cannabis consultation;
  • Enable specialist doctors to provide clinical assessment and, where appropriate, prescribe treatment;
  • Coordinate dispensing with our licensed pharmacy partners;
  • Respond to enquiries and provide ongoing patient support;
  • Meet our legal and regulatory obligations as a registered pharmacy; and
  • Improve our website and services.

We do not use your health information for marketing purposes, and we do not sell your personal data to third parties.

Because we process health data, which UK GDPR classes as special category data, we rely on the following legal bases:

  • Explicit consent (Article 9(2)(a) UK GDPR) for processing your health information for clinical assessment, which you provide when completing our Eligibility & Consultation Request form;
  • Provision of health or social care (Article 9(2)(h) UK GDPR) where processing is necessary for medical diagnosis and the provision of care by a healthcare professional; and
  • Legal obligation (Article 6(1)(c) UK GDPR) where we are required to retain records under pharmacy or medicines regulations.

5. Who We Share Your Data With

We share your information only where necessary, including with:

  • Specialist doctors conducting your consultation and assessment;
  • Licensed UK pharmacies responsible for dispensing your prescription;
  • Your GP, but only with your explicit consent;
  • IT and hosting providers who process data on our behalf under contract; and
  • Regulatory bodies (such as the GPhC or MHRA) where legally required.

We do not share your data with third parties for their own marketing purposes.

6. How Long We Keep Your Data

We retain clinical records for the period required under UK pharmacy and healthcare record-keeping regulations, typically a minimum of 8 years from your last interaction with us, or longer where required by law. General enquiry data not linked to a clinical record is retained only as long as necessary to handle your enquiry.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate data;
  • Request erasure of your data, where legally possible (note: clinical records may need to be retained for regulatory reasons);
  • Object to or restrict certain processing;
  • Request a copy of your data in a portable format; and
  • Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us using the details in Section 12. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

8. Cookies

Our website uses cookies to improve your browsing experience. Full details of the cookies we use and how to manage your preferences are set out in our Cookie Policy.

9. Data Security

We use appropriate technical and organisational measures to protect your data, including encrypted data storage, restricted staff access to clinical records, and secure transmission of health information between our clinicians and pharmacy partners.

10. Children’s Data

Our services are only available to individuals aged 18 or over. We do not knowingly collect personal data from anyone under 18.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date.

12. Contact Us

If you have any questions about this policy or wish to exercise your data protection rights, please contact us:

Medcann Pharma Ltd
Email: sales@medcannabiscure.shop
Address: [Building Number, Street Name], London, [Postcode], United Kingdom