At New York Cannabis Card, your privacy is our priority. This Privacy Policy explains how we collect, use, protect, and share your personal and medical information when you visit our website, schedule an appointment, or obtain a New York medical marijuana card certification through our services.
We comply with the Health Insurance Portability and Accountability Act (HIPAA) and all applicable New York State Office of Cannabis Management (OCM) regulations.
1. Information We Collect
When you use our website or services, we may collect:
- Personal Information: Name, date of birth, address, phone number, and email.
- Government Identification: New York driver’s license, state ID, or other proof of residency for OCM verification.
- Medical Information: Health history, qualifying condition details, physician notes, and prescriptions.
- Payment Information: Billing address and payment card details (processed securely by third-party providers; we do not store full card numbers).
- Technical Data: IP address, browser type, device information, and site usage activity.
2. How We Use Your Information
We use your information to:
- Provide medical marijuana evaluations and physician certifications.
- Register or renew your certification with the New York Office of Cannabis Management (OCM).
- Communicate with you regarding appointments, reminders, and updates.
- Process secure billing and payments.
- Improve our website and enhance patient experience.
- Ensure HIPAA compliance and meet New York medical record-keeping requirements.
3. HIPAA Compliance
As a healthcare provider, we follow HIPAA to protect your Protected Health Information (PHI):
- All PHI is encrypted and stored in HIPAA-compliant systems.
- PHI is only shared with your consent or when required by law.
- Only authorized medical professionals may access your medical data.
- Patients may request copies of their medical records, request corrections, or restrict disclosures.
4. How We Share Your Information
We may share your data only when necessary:
- With Your Consent: To submit your certification to the New York OCM or assist with dispensary access.
- With State Authorities: As required by New York medical cannabis regulations.
- With Trusted Providers: Telehealth platforms, secure EHR systems, and payment processors bound by confidentiality.
- Legal Obligations: To comply with court orders, subpoenas, or regulatory requirements.
- For Safety & Security: To prevent fraud, misuse, or threats to patient/public health.
5. Data Security
New York Cannabis Card safeguards your information by:
- Using SSL encryption on all web traffic.
- Storing PHI in HIPAA-compliant electronic health record (EHR) systems.
- Restricting staff access to patient data.
- Conducting routine audits and security monitoring.
6. Your Rights as a New York Cannabis Patient
You have the right to:
- Request copies of your medical records.
- Request corrections to your PHI if inaccurate.
- Place restrictions on certain disclosures of your PHI.
- Revoke consent for specific data uses (where legally permitted).
- Receive a full record of disclosures made about your PHI.
7. Cookies & Website Tracking
- Our website may use cookies to improve functionality and user experience.
- Analytics tools may collect non-identifiable data, including IP addresses and browsing activity.
- You can disable cookies in your browser, but certain features may not work properly.
8. Third-Party Links
Our website may include links to external sites. We are not responsible for the content, security, or privacy practices of third-party websites.
9. Data Retention
- Medical records are retained for the period required by New York law (minimum 6 years).
- After the retention period, records are securely deleted or destroyed.
10. Updates to This Privacy Policy
We may revise this Privacy Policy to reflect changes in laws, regulations, or business practices.
11. Contact Us
For questions or concerns about this Privacy Policy, please contact: