Maryland MMJ Card Doctor values your privacy and is committed to protecting your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our medical marijuana evaluation services, telehealth consultations, and website.
1. Information We Collect
To provide our services and comply with Maryland law, we may collect:
- Personal Information: Name, date of birth, address, phone number, email.
- Government Identification: State-issued ID, driver’s license, or passport for verification with the Maryland Medical Cannabis Commission (MMCC).
- Medical Information: Health history, symptoms, physician notes, diagnoses, prior treatments, and prescriptions.
- Payment Information: Billing address, payment details (processed securely by third-party providers; we do not store full credit card numbers).
- Technical Data: IP address, browser type, device type, and usage patterns on our website.
2. How We Use Your Information
We use your information for purposes such as:
- Conducting medical evaluations and providing recommendations.
- Registering or renewing your certification with the Maryland Cannabis Administration (MCA), formerly MMCC.
- Submitting physician certifications to the state registry.
- Processing payments and billing.
- Sending appointment confirmations, reminders, and service updates.
- Improving our services and website functionality.
- Complying with HIPAA and Maryland medical record-keeping requirements.
3. HIPAA Compliance
As a medical service provider, we comply with the Health Insurance Portability and Accountability Act (HIPAA). This means:
- Your Protected Health Information (PHI) is kept confidential and secure.
- We will not share PHI without your explicit consent, except when required by law.
- All PHI is encrypted and stored securely.
- You have the right to request access to, amend, or restrict disclosure of your PHI.
4. How We Share Your Information
We only share your information under limited circumstances:
- With Your Consent: When you authorize us to submit your certification to the MCA or a chosen dispensary.
- With Licensed Dispensaries: As required to fulfill your medical cannabis certification in Maryland.
- With Service Providers: Secure third-party vendors (telehealth platforms, payment processors) bound by confidentiality agreements.
- As Required by Law: To comply with Maryland medical regulations, legal processes, or court orders.
- For Security & Safety: To detect or prevent fraud, misuse, or threats to patient or public safety.
We do not sell or rent your personal information to third parties.
5. Data Security
We take steps to protect your information:
- Secure HIPAA-compliant platforms for telehealth and medical records.
- Encrypted storage and transmission of PHI.
- Restricted employee access to patient data.
- Routine audits and monitoring to maintain data integrity.
6. Your Rights
Under HIPAA and Maryland law, you have the right to:
- Request copies of your medical records.
- Request corrections to inaccurate or incomplete information.
- Restrict certain uses or disclosures of your PHI.
- Receive an accounting of disclosures made.
- Withdraw consent for certain uses (subject to legal requirements).
7. Cookies & Website Data
- We may use cookies and analytics tools to understand website usage and improve services.
- These collect non-identifiable data (e.g., IP addresses, device type).
- You may disable cookies in your browser settings, but some features may not work properly.
8. Third-Party Links
Our website may link to external resources or services. We are not responsible for the privacy practices of third-party websites.
9. Data Retention
- We retain medical records as required by Maryland law (minimum 6 years after the last patient encounter).
- Records no longer required are securely destroyed.
10. Changes to This Policy
We may update this Privacy Policy from time to time.
11. Contact Us
If you have questions about this Privacy Policy, your rights, or our privacy practices, please contact: contact@marylandmmjcarddoctor.com