At Rhode Island Cannabis Card, we value your privacy and are committed to protecting your personal and medical information. This Privacy Policy explains how we collect, use, safeguard, and share your information when you visit our website, schedule a consultation, or apply for your Rhode Island medical marijuana card certification under the Rhode Island Cannabis Act.
We follow the Health Insurance Portability and Accountability Act (HIPAA) and Rhode Island medical marijuana regulations to ensure your Protected Health Information (PHI) remains safe and confidential.
1. Information We Collect
When you use our website or services, we may collect:
- Personal Information: Name, date of birth, phone number, email address, and residential address.
- Government Identification: Rhode Island driver’s license or state-issued ID for patient verification.
- Medical Information: Health history, qualifying condition details, physician notes, and medical documentation.
- Payment Information: Billing details and payment card information (processed securely via third-party providers; we do not store full card numbers).
- Technical Data: IP address, device details, browser type, and site usage data.
2. How We Use Your Information
Your information is used to:
- Provide medical marijuana evaluations and certifications.
- Assist with your registration in the Rhode Island Medical Marijuana Program.
- Process billing and secure online payments.
- Send appointment reminders, confirmations, and important updates.
- Improve website functionality and user experience.
- Maintain compliance with HIPAA and Rhode Island cannabis laws.
3. HIPAA Compliance
At Rhode Island Cannabis Card, we fully comply with HIPAA:
- All PHI is stored in HIPAA-compliant, encrypted systems.
- PHI is only shared with your consent or as required by law.
- Access to PHI is restricted to authorized healthcare professionals.
- Patients may request copies of records, request corrections, and restrict disclosures.
4. How We Share Your Information
We may share your data only under these circumstances:
- With Your Consent: To complete medical cannabis certification and patient registration.
- With Rhode Island Authorities: When required by the Rhode Island Department of Health (RIDOH).
- With Service Providers: Secure, HIPAA-compliant telemedicine platforms, record-keeping systems, and payment processors.
- For Legal Requirements: When required by subpoenas, court orders, or state regulations.
- For Security: To prevent fraud, misuse, or public safety risks.
5. Data Security
We protect your data with industry-leading safeguards:
- SSL encryption for all online communications.
- HIPAA-compliant servers and electronic health record (EHR) systems.
- Access restrictions and staff confidentiality training.
- Regular audits and system monitoring for security.
6. Your Rights as a Rhode Island MMJ Patient
You have the right to:
- Request access to your medical records.
- Request corrections or updates to your PHI.
- Restrict or revoke certain disclosures of PHI (when legally permitted).
- Receive a list of disclosures related to your PHI.
7. Cookies & Website Tracking
- Our website may use cookies to improve functionality and personalize your experience.
- Analytics tools may collect anonymous data such as IP addresses and browsing activity.
- You may disable cookies in your browser settings, but some website features may not function properly.
8. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices, content, or security policies of external sites.
9. Data Retention
- Medical records are retained in compliance with Rhode Island law (minimum 7 years).
- Records that are no longer required are securely deleted or destroyed.
10. Updates to This Privacy Policy
We may update this Privacy Policy to reflect changes in laws, cannabis program requirements, or business practices.
11. Contact Us
f you have questions about this Privacy Policy or how your information is handled, please contact: