Who we are

CannaScript Ltd ("CannaScript", "we", "us", "our") is a company registered in England and Wales (Company No. 17199513). Our registered office is at 195-197 Wood Street, London, E17 3NU.

We operate the CannaScript platform at cannascript.co.uk — a clinical intelligence service for UK specialist cannabis prescribers. Jordan Cooper is the director and data controller for purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about how we handle your data, please contact us at hello@cannascript.co.uk.

What data we collect and why

Prescriber accounts

When you register as a prescriber, we collect: your full name, email address, GMC registration number, clinic name, and the date you registered. This is necessary to verify your eligibility to use the AI Matcher and to provide the service under our contract with you.

Prescription logs

When you log a prescription via the platform, we store: the product prescribed, the clinical indication, an anonymised patient reference (assigned by you — we never collect patient names, dates of birth, NHS numbers, or any directly identifying patient data), clinical notes (if entered), outcome, and date. These records support your CPD record-keeping and clinic analytics.

Patient community

If you use the patient community, we collect the username you choose, posts you publish, comments, and likes. We do not require your real name for community participation. Patient prescription records are not stored — only anonymised verification status.

Analytics

We use Netlify Analytics for basic traffic statistics (page views, visitor counts). Netlify Analytics is privacy-friendly: it does not use cookies, does not track individuals across sessions, and does not share data with third-party advertising networks.

Communications

If you contact us by email, we retain your email and message content in order to respond to you. We do not add you to a marketing list without explicit consent.

Legal basis for processing

Third-party processors

We use the following sub-processors to operate the platform. All are bound by appropriate data processing agreements.

Data retention

Your rights under UK GDPR

You have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data where there is no legal obligation to retain it
• Portability — receive your prescription log data in a machine-readable format
• Restriction — ask us to restrict processing while a dispute is resolved
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any right, email hello@cannascript.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

CannaScript uses only essential session cookies to maintain your login state. We do not use advertising cookies, tracking pixels, or third-party marketing cookies. See our Cookie Policy for full details.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered prescribers. The "last updated" date at the top of this page will always reflect the current version.

1. Acceptance of terms

By accessing or using the CannaScript platform at cannascript.co.uk, you agree to be bound by these Terms and Conditions. If you do not agree, please do not use the platform. These terms form a legally binding agreement between you and CannaScript Ltd (Company No. 17199513), registered in England and Wales.

2. Description of service

CannaScript is the clinical intelligence layer for UK specialist medical cannabis prescribers. The platform includes:

• An AI-powered CBPM (Cannabis-Based Product for Medicinal Use) Matcher that suggests products based on clinical criteria entered by the prescriber
• A database of licensed UK CBPMs and pharmacies
• A prescribing log and CPD export tool
• A patient community platform

3. User eligibility

Access to the AI Matcher, prescribing database, and CPD tools is restricted to:

• Doctors registered with the General Medical Council (GMC) with a specialist interest in cannabinoid medicine
• Other registered healthcare professionals with appropriate clinical authority to prescribe CBPMs under UK law

By registering as a prescriber, you confirm that you hold a current, unrestricted licence to practise and that you are legally authorised to prescribe Schedule 2 controlled drugs in the UK. You must notify us immediately if your registration status changes.

The patient community is open to adult UK residents who are medical cannabis patients or caregivers.

4. Prescriber responsibilities

By using the AI Matcher, you acknowledge and agree that:

• You retain full clinical responsibility for every prescribing decision
• AI Matcher outputs are suggestions only — not diagnoses, prescriptions, or clinical recommendations
• You will apply your own specialist clinical judgement before prescribing any CBPM
• You will not solely rely on CannaScript output without independent clinical assessment
• Product availability and dosing information may change; you will verify with the relevant pharmacy before prescribing
• You comply with all applicable GMC guidance, NHS England frameworks, and NICE guidance on cannabis-based medicines

5. Acceptable use

You may not use CannaScript to:

• Circumvent or bypass prescribing regulations or Schedule 2 controlled drug requirements
• Enter real patient names, NHS numbers, or directly identifying patient data into the platform
• Reproduce, redistribute, or sell CannaScript content, CBPM data, or AI outputs without written permission
• Attempt to reverse-engineer, scrape, or extract data from the platform by automated means
• Post unlawful, abusive, or misleading content in the patient community
• Impersonate a healthcare professional if you are not one

We reserve the right to suspend or terminate access for breach of these terms without notice or refund.

6. Subscription and payment

CannaScript is offered on the following subscription plans:

Subscriptions are billed monthly in advance. You may cancel at any time; cancellation takes effect at the end of the current billing period. No refunds are provided for partial months. We reserve the right to change pricing with 30 days' written notice to current subscribers.

7. Intellectual property

All content, design, code, AI models, and CBPM database content on CannaScript is the property of CannaScript Ltd or its licensors and is protected by UK and international intellectual property law. Nothing in these terms grants you any licence to reproduce or distribute CannaScript content beyond personal use within the platform.

You retain ownership of any clinical notes or data you enter. By entering data, you grant CannaScript Ltd a limited licence to store and process it solely for the purpose of providing the service.

8. Limitation of liability

To the maximum extent permitted by applicable law:

• CannaScript Ltd shall not be liable for any clinical outcome, adverse event, or patient harm arising from use of the platform
• Our total aggregate liability to you shall not exceed the subscription fees paid by you in the three months preceding the claim
• We exclude all liability for indirect, consequential, or incidental loss

Nothing in these terms excludes liability for death or personal injury caused by our negligence, fraud, or any other liability that cannot be excluded by law.

9. Governing law

These Terms and Conditions are governed by the laws of England and Wales. Any dispute arising from these terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

10. Changes to these terms

We may update these terms from time to time. We will give registered users at least 14 days' notice of material changes by email. Continued use of the platform after the effective date constitutes acceptance of the revised terms.

Questions? Contact us at hello@cannascript.co.uk.

CannaScript is not a medical device

CannaScript is a clinical intelligence information platform. It is not registered with the Medicines and Healthcare products Regulatory Agency (MHRA) as Software as a Medical Device (SaMD) under the Medical Devices Regulations 2002 (as amended).

The platform does not diagnose conditions, does not constitute a prescription, and does not replace the clinical assessment of a qualified specialist. All outputs from the AI Matcher are informational suggestions only.

Clinical responsibility

The prescribing clinician retains full and sole clinical responsibility for every prescribing decision made in connection with the use of CannaScript. CannaScript Ltd, its directors, employees, and agents accept no liability for clinical outcomes arising from reliance on platform outputs.

Prescribers must:

• Apply independent specialist clinical judgement to every case
• Comply with GMC Good Medical Practice guidelines
• Follow current NHS England and NICE frameworks for cannabis-based medicines where applicable
• Ensure patients are fully informed and have given valid consent
• Monitor patients appropriately and adjust treatment as clinically indicated

Terpene profiles and strain data

Terpene profiles displayed on CannaScript are estimated from strain genetics and producer specifications. They are not derived from Certificate of Analysis (COA) laboratory testing unless explicitly stated for a specific batch.

Terpene content in cannabis-based medicinal products varies between batches. Clinicians should not rely on terpene data as precise pharmacological specifications.

Entourage effect

References to the "entourage effect" on CannaScript reflect preclinical pharmacological research and emerging observational data. The entourage effect — the proposed synergistic interaction between cannabinoids, terpenes, and other phytochemicals — has not been demonstrated in rigorous human randomised controlled trials as of the date of this disclaimer.

Not a substitute for training

CannaScript does not replace formal clinical training in cannabinoid medicine. Prescribers are strongly encouraged to complete recognised CPD programmes in medical cannabis before prescribing CBPMs.

Relevant training is available from organisations including the Medical Cannabis Clinicians Society (MCCS), the Faculty of Pain Medicine, and other accredited providers.

Adverse event reporting

Any suspected adverse reactions to cannabis-based medicinal products should be reported via the MHRA Yellow Card scheme at yellowcard.mhra.gov.uk. Healthcare professionals are encouraged to report all suspected adverse reactions, including those associated with unlicensed products.

Product availability and accuracy

CannaScript endeavours to maintain accurate CBPM data, pharmacy availability, and pricing information. However, this information changes frequently. We do not guarantee the accuracy, completeness, or currency of any product or pharmacy data on the platform.

Always verify product availability and current specifications directly with the dispensing pharmacy before issuing a prescription.

What are cookies?

Cookies are small text files placed on your device by websites you visit. They are used to remember preferences, maintain login sessions, and collect analytics data. Some cookies are essential for websites to function; others are used for tracking and advertising.

Cookies we use

What we do NOT use

• Advertising or retargeting cookies (e.g. Google Ads, Facebook Pixel)
• Cross-site tracking cookies
• Social media tracking pixels
• Third-party analytics that profile individual users (e.g. Google Analytics, Hotjar)
• A/B testing or personalisation cookies

Local storage

CannaScript uses browser localStorage to store your session preferences and login state on your device. This data is stored locally and is not transmitted to third parties. You can clear localStorage at any time through your browser settings.

How to disable cookies

You can control and delete cookies through your browser settings. Please note that disabling session cookies will prevent you from logging in to CannaScript.

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions

Changes to this policy

If we change our approach to cookies in the future, we will update this page and notify registered users by email if those changes are material.

Questions? Contact us at hello@cannascript.co.uk.

Send us a message

Whether you have a clinical question, a technical issue, a press enquiry, or want to discuss a partnership — we'd love to hear from you.

Company details

Response times

We aim to respond to all enquiries within 24 hours on business days (Monday–Friday, excluding UK public holidays).

For GDPR or data rights requests, we will acknowledge your request within 72 hours and respond fully within one calendar month, in accordance with UK GDPR requirements.

Useful links

• Privacy Policy — how we handle your data
• Terms & Conditions — your agreement with CannaScript
• Medical Disclaimer — important clinical limitations

Is CannaScript a medical device?

CannaScript is not a medical device and does not require MHRA Software as a Medical Device (SaMD) registration.

The MHRA's guidance on SaMD distinguishes between two categories of clinical software:

• Software that makes or drives clinical decisions autonomously — classified as a medical device
• Software that provides information to support a clinician in making their own decision — not a medical device

CannaScript falls firmly in the second category. The platform provides clinical information and decision support to licensed specialist prescribers. It does not diagnose, prescribe, or autonomously determine treatment. Every prescribing decision remains with the licensed specialist prescriber.

What safeguards are in place?

CannaScript is built with clinical safety as a first principle. The following safeguards are active on every use of the platform:

• Every AI recommendation is explicitly labelled "decision support only — does not replace clinical judgement"
• Terpene evidence caveat on every recommendation card: "Terpene rationale is based on preclinical pharmacology and emerging observational data. The entourage effect remains unproven in robust human RCTs."
• 41 psychiatric safety flags — hard stop on psychosis, bipolar disorder, schizophrenia, and 38 other contraindications. No recommendations are returned when a flagged condition is detected
• GDPR notice on every query — no patient-identifiable data stored; anonymised descriptions only
• No patient names or NHS numbers are processed at any point
• The prescriber retains full clinical responsibility for every prescribing decision
• The platform does not integrate with or replace any prescribing or electronic health record system

Legal opinion

CannaScript is seeking a formal legal opinion from a specialist healthcare regulatory solicitor confirming our SaMD positioning. This will be completed before we move beyond the trial and early access stage.

We will publish a summary of the outcome on this page when received.

Reporting clinical governance concerns

If you have a clinical governance concern about CannaScript, please contact us directly at hello@cannascript.co.uk. We take all clinical safety concerns seriously and will respond within 24 hours.

Adverse event reporting

CannaScript does not replace the statutory obligation of prescribers to report adverse events. Any suspected adverse reactions to cannabis-based medicinal products must be reported via the MHRA Yellow Card scheme at yellowcard.mhra.gov.uk.