At Pennsylvania Cannabis Card, your privacy and confidentiality are our top priorities. This Privacy Policy explains how we collect, use, safeguard, and share your personal and medical information when you use our website, schedule an appointment, or obtain your Pennsylvania medical marijuana card certification through our services.
We strictly comply with the Health Insurance Portability and Accountability Act (HIPAA) and the Pennsylvania Medical Marijuana Act (Act 16) to protect your Protected Health Information (PHI).
1. Information We Collect
When you visit our website or use our services, we may collect:
- Personal Identification: Full name, date of birth, phone number, email address, and residential address.
- Government Identification: Pennsylvania driver’s license or state-issued ID for Department of Health (DOH) verification.
- Medical Information: Health history, qualifying condition documentation, physician notes, prescriptions, and related records.
- Payment Information: Billing details and payment card information (processed securely by third-party providers; we do not store full card numbers).
- Technical Information: IP address, browser type, device details, and activity on our website.
2. How We Use Your Information
We use your information to:
- Provide medical marijuana evaluations and certifications.
- Register or renew your certification with the Pennsylvania Medical Marijuana Program.
- Process payments securely and issue invoices.
- Send appointment reminders, confirmations, and important service updates.
- Improve our website functionality and patient experience.
- Comply with HIPAA and Pennsylvania’s medical record-keeping requirements.
3. HIPAA Compliance
As a healthcare provider, Pennsylvania Cannabis Card follows all HIPAA regulations to safeguard your PHI:
- All PHI is encrypted and stored in secure, HIPAA-compliant systems.
- PHI is only shared with your consent or as required by law.
- Access is restricted to licensed and authorized medical staff.
- You may request copies of your records, corrections to inaccurate information, or restrictions on disclosures.
4. How We Share Your Information
We may share your information in limited circumstances:
- With Your Consent: To certify you with the PA Medical Marijuana Program or connect you with dispensaries.
- With the Pennsylvania DOH: As required by state law for patient verification.
- With Service Providers: HIPAA-compliant telehealth platforms, EHR systems, and payment processors.
- As Required by Law: In response to court orders, subpoenas, or regulatory obligations.
- For Safety: To prevent fraud, misuse, or threats to patient/public safety.
5. Data Security
We implement strict safeguards to protect your data:
- SSL encryption for all website traffic.
- HIPAA-compliant servers and storage.
- Restricted staff access to medical records.
- Regular audits and monitoring to prevent unauthorized access.
6. Your Rights as a Pennsylvania MMJ Patient
Under HIPAA and Pennsylvania law, you have the right to:
- Request and receive copies of your medical records.
- Request corrections to inaccurate or incomplete information.
- Restrict certain uses or disclosures of your PHI.
- Revoke consent for certain types of processing.
- Receive a record of disclosures related to your PHI.
7. Cookies & Website Tracking
- Our website may use cookies to improve functionality and personalize your experience.
- Analytics tools may collect anonymous data such as IP addresses and browsing behavior.
- You may disable cookies in your browser, but some features may not function properly.
8. Third-Party Links
Our website may link to third-party websites. We are not responsible for their privacy policies, content, or security practices.
9. Data Retention
- Medical records are retained as required under Pennsylvania law (minimum of 7 years).
- When records are no longer required, they are securely destroyed.
10. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in laws, regulations, or business practices.
11. Contact Us
or questions or concerns about this Privacy Policy, contact us:
Pennsylvania Cannabis Card
Email: contact@pennsylvaniacannabiscard.com