Minnesota Cannabis Card is committed to safeguarding your privacy and protecting your personal and medical information. This Privacy Policy outlines how we collect, use, disclose, and secure your information in connection with our medical cannabis evaluation services, state certification support, and website.
1. Information We Collect
When you use our services, we may collect the following information:
- Personal Information: Full name, date of birth, mailing address, phone number, and email.
- Government Identification: Driver’s license, state ID, or other government-issued identification to verify eligibility under the Minnesota Medical Cannabis Program (MMCP).
- Medical Information: Health history, diagnoses, physician notes, prescriptions, and information related to your qualifying medical condition(s).
- Payment Information: Billing details, credit/debit card data (processed securely via third-party payment providers — we do not store complete payment card numbers).
- Technical Information: IP address, browser type, device identifiers, and website activity data.
2. How We Use Your Information
Your information is used for:
- Conducting medical marijuana evaluations and certifications.
- Registering or renewing your certification with the Minnesota Medical Cannabis Program (MMCP).
- Submitting required physician certifications to the state registry.
- Communicating with you about appointments, reminders, and service updates.
- Processing payments and managing billing records.
- Improving our website, telehealth systems, and patient experience.
- Complying with HIPAA and Minnesota medical record-keeping laws.
3. HIPAA Compliance
We follow the Health Insurance Portability and Accountability Act (HIPAA) and Minnesota privacy laws to safeguard your Protected Health Information (PHI):
- Your PHI is encrypted and stored securely.
- PHI is only disclosed with your written consent, or when required by law.
- Access to your records is limited to authorized staff and providers.
- You have the right to request a copy of your medical records, request corrections, or place restrictions on disclosures.
4. How We Share Your Information
We only disclose your information when necessary:
- With Your Authorization: To submit your certification to the Minnesota Medical Cannabis Program or communicate with your chosen cannabis dispensary.
- With State Authorities: As required to comply with Minnesota Department of Health (MDH) medical cannabis regulations.
- With Service Providers: Telehealth platforms, secure data storage providers, and payment processors under strict confidentiality agreements.
- For Legal Requirements: In response to court orders, subpoenas, or regulatory compliance.
- For Safety & Security: To detect, prevent, or address fraud, misuse, or threats to patient/public safety.
We never sell or rent your personal information to advertisers or third parties.
5. Data Security
We protect your data by:
- Using HIPAA-compliant platforms for telehealth and record storage.
- Employing SSL (Secure Socket Layer) encryption for online data transmission.
- Restricting access to PHI based on employee roles.
- Conducting regular audits and monitoring for unauthorized access.
6. Your Rights
As a patient, you have the right to:
- Request and obtain copies of your medical records.
- Request corrections to inaccurate or incomplete information.
- Restrict certain disclosures of your PHI.
- Receive a record of disclosures made.
- Revoke prior consent for certain uses of your data (subject to legal requirements).
7. Cookies & Website Tracking
- We may use cookies and website analytics tools to monitor site performance and improve user experience.
- Data collected (such as IP addresses or browser type) is non-identifiable.
- You may disable cookies in your browser settings, but some features may not function as intended.
8. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of these third-party sites.
9. Data Retention
- We retain medical records for the period required by Minnesota law (at least 7 years).
- When records are no longer required, they are securely deleted or destroyed.
10. Changes to This Privacy Policy
We may revise this Privacy Policy as laws, regulations, or business practices change.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact:contact@minnesotacannabiscard.com