Privacy Policy

Definitions

"Lounge"

means UKMC Lounge | Norwich and any future UKMC Lounges locations.

"Website"

means ukmclounges.com and all associated pages and subdomains.

"We / Us / Our"

means UKMC Group Ltd, owner and operator of UKMC Lounges.

"You / Your"

means any person accessing the Website or submitting a membership registration.

"Member"

means any individual who has registered interest in or been approved for UKMC Lounges membership.

"Membership Data"

means personal data collected in connection with the membership registration and verification process.

1. Who We Are

UKMC Lounges is owned and operated by UKMC Group Ltd, a company incorporated in England and Wales.

For the purposes of UK data protection law, UKMC Group Ltd is the data controller responsible for your personal data collected through this website and in connection with the UKMC Lounges membership process.

This Privacy Policy applies to ukmclounges.com and all personal data collected in connection with the Website and the UKMC Lounges membership registration and verification process.

2. What Information We Collect

2.1 Membership Registration Data

When you submit a membership registration form we collect your:

• Full name
• Email address
• Phone number (where provided)
• Confirmation of UK medical cannabis patient status
• Confirmation that you are over 18
• Message content (where provided)
• Agreement to house rules and consent to membership communications

Purpose: Processing your membership registration, conducting verification and communicating with you about your membership application and the UKMC Lounges opening.

Legal Basis: Consent and contract performance.

Retention: Duration of your membership registration plus 24 months after withdrawal or last activity, unless you request earlier deletion.

2.2 Membership Verification Data

As part of the membership verification process, verified members are required to provide:

• Proof of a valid UK medical cannabis prescription
• Valid photo identification

Purpose: Verifying eligibility for UKMC Lounges membership in accordance with our legal and compliance obligations. Membership is restricted to verified UK medical cannabis patients aged 18 and over.

Legal Basis: Legal obligation and legitimate interests.

Retention: Duration of active membership plus 24 months, unless a longer retention period is required by applicable law.

2.3 Contact and Enquiry Data

When you contact us by email or through any enquiry form we collect your:

• Name
• Email address
• Phone number (where provided)
• Message content

Purpose: Responding to your enquiry about membership, press opportunities or partnerships.

Legal Basis: Legitimate interests.

Retention: 36 months from last contact.

2.4 Email Marketing Data

Where you have consented to receive membership updates and communications from UKMC Lounges, we collect your:

• Name
• Email address

Purpose: Sending you membership updates, opening announcements and relevant communications about UKMC Lounges via GoDaddy Email Marketing.

Legal Basis: Consent. You may unsubscribe at any time using the unsubscribe link in any email.

Retention: Until you unsubscribe or request deletion.

2.5 Website Analytics

We collect anonymised data about how visitors use this website via Google Analytics 4, including:

• Pages visited and time spent
• Referral source and search terms
• Device type and browser
• Approximate location at country or region level

No personally identifiable information is collected via analytics.

Legal Basis: Consent. Analytics cookies are only placed after you accept via the cookie consent banner.

Retention: 26 months, then anonymised.

2.6 Cookies

We use essential cookies for website functionality and analytics cookies via Google Analytics — only after your consent. See Section 10 for full details.

3. How We Use Your Information

We use your personal data to:

• Process and manage your membership registration and verification
• Communicate with you about your membership application and the UKMC Lounges opening
• Send membership updates and opening announcements where you have provided consent
• Respond to enquiries about membership, press opportunities and partnerships
• Verify eligibility for membership in accordance with our legal and compliance obligations
• Analyse how visitors engage with our website and improve the user experience
• Ensure the security of the Website
• Comply with our legal obligations

We never sell, rent or share your personal data with third parties for their own marketing purposes.

4. Sensitive Personal Data

The membership verification process requires you to confirm your status as a UK medical cannabis patient and to provide proof of a valid UK medical cannabis prescription. This information constitutes health data and is therefore classified as special category data under UK GDPR.

We process this data solely for the purpose of verifying your eligibility for UKMC Lounges membership. It is stored securely, accessed only by authorised UKMC Group Ltd staff and never shared with third parties except where required by law.

Legal Basis for processing special category data: Explicit consent, provided at the point of registration and verification.

5. Data Sharing

5.1 Within Our Organisation

Only authorised team members of UKMC Group Ltd access your data for legitimate business purposes. All staff are bound by confidentiality obligations. Membership verification data is accessible only to staff directly responsible for the verification process.

5.2 Third-Party Processors

We use the following carefully selected processors:

• Google Analytics (GA4) — website analytics. Only active after consent.
• GoDaddy Email Marketing — email communications and membership update delivery to consented subscribers.

All processors operate under data processing agreements ensuring full UK GDPR compliance.

5.3 Legal Requirements

We may disclose your personal data where required to do so by law, court order or regulatory authority. Given the nature of the UKMC Lounges operation, we may be required in certain circumstances to disclose membership or verification data to law enforcement or regulatory authorities. We will only do so where strictly required by applicable law.

6. Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate or incomplete information
• Erasure — request deletion of your personal data, subject to any legal obligations we may have to retain it
• Restrict Processing — temporarily suspend how we use your data
• Data Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw Consent — withdraw consent to email marketing at any time using the unsubscribe link in any email, or by contacting us directly
• Withdraw Consent to Verification — withdraw consent to the processing of your health data at any time, which will result in the cancellation of your membership application or membership

To exercise any of your rights contact: info@ukmcgroup.co.uk

We will respond within one calendar month.

7. Data Security

We protect your personal data using:

• SSL/TLS encryption for all data transmission
• Secure GDPR-compliant hosting infrastructure
• Strict access controls limiting who can view membership and verification data
• Secure storage of prescription and identification documents
• Regular security monitoring and updates

Prescription and identification documents provided during the verification process are stored with additional access restrictions and are accessible only to authorised staff responsible for membership verification.

8. Data Retention Summary

9. International Transfers

Some data may be processed outside the UK by our third-party processors. EU/EEA transfers rely on adequacy decisions. All other transfers use standard contractual clauses. We assess all international transfers before they take place.

10. Cookies

Essential Cookies are required for the Website to function correctly. These are always active and do not require your consent.

Analytics Cookies are used to understand how visitors engage with the Website via Google Analytics (GA4). These are only placed after you explicitly accept via the cookie consent banner on your first visit.

You may manage your cookie preferences at any time by adjusting your browser settings or contacting us directly.

To opt out of Google Analytics tracking visit: tools.google.com/dlpage/gaoptout

11. Children's Privacy

UKMC Lounges membership is strictly restricted to individuals aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we discover such data has been collected it will be deleted immediately and the associated membership application will be cancelled.

12. Complaints

If you are unhappy with how we handle your personal data please contact us first at info@ukmcgroup.co.uk. Simon Jones, Head of Membership, will ensure your concern is directed to the appropriate person and responded to promptly.

If unresolved you may contact the Information Commissioner's Office:

13. Changes to This Policy

We will notify registered members of significant changes by email. The Last Updated date at the top of this page always reflects the most recent revision. Continued use of the Website after changes constitutes acceptance of the updated policy.