1. Who We Are

This Privacy Policy explains how Cannaunity Ltd, trading as Cannaunity (“we”, “our”, or “us”), collects and uses personal information.

We are registered in England and Wales and regulated under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We also comply with South Africa’s Protection of Personal Information Act (POPIA) for customers based in South Africa.

2. Scope of This Policy

This Policy applies when you:

• browse or interact with our website;
• contact us or subscribe to updates; or
• use website features that rely on cookies or analytics.

Cannaunity Ltd does not collect or process personal, payment, or medical data for orders or prescriptions. All ordering, eligibility checks, and payments are handled via the Dr Green DApp platform, which operates separately and has its own Privacy Policy.

3. The Dr Green DApp Platform

When you proceed to make a purchase or complete an eligibility questionnaire, you will be redirected to the Dr Green DApp, operated independently by Dr Green.

• Dr Green collects and controls the data required to process orders, payments, and medical information.
• Cannaunity Ltd does not access, store, or control this data.
• Dr Green acts as a separate data controller and is solely responsible for compliance with data protection laws.

Before redirection, you will see a pop-up explaining that you are leaving our site and that Dr Green’s Privacy Policy will apply.

4. Information We Collect

We may collect limited personal data directly from you, including:

We do not collect medical or payment data — this is handled by Dr Green.

5. How We Use Your Data

• Respond to enquiries and provide information;
• Send newsletters or updates (with consent);
• Improve our website and user experience;
• Ensure website security and prevent misuse; and
• Comply with legal and regulatory obligations.

We do not use your data for automated decision-making or profiling that has legal effects.

6. Lawful Basis for Processing

Our processing of personal data is based on one or more of the following lawful bases:

• Consent – for newsletters, marketing, and non-essential cookies.
• Contractual necessity – where you contact us about services or pre-contract information.
• Legitimate interests – for site operation, security, and analytics.
• Legal obligation – to comply with record-keeping and regulatory requirements.

You may withdraw your consent at any time by emailing: Cannaunityco@gmail.com

7. Cookies and Analytics

We use cookies and similar technologies to:

• enhance user experience and remember preferences;
• analyse traffic and website performance;
• monitor security and prevent abuse.

Non-essential cookies are used only with your consent. You can adjust or withdraw consent at any time using our cookie banner or your browser settings. See our Cookie Policy for details.

8. Data Sharing

We may share limited data with:

• website and IT service providers (e.g. hosting, analytics);
• regulatory bodies if legally required; or
• advisers and professional partners for legitimate business purposes.

We do not sell or rent personal information to any third party.

9. International Transfers

We primarily store data within the UK. If we transfer data outside the UK (for example, through analytics tools or cloud providers), we ensure appropriate safeguards such as standard contractual clauses or adequacy regulations are in place.

10. Data Retention

We keep your data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Once no longer needed, data is securely deleted or anonymised.

11. Your Rights

UK Residents (UK GDPR)

• Access, rectify, or erase your personal data;
• Restrict or object to processing;
• Request data portability; and
• Withdraw consent at any time.

You can complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

South African Residents (POPIA)

• Be informed about data collection;
• Access or correct your data;
• Object to processing or request deletion; and
• Lodge a complaint with the Information Regulator (South Africa) at www.justice.gov.za/inforeg/.

To exercise your rights, please email: Cannaunityco@gmail.com

12. Security

We implement technical and organisational measures to safeguard data, including:

• encryption and secure hosting;
• restricted access and staff training;
• regular review of systems and vendors.

While we take every reasonable step to protect your data, no online service is entirely risk-free.

13. Links to Third-Party Sites

Our site includes links to third-party services such as Dr Green’s DApp. Once you leave our site, we are not responsible for the privacy practices or content of those third parties. We recommend reviewing their Privacy Policies before submitting any data.

14. Changes to This Policy

We may update this Policy periodically. Any significant changes will be posted on this page with a new “Last Updated” date.

15. Raising Complaints with Supervisory Authorities

If you have concerns about how we handle your personal data, you are entitled to lodge a complaint with your national data protection regulator.

• UK: Information Commissioner’s Office (ICO) – submit a complaint at https://ico.org.uk/make-a-complaint/
• South Africa: Information Regulator (South Africa) – guidance and complaints at https://www.justice.gov.za/inforeg/

We encourage you to contact us first to address any concerns, but you may escalate your complaint directly to the relevant authority at any time.

16. Contact Us