Privacy policy
This policy describes what CannaEvidence actually does with personal data today: no more, no less. This policy is reviewed as the directory evolves and updated accordingly.
Who is responsible (controller)
The controller for personal data processed on this site is Pink Elephant, Unipessoal Lda, Portugal, Edifício Amoreiras Square, Rua Carlos Alberto da Mota Pinto, no. 17, second floor, 1070-313 Lisboa, Portugal (NIPC 519056582). Data-protection contact: hello@cannaevidence.com. Company details are on the imprint page.
The self-check and the consultation document store nothing
The self-check and the consultation document run entirely in your browser. Your answers are held in the page's memory and, so that a reload does not lose a long form, in your browser's session storage until the tab is closed; they are never sent to us or to anyone else. No account is required and no identifier is attached to your answers. The document you create is printed or copied by you; we never receive it.
Writing to us
There is no contact form. The provider page prepares an e-mail in your own e-mail program; nothing is stored on this site. If you write to hello@cannaevidence.com, we process your e-mail address and your message to answer you (Art. 6(1)(b) or (f) GDPR) and keep the correspondence no longer than the matter and possible follow-up corrections require.
Cookies and analytics
This site sets no cookies. We use Plausible, a cookie-less analytics service, to count aggregate, anonymous usage events (page views and feature usage); it collects no personal identifiers and stores nothing in your browser. If this changes, this policy will be updated first and any non-essential technology will ask for consent before it runs.
Maps on some pages are drawn with the Leaflet library served from our own server; the map tiles are loaded from the OpenStreetMap Foundation (tile.openstreetmap.org), which then receives your IP address with the tile request (legitimate interest, Art. 6(1)(f) GDPR). A map is loaded only when it is shown; every entry is also available as a list.
Data about listed professionals
Provider listings contain professional, not private, data about clinics, telemedicine platforms, pharmacies and, in some cases, named prescribers: name, professional address, professional contact details, registry entries, published fees and terms of service. This data is sourced from public national registries and the providers' own public pages, as described in our methodology. We process it on the basis of legitimate interest (Art. 6(1)(f) GDPR) in operating a transparent, registry-verified public directory of licensed healthcare providers.
If you are a listed professional, you have the right to object (Art. 21 GDPR) to this processing, and the right to have inaccurate data corrected. Use the contact above or the provider page; corrections are reviewed within 5 working days.
Hosting and server logs
The site is served as static pages by our hosting provider (Vercel Inc.), which may process technical connection data (such as IP addresses) in short-lived server logs for security and delivery. Details of the production hosting setup and any processing agreement: hello@cannaevidence.com.
Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to lodge a complaint with a supervisory authority: in Portugal, the CNPD (Comissão Nacional de Proteção de Dados); readers in the United Kingdom may also turn to the Information Commissioner's Office.
Medical disclaimer
We are not a healthcare provider: content, listings and the self-check are for information only and are not medical advice, diagnosis or treatment. We do not collect health data from visitors; please do not send us details of your condition or treatment by e-mail either.