Privacy Policy

1. Who we are

Mary Jane's Place ("we", "us", "our") is a members' space for prescribed UK medical cannabis patients. Our registered address is 7 Stafford Road, Bournemouth BH1 1JH. We are the data controller for the personal data described in this policy.

2. What this policy covers

This policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what your rights are. It applies to the website maryjanesplace.co.uk and to in-person interactions at our Bournemouth location.

3. What data we collect

We collect:

• Contact details — name, email address, phone number — when you contact us, join our newsletter, apply for membership or place an order.
• Membership verification — sight of your photo ID and proof of prescription on a one-off basis when you apply for membership. We do not retain copies of these documents; we record only that verification has taken place and the membership number issued.
• Order data — items purchased, delivery address, billing address, transaction reference. We do not store card details on our servers; payment processing is handled by Stripe.
• Website data — basic analytics (anonymous traffic statistics, no personal identification), cookies for site functionality.

4. Why we collect it (lawful basis under UK GDPR)

• Contract — to provide products and services you order, fulfil membership benefits, and respond to enquiries.
• Legitimate interests — to operate and improve our website and services.
• Consent — for marketing communications (e.g. newsletter), which you can withdraw at any time.
• Legal obligation — to comply with tax, accounting and anti-fraud requirements.

5. Who we share data with

We do not sell your personal data. We share limited data only with the service providers needed to operate the site and fulfil orders:

• Stripe — for payment processing (card data goes directly to Stripe, never to us).
• Retail North / drop-shipping partners — for fulfilling product orders (name, delivery address).
• Netlify — for website hosting and form submissions.
• Microsoft 365 / GoDaddy — for email correspondence.
• Tax authorities and regulators — where required by law.

We do not share personal data with clinics, insurers, employers, or the police, except where compelled to do so by law (e.g. a court order).

6. How long we keep it

Order records and contact data are kept for 7 years for tax and accounting purposes. Newsletter subscriber data is kept until you unsubscribe. Membership records are kept while your membership is active and for 12 months thereafter.

7. Your rights

You have the right to:

• Request a copy of the data we hold about you
• Correct inaccurate data
• Ask us to delete your data (subject to legal retention requirements)
• Object to or restrict processing of your data
• Withdraw consent to marketing at any time (each email contains an unsubscribe link)
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

8. Cookies

We use only essential cookies for basic site functionality. We do not use third-party advertising or tracking cookies.

9. Children

Our services are intended for prescribed patients, and a valid prescription is required. We do not knowingly collect data from children. If we discover we have collected such data, we will delete it.

10. Contact

For privacy enquiries, contact us at info@maryjanesplace.co.uk or in writing to the address above.