This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.
Last updated: January 2026
California Medical Marijuana Card and the licensed physicians on our platform are committed to protecting the privacy of your protected health information (PHI). We are required by the Health Insurance Portability and Accountability Act (HIPAA) to maintain the privacy of your PHI, to provide you with this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.
Protected health information is information that may identify you and that relates to your past, present, or future physical or mental health condition and related health care services.
For Treatment: We use and disclose your PHI to provide, coordinate, and manage your telehealth medical marijuana evaluation. This includes sharing information with the licensed California physician conducting your evaluation.
For Payment: We may use and disclose your PHI to obtain payment for the services you receive, such as processing your plan fee.
For Health Care Operations: We may use your PHI for internal operations such as quality assessment, staff review, and improving the services we provide.
As Required by Law: We will disclose your PHI when required to do so by federal, state, or local law.
We do not sell your protected health information. We do not share your PHI with employers, insurers, law enforcement databases, or any federal cannabis registry except where disclosure is specifically required by law.
Your participation in California's medical cannabis program through our service is confidential.
You have the right to request a copy of your medical records and the recommendation issued to you. You have the right to request corrections to your health information if you believe it is inaccurate.
You have the right to request restrictions on certain uses and disclosures of your information, and the right to request confidential communications through a specific method or location.
You have the right to receive an accounting of certain disclosures we have made of your PHI, and the right to a paper copy of this notice upon request.
All telehealth evaluations are conducted on a HIPAA-compliant platform. Your records are stored using encryption both in transit and at rest. Access to your information is restricted to authorized personnel and the treating physician.
We reserve the right to change this notice and to make the revised notice effective for health information we already have as well as any information we receive in the future. The current notice will always be posted on this website with its effective date.
If you believe your privacy rights have been violated, you may file a complaint with us by emailing contact@californiamedicalmarijuanacard.org. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.
For any questions about this HIPAA Notice of Privacy Practices, please contact us through our contact page.