Subject Access Request Exposes Staff Hostility
Following my December 2025 discharge and regulatory complaints, I submitted a Subject Access Request. The response arrived on the 30th day deadline in paper format only, despite source data being digital - a clear GDPR violation requiring electronic format. The bundle was heavily redacted throughout, with no call logs, no emails to third parties about prescription errors, and no system audit logs provided.
This response appears to be damage limitation through obstruction rather than genuine compliance.
Context on “Intensity”:
Earlier in November, the clinic had emailed patients advising us to submit early January prescriptions as soon as possible, having previously explained that prescriptions could be post-dated to ensure stock allocation. My preferred flower strain was low on stock. The “intensity” staff complained about was me following their own strong advice - advice they’d sent to all patients. This occurred during the same period I was trying to verify which prescriptions were actually mine following their admitted data corruption.
What little remained visible was hostility from the Executive Assistant:
18 November 2025 - Executive Assistant: “I think Lee is trying to give me a nervous breakdown hahaha…I cant cope with him hahaha Gotta laugh or he’ll break me lol” (Response to legitimate prescription questions following the data corruption)
19 November 2025 - Executive Assistant: “**** - remember Lee- he’s my favourite 👀 👧 👀” followed by “Please do not mess this up! he’s on his way to give me a nervous breakdown haha”
19 November 2025 - Executive Assistant: “He’s pretty intense and has already rang specials to arrange their delivery over new year - you’ve got an appointment with him on the 11th December **** - *** said you’d discuss his anxiety 🤦🤦🤦” (Three facepalm emojis mocking mental health)
20 November 2025 - Executive Assistant: “He’s just likes to email every day about something different 🙄😴” (Routine prescription tracking following a month of chaos characterised as harassment)
21 November 2025 - Executive Assistant: “I’ve not answered Lee…Im not going to respond today if that’s ok as everytime I do he comes back with something else.” (Deliberate communication avoidance)
21 November 2025 - Executive Assistant: “there were a few from the beginning of November for lee that weren’t his - it was that big mix up with the portal that added things to his account.” (Direct admission of data corruption mixing patient prescription records)
Prospective patients should know how legitimate concerns about prescription system failures are received here.
Update - 29 January 2026:
This morning, Cannabis Clinic Cardiff attempted to have my Trustpilot review removed. Trustpilot investigated and confirmed there are no defamatory comments—the review remains published. The clinic has also closed its Google Maps account entirely to remove negative feedback, sacrificing half their total reviews in the process. Evidence of these reputation management efforts was inadvertently included in the SAR response itself.
Prospective patients should consider what this pattern of behaviour indicates about accountability and transparency.
Names redacted to comply with TP’s policies.








