Teesside Cannabis Club — Exhale Group Ltd
Last updated: September 2026 (revised)
Who We Are
Teesside Cannabis Club is operated by Exhale Group Ltd, a company registered in England and Wales.
- Company number: 14425770
- Registered address: 44 Norton Road, Stockton-On-Tees, Durham, United Kingdom, TS18 2BS
- Contact email: info@teessidecannabisclub.co.uk
- Website: www.teessidecannabisclub.co.uk
Exhale Group Ltd is the data controller for the personal information collected through this website and our membership processes.
What Information We Collect
Membership Applications
When you apply for membership, we collect:
- Full name and date of birth
- Email address and phone number
- Your answers to our pre-screening questions
- A copy of your photographic ID (such as a passport or driving licence)
- A copy of a proof of address document (such as a utility bill or bank statement)
- A selfie photograph for identity verification purposes
- Your IP address at the time of submission
- Your drawn signature as an electronic record of your agreement to our membership terms
- Whether you have ever been refused a medical cannabis prescription on mental health grounds or been advised by a healthcare professional that cannabis use may be harmful to your mental health (used solely for safeguarding purposes)
Members
Once membership is approved, we hold:
- Your membership record (name, date of birth, contact details, membership tier, join date, expiry date)
- A record of your membership card number
- Any notes or flags recorded by club staff in relation to your membership
- A log of key membership events (renewals, status changes)
Website Visitors
When you visit our website, we may collect:
- Cookies and analytics data — please see our Cookie Policy for full details
- Information you submit through contact forms
Why We Collect This Information and Our Legal Basis
| Purpose | Legal Basis |
|---|---|
| Verifying your identity and age (21+) before granting membership | Legitimate interests — operating a responsible private members club |
| Checking whether an applicant has previously had membership refused or revoked | Legitimate interests — safeguarding the club and its members |
| Maintaining an accurate membership register | Legitimate interests / contractual necessity |
| Communicating with you about your membership | Contractual necessity |
| Complying with our legal obligations | Legal obligation |
| Screening applicants against safeguarding criteria, including mental health contraindications | Legitimate interests — protecting the health and safety of members and staff |
| Analysing website usage (with your consent) | Consent |
We do not use your information for automated decision-making or profiling beyond the pre-screening process described above.
How Long We Keep Your Information
| Data | Retention Period |
|---|---|
| Declined or withdrawn applications | 12 months from the date of decision |
| Approved member records | For the duration of membership, plus 2 years after membership ends |
| ID documents, proof of address, and selfies | Same as above — securely deleted at the end of the retention period |
| Website analytics data | As per Google Analytics data retention settings (up to 14 months) |
We will securely delete your personal data at the end of the applicable retention period.
Who We Share Your Information With
We do not sell your personal data to any third party.
We may share your information with:
- Google Analytics — anonymised website usage data, only with your cookie consent
- Our hosting provider (One.com) — as the infrastructure on which the website and its data is stored
- Law enforcement or regulatory bodies — only if we are legally required to do so
We do not share your membership data or application data with any other organisation without your explicit consent.
Security
Your ID documents, proof of address, and selfie photographs are stored in a private, access-controlled area of our server. These files are not publicly accessible and can only be viewed by authorised club administrators.
All data is transmitted over encrypted HTTPS connections.
Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to our legal obligations)
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a portable format
- Object — object to processing based on legitimate interests
To exercise any of these rights, contact us at info@teessidecannabisclub.co.uk. We will respond within 30 days.
Cookies
We use cookies on this website. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy (managed via our cookie consent banner).
Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: www.ico.org.uk
- Helpline: 0303 123 1113
We would appreciate the opportunity to address your concern directly before you contact the ICO — please email us first at info@teessidecannabisclub.co.uk.
Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page will always reflect the most recent version. We will notify active members of any significant changes.
Exhale Group Ltd — Company No. 14425770 — Registered in England and Wales