Privacy Policy

Safety & Privacy Notice

At MedicalCardsMA, we take your privacy, data security, and medical confidentiality seriously. This Privacy Policy outlines how your Protected Health Information (PHI) and personal data are collected, protected, used, and safeguarded under federal and state law, including the Health Insurance Portability and Accountability Act (HIPAA).

Practice Identity & Clinical Leadership

MedicalCardsMA.com is a dedicated telemedicine certification practice operated by licensed Massachusetts healthcare providers. Our certification evaluations are conducted exclusively by licensed Massachusetts physicians and nurse practitioners.

HIPAA Compliance & Data Security

MedicalCardsMA follows HIPAA requirements for protecting health information. We maintain administrative, technical, and physical safeguards to protect the privacy and security of your Protected Health Information (PHI):

• End-to-End Encryption: All data transmitted to and from our website and intake forms is encrypted in transit using industry-standard SSL/TLS (HTTPS).
• Encrypted Data Storage: Your medical intake information, health history, contact details, and state registration identifiers are stored in secure, encrypted, HIPAA-compliant databases.
• Strict Access Control: Access to your medical intake records is strictly restricted to your assigned Massachusetts certifying clinician and authorized clinical administrative personnel.

Information We Collect & What Happens to It

When you schedule a $50 certification evaluation or renewal, we collect specific information necessary to provide clinical care and fulfill Massachusetts state registry requirements:

• Personal & Contact Details: Full name, email address, phone number, date of birth, and Massachusetts residential address.
• State Verification Identifiers: Last 4 digits of your Social Security number and date of birth, collected solely for mandatory identity verification required by the Massachusetts Cannabis Control Commission (CCC) Medical Use of Marijuana Program registry.
• Medical Intake History: Qualifying conditions, symptoms, relevant medical history, current medications, and prior experience with cannabis.

How your information is used: Your intake information is reviewed by your certifying clinician prior to your phone appointment to make an individual clinical assessment. If certification is approved, your clinical details and state registration data are submitted directly to the official Massachusetts Cannabis Control Commission (CCC) portal so your state medical card can be issued or renewed.

Zero Data Sales or Commercial Sharing

We never sell, rent, trade, or share your personal or medical information. Your data is never disclosed to cannabis dispensaries, commercial advertisers, marketers, insurance companies, or employers. Your medical certification status remains strictly confidential between you, your certifying clinician, and the Commonwealth of Massachusetts Medical Use of Marijuana Program.

Cookies & Website Analytics

Our website uses standard functional cookies required for site navigation and scheduling. Website analytics may measure general traffic (such as page views), but no medical intake data or PHI is ever passed to advertising or analytics scripts.

Your Rights Under HIPAA

As a patient, you have specific rights under HIPAA regarding your medical records, including:

• The right to request a copy of your medical intake and certification records.
• The right to request corrections to any inaccurate personal details in your record.
• The right to ask questions or request restrictions on how your health information is used.

Contact & Privacy Inquiries

If you have any questions about our privacy practices, HIPAA compliance, or how your personal information is protected, please get in touch with us through our Contact page, via the Certification Assistant on our site, or by emailing us directly, and our clinical management team will respond promptly.