THE SMALL PRINT
Privacy notice
We collect as little as we can. We don't use advertising or analytics cookies, and we don't sell your information. This notice explains what we do collect and why. Last updated 26 September 2026.
Who we are
The Ganja Club is published by AP Collective Ltd, a company registered in England and Wales (company number 17047232), based in Bradford, UK. AP Collective Ltd is the controller of the personal information described here. Contact us about anything in this notice at contact@apcollective.ltd.
The Ganja Club is for adults. Please don't send us anything if you are under 18.
The newsletter
If you subscribe to The TGC Briefing, we collect your email address and send it to Buttondown, which runs our mailing list. We use it only to send the newsletter. Our lawful basis is your consent, and you can unsubscribe from any email at any time. We keep your address until you unsubscribe or ask us to delete it.
Reader contributions in the Lounge
When you take the reader survey, report a clinic price change, ask a question, share a city tip or join the photo notebook waitlist, we store what you send so our editors can read it. Nothing you send is published automatically.
- What we store: your answers or message, the page you sent it from, the date and time, and an email address or name only if you choose to give one. The waitlist asks for an email address because we need it to tell you when the feature opens.
- Health information: the survey lets you tell us, for example, whether you have a prescription and broadly what it is for. This is health information, which UK law treats as special category data. We process it only with your explicit consent, given when you tick the consent box, and every health question is optional.
- How we publish: survey results are published only as combined figures, and we don't report on any group smaller than ten people. Questions and tips are credited by name only if you give a name for crediting. We may edit contributions for length, clarity and privacy.
- Lawful basis: your consent. You can withdraw it at any time by emailing us. This won't affect anything already published in combined, anonymous form.
- How long we keep it: contributions are deleted automatically within 13 months of being sent. Waitlist addresses are kept until the feature opens and we have emailed you, or until you ask us to remove them.
Please don't send prescriptions, medical records, patient numbers, product labels or invoices. We don't need them, and if they arrive we delete them.
"Was this useful?" buttons
If you press Yes or No on an article, we record your answer, the page and the time so we know what readers find useful. We don't record who you are.
Spam protection and security
To stop automated spam and repeated submissions, our form handler creates a one-way, salted code from your IP address that changes every day. We store that code with your submission, not your IP address. Forms may also use Cloudflare Turnstile, a spam check run by Cloudflare. Our lawful basis for this is our legitimate interest in keeping the site secure and usable.
Hosting and server logs
The site is hosted by Cloudflare, which processes technical information such as IP addresses to deliver pages and protect the site from attack. Reader contributions are stored in Cloudflare's database service on our behalf.
Who processes information for us
- Cloudflare: website hosting, security, spam checks and storage of reader contributions.
- Buttondown: newsletter subscriptions and sending.
These providers may process information outside the UK. Where they do, we rely on the safeguards UK law requires for international transfers.
Links to other sites
Some links, including those in our affiliate product edit, take you to other businesses' websites. Once you leave our site, their privacy policies and cookies apply, not ours. See our commercial transparency page for how affiliate links work.
Cookies
We don't set advertising or analytics cookies. If we ever add analytics, we will update this notice first.
Your rights
You can ask us for a copy of your personal information, or ask us to correct it, delete it, restrict how we use it, or object to how we use it. You can withdraw consent at any time. Email contact@apcollective.ltd. We will reply within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first.