Privacy notice

Who we are

Patient Protect Ltd ("Patient Protect", company number 16827548), registered at Unit 2 Leavesden Lodge, 1a Leavesden Road, Watford, England, WD24 5FR, is the data controller for the personal data described in this notice. You can contact us about data protection at alex@patientprotect.co.uk.

What we collect

• Account details: name, email address, phone number and region.
• Case details: what happened, who was involved, dates, the organisation concerned and any documents or evidence you upload.
• Health-related information: that you hold a cannabis prescription, and your prescribing clinic, where you choose to tell us.
• Billing information: membership status and payment records held by our payment provider.
• Referral information: the clinic that referred you, where applicable.

Why we use it and our legal basis

• To deliver the support you ask for — performance of a contract, and for health-related data your explicit consent.
• To take payment and keep accounting records — legal obligation and contract.
• To understand patterns of discrimination through anonymised, aggregated reporting — legitimate interests, using data that cannot identify you.
• To keep the service secure and prevent misuse — legitimate interests.

Who can see your data

Case details are visible only to the Patient Protect case workers working on your case. Clinics who refer patients never see your case details, prescriptions or documents — they see only whether a referral converted, so that commission can be calculated. We share information with a lawyer or third party only where you ask us to, or where the law requires it.

Storage, retention and transfers

Data is stored in the UK or the EEA with our hosting and payment providers. Case records are retained for six years after a case closes, to cover limitation periods, then deleted or fully anonymised. Marketing preferences are kept until you withdraw them.

Your rights

You can request a copy of your data, ask us to correct or delete it, object to or restrict processing, withdraw consent at any time, and request portability. Email alex@patientprotect.co.uk. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.