Privacy Policy
When We May Share Your Information Without Consent
We take your privacy seriously, but in exceptional circumstances we may share your information with emergency services (Police, Ambulance, Fire, or social services) without prior consent:
- Risk to life: You express intent to harm yourself or end your life
- Risk to others: You express intent to harm another person
- Safeguarding: A child or vulnerable adult is at risk of harm
- Medical emergency: You are in immediate medical danger
- Legal requirement: We are compelled by court order or law
Disclosure will be limited to minimum necessary information. We will inform you as soon as reasonably practicable, unless doing so would increase risk.
1 Data Controller
Phytoventures Ltd is the data controller for personal data collected through CannCare.org. We are committed to protecting your privacy while providing advocacy support.
- Email: [email protected]
- Phone: 0161 524 6294
- Address: 86-90 Paul Street, London, EC2A 4NE
2 Information We Collect
You Provide
- Contact information (name, email, phone)
- Details about discrimination incidents
- Prescription status information
- Employment details for cases
Automatic Collection
- Browser type and version
- IP address (anonymised)
- Pages visited and time spent
- Device information
Special Category Data (Health Information)
Information about your medical cannabis prescription is considered "special category data" under UK GDPR. We only process this with:
- Your explicit consent
- To protect vital interests
- For legal claims
- Substantial public interest
Fraud Prevention & User Verification
To protect our community and maintain platform integrity, we may collect and process the following information for fraud prevention purposes:
Information We May Collect
- Email address and name (from registration)
- Social media profiles and online presence
- Publicly available information
- Admin observations and concerns
Purpose
- Prevent fraudulent registrations
- Identify banned users re-registering
- Protect community from harassment
- Maintain platform security
Data Retention & Handling
Fraud prevention data is retained by CannCare only and is not shared with external parties. This information is used solely to protect our community and maintain platform integrity.
Legal Basis & Your Rights
Legal Basis: Legitimate interests in preventing fraud, protecting community members, and maintaining platform security. Note: Fraud prevention data is not accessible through data subject access requests where disclosure would compromise fraud prevention measures.
3 Data Retention
Case Data
Duration + 6 years
Communications
3 years after last contact
Analytics
26 months
Cookie Preferences
12 months
Fraud Intelligence (Automated)
30 days
Fraud Intelligence (Serious)
Permanent
4 Your Data Rights
Under UK GDPR, you have the following rights:
Access
Request a copy of your data
Rectification
Correct inaccurate data
Erasure
Request deletion of data
Restrict
Limit how we use your data
Portability
Transfer data elsewhere
Object
Object to processing
To exercise any of these rights, contact us at [email protected]
5 Data Security
We implement appropriate technical and organisational measures:
- Encryption in transit and at rest
- Regular security assessments
- Access controls and authentication
- Staff data protection training
6 Complaints
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Email: [email protected]
- Phone: 0161 524 6294
- Address: 86-90 Paul Street, London, EC2A 4NE