Last updated: May 2025

Kushems Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

Who We Are

Kushems Ltd is a medical cannabis consultation service registered in the United Kingdom.

Company name: Kushems LtdAddress: Brooklands, The Yard, Ockham Lane, GU23 6JUPhone: 01420 375485

We are the data controller responsible for your personal data.

What Data We Collect

We may collect and process the following categories of personal data:

Identity data — your name, date of birth, and age verification information.

Contact data — email address, phone number, and postal address.

Health data — medical history, current conditions, medications, and other health-related information you provide during the eligibility check or consultation process. This is special category data under UK GDPR and is handled with the highest level of care.

Technical data — IP address, browser type, device information, and cookies when you visit our website.

Usage data — information about how you navigate and interact with our website.

Communications data — records of any correspondence between you and our team.

How We Collect Your Data

We collect data in the following ways:

• Directly from you when you complete our eligibility check, book a consultation, fill in a contact form, or communicate with us
• Automatically through cookies and analytics tools when you browse our website
• From third-party partners involved in the delivery of your treatment, where relevant and with appropriate agreements in place

How We Use Your Data

We use your personal data for the following purposes:

• To assess your eligibility for medical cannabis treatment
• To provide and manage your consultations and treatment plan
• To communicate with you about your care, appointments, and follow-ups
• To comply with our legal and regulatory obligations under UK law
• To improve our website and services through anonymised analytics
• To respond to your enquiries and provide customer support

We will never sell your personal data to third parties.

Legal Basis for Processing

We process your personal data on the following legal grounds:

Contract — processing is necessary to deliver the services you have requested.

Legal obligation — we are required to retain certain records under UK healthcare and regulatory law.

Legitimate interests — to operate and improve our services in ways that do not override your rights.

Explicit consent — for the processing of special category health data, we will always ask for your explicit consent before proceeding.

Who We Share Your Data With

Your data may be shared with the following parties, only where necessary:

• Licensed specialist doctors involved in your consultation and treatment
• Regulated pharmacies responsible for dispensing your prescription
• Secure IT and platform providers who support our operations under strict data processing agreements
• Regulatory bodies or law enforcement where we are legally required to disclose information

All third parties are required to handle your data securely and in accordance with UK data protection law.

How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, and in line with our legal obligations.

Medical records and consultation data are typically retained for a minimum of eight years in accordance with UK healthcare guidelines. Where data is no longer required, it is securely deleted or anonymised.

Cookies

Our website uses cookies to improve your browsing experience and analyse site traffic. You will be asked to confirm your cookie preferences when you first visit our site.

You can manage or withdraw your cookie consent at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data where there is no lawful reason to retain it
• Right to restriction — to ask us to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at the details below. We will respond within 30 days.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All health data is encrypted and stored on secure, access-controlled systems.

Despite our efforts, no method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us immediately.

Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us and we will take prompt action to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page will always indicate when the policy was last revised. We encourage you to review it periodically.

Contact Us & Complaints

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Kushems LtdBrooklands, The Yard, Ockham Lane, GU23 6JU01420 375485

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's data protection authority — at ico.org.uk or by calling 0303 123 1113.

‍