Massachusetts Cannabis Card respects your privacy and is committed to protecting your personal and medical information. This Privacy Policy explains how we collect, use, store, and disclose your data when you use our services, including telehealth medical evaluations, medical cannabis certifications, and our website.
1. Information We Collect
When you use our services, we may collect the following types of information:\
- Personal Identification: Name, date of birth, address, phone number, email.
- Government Identification: State-issued ID or driver’s license for identity verification with the Massachusetts Cannabis Control Commission (CCC).
- Medical Information: Health history, symptoms, diagnoses, prior treatments, prescriptions, and physician notes.
- Payment Information: Billing address, credit/debit card information (processed through secure third-party providers; we do not store full payment card details).
- Technical Information: IP address, browser type, device identifiers, and site usage activity.
2. How We Use Your Information
We use collected information for purposes including:
- Conducting medical marijuana evaluations and certifications.
- Registering or renewing your medical marijuana certification with the Massachusetts CCC.
- Submitting required documentation to the state registry.
- Processing payments and billing.
- Sending appointment reminders, confirmations, and service updates.
- Improving our website and patient experience.
- Complying with HIPAA and Massachusetts medical record-keeping laws.
3. HIPAA Compliance
As a healthcare provider, we comply with the Health Insurance Portability and Accountability Act (HIPAA). This means:
- Your Protected Health Information (PHI) is stored securely and kept confidential.
- We do not share PHI without your explicit consent, except as required by law.
- All PHI is transmitted and stored using encrypted systems.
- You have the right to access, amend, and restrict disclosure of your medical records.
4. How We Share Your Information
We only share your data in limited circumstances:
- With Your Consent: When authorizing us to submit your certification to the CCC or communicate with your chosen dispensary.
- With State Authorities: As required to comply with Massachusetts medical cannabis laws and CCC requirements.
- With Service Providers: Secure third-party vendors (e.g., telehealth platforms, payment processors, record storage providers) under strict confidentiality agreements.
- Legal Obligations: To comply with court orders, subpoenas, or applicable laws.
- For Security: To prevent fraud, misuse, or protect public health and safety.
We do not sell, trade, or rent your personal information to marketers or outside companies.
5. Data Security
We implement security safeguards including:
- HIPAA-compliant telehealth and record-keeping platforms.
- Secure Sockets Layer (SSL) encryption on our website.
- Limited employee access to PHI based on job role.
- Regular system audits to maintain data integrity.
6. Your Rights
As a patient under HIPAA and Massachusetts law, you have the right to:
- Request and obtain copies of your medical records.
- Request corrections or updates to your information.
- Restrict certain disclosures of your PHI.
- Receive an accounting of disclosures made.
- Withdraw consent for non-essential uses of your data (subject to legal/medical requirements).
7. Cookies & Website Tracking
- We may use cookies and analytics to enhance website functionality and analyze traffic.
- Data collected is non-identifiable (IP address, browser type, device).
- You may disable cookies in your browser settings, but some site features may not function properly.
8. Third-Party Links
Our website may include links to external websites. We are not responsible for the privacy practices or content of these third-party sites.
9. Data Retention
- We retain medical records for the minimum period required by Massachusetts law (7 years).
- After this period, data is securely deleted or destroyed.
10. Changes to This Policy
We may update this Privacy Policy periodically.
11. Contact Us
For questions or concerns about this Privacy Policy, or to exercise your rights, please contact: contact@massachusettscannabiscard.com