Privacy Policy (rebuild — NOT launch ready, review only)
Hi. I can answer general questions about the $50 Massachusetts certification service, phone-based appointments, payment, hours, and renewals. For anything else, leave your name and phone number or email and we’ll follow up.
Privacy policy
[PLACEHOLDER: this page needs a HIPAA-compliant Notice of Privacy Practices covering how medical intake information (history, conditions, medications, cannabis experience) is collected, used, stored, and shared; patient rights under HIPAA; breach-notification procedures; and the identity of the covered entity/business associates involved (e.g., the telemedicine platform, scheduling/payment processor, and the Jotform intake form). Please have this reviewed by counsel before publishing.]
Website address
Our website address is: https://medicalcardsma.com.
Medical intake information
Before your appointment, you’ll complete a full medical intake form (via Jotform) covering your medical history, current conditions, relevant medications, and prior cannabis experience. [PLACEHOLDER: describe where this information is stored, who can access it, how long it is retained, and confirm the intake form meets HIPAA requirements.]
Same-day appointment requests
The Reserve a Same-Day Appointment page collects your name, email, phone, date of birth, the last 4 digits of your Social Security number, and your desired timeframe, before you reserve a time slot. The last 4 digits of your Social Security number are collected for identity verification purposes required to complete your certification. [PLACEHOLDER: confirm how this field is stored and protected, and how long it is retained — this is more sensitive than any other field collected on the site and should be reviewed by counsel alongside the rest of this page.]
Cookies & analytics
This site uses standard WordPress cookies for comments and login functionality, and may use analytics to understand site usage (page views, button clicks). No medical or intake information is sent to marketing or analytics tools.
Embedded content
Pages on this site may include embedded content (for example, the scheduling/payment system, the medical intake form, or the certification assistant). Embedded content from other websites behaves in the exact same way as if a visitor had gone directly to that other website, and that website may collect its own data as described in its own privacy policy.
Who we share data with
[PLACEHOLDER: name the scheduling/payment vendor, the telemedicine platform, the Jotform intake form, and any business-associate agreements in place.]
Your rights
[PLACEHOLDER: patient rights to access, amend, or request restrictions on their information, and how to exercise them.]
Contact
For privacy questions, message us through the assistant in the bottom right corner of the site with your phone number or email, and we’ll follow up.