Privacy Policy

Effective date: 28 May 2026 · Last updated: 28 May 2026

1. Introduction

LeafMe (leafme.co.uk) is an independent medical cannabis price comparison service for patients in the United Kingdom. We help patients find and compare licensed medical cannabis products available on lawful prescription in the UK. We are not a medical provider, clinic, pharmacy or dispensary.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller for leafme.co.uk is:

LeafMe Ltd
Company No. 15234567
Registered in England and Wales
London, United Kingdom
Privacy contact: hello@leafme.co.uk

3. What Data We Collect

We collect only the data necessary to operate the service.

Automatically Collected Data

When you visit LeafMe, our servers and analytics tools may collect:

IP address - anonymised before processing; used for security and spam prevention
Browser type and version
Operating system and device type
Pages visited and searches performed
Referring URL - the page you came from
Date and time of visit

This data is collected via standard web server logs and Google Analytics 4. Server logs are retained for up to 30 days. Analytics data is aggregated and anonymised.

Voluntarily Provided Data

You may choose to provide us with:

Email address - if you sign up for Price Alerts or our newsletter. We store only your email address and your selected alert preferences. No health data, financial data or prescription data is ever collected.
Contact form submissions - name and email address, used solely to respond to your enquiry.

Cookies

We use cookies to improve your experience. See Section 7 (Cookie Policy) for full details.

4. How We Use Your Data

Price Alerts and Newsletter - to send you the specific notifications you signed up for. No marketing, no profiling, no sharing.
Analytics - to understand how visitors use the site and improve functionality. All data is aggregated and anonymised before analysis.
Security and fraud prevention - server logs are used to detect abuse, unauthorised access and attacks.
Contact enquiries - to respond to messages sent via our contact form.

We do not sell, rent or share your personal data with third parties for commercial purposes.

5. Legal Basis for Processing (UK GDPR Article 6)

Processing Activity	Legal Basis
Price Alert and Newsletter emails	Consent - Article 6(1)(a). You opt in voluntarily and may withdraw at any time.
Analytics (GA4, anonymised)	Legitimate interests - Article 6(1)(f). Improving our service with minimal privacy impact.
Server logs / security	Legitimate interests - Article 6(1)(f). Protecting the security and integrity of the service.
Responding to contact form enquiries	Contract performance - Article 6(1)(b). Handling your request.

We do not process special category data (such as health data, prescription data or financial data) in connection with your use of LeafMe.

We do not sell your data. We do not share personal data with cannabis companies, clinics, pharmacies or any commercial third party for marketing purposes.

We use the following service providers who may process data on our behalf:

Google Analytics 4 - anonymised traffic analytics. IP addresses are anonymised. Analytics cookies are only loaded after your consent.
OpenStreetMap / Leaflet.js - map tiles for the clinic finder. No personal data is transmitted to OpenStreetMap.

We may disclose data to authorities where legally required to do so (e.g. court order or law enforcement request).

7. Cookie Policy

Cookies are small text files stored on your device. We use the following categories:

Essential Cookies (always active)

These cookies are required for the site to function. They do not collect personal data.

lm_cookie_consent - remembers your cookie preference. Stored in localStorage, not transmitted to our server.
Session cookies - used for basic site functionality such as saved favourites.

Analytics Cookies (optional - only with your consent)

These cookies are only set if you accept analytics cookies.

_ga, _ga_* - Google Analytics 4. Measures aggregated site usage. IP anonymisation enabled. Retained for 26 months.

How to Manage Cookies

You can change your cookie preference at any time using the cookie banner shown on your first visit. You can also clear cookies via your browser settings, use private / incognito mode, or opt out of Google Analytics via the opt-out browser add-on (available at google.com).

We do not use advertising cookies, tracking pixels or retargeting cookies.

8. Data Retention

Price Alert email addresses - retained until you unsubscribe or request deletion.
Newsletter subscriptions - retained until you unsubscribe or request deletion.
Contact form data - deleted within 90 days of your enquiry being resolved.
Server logs - up to 30 days.
Analytics data (GA4) - 26 months (Google Analytics default setting).

9. Your Rights (UK GDPR)

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

Right of access - request a copy of the personal data we hold about you.
Right to rectification - request correction of inaccurate or incomplete data.
Right to erasure - request deletion of your personal data ("right to be forgotten").
Right to restriction - request that we restrict processing of your data in certain circumstances.
Right to data portability - where processing is based on consent, receive your data in a structured, machine-readable format.
Right to object - object to processing based on legitimate interests.
Right to lodge a complaint - you have the right to complain to the Information Commissioner's Office (ICO), the UK data protection authority, at ico.org.uk, if you believe we have not handled your data correctly.

To exercise any of these rights, contact us at: hello@leafme.co.uk. We will respond within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The effective date at the top of this page will be updated accordingly. Where changes are material, we will notify Price Alert and newsletter subscribers by email. Continued use of LeafMe after any update constitutes acceptance of the revised policy.

11. Contact

For privacy-related enquiries or to exercise your rights:

Email: hello@leafme.co.uk
Subject line: Privacy Request