Privacy Policy

Canna Clinic MD ("we," "us," or "our") is committed to protecting the privacy and confidentiality of our patients and website visitors. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at cannaclinicmd.com or receive services at our Boca Raton medical office.

Information We Collect

Personal Information You Provide

When you schedule an evaluation, submit a contact form, or become a patient, we may collect:

• Full name, date of birth, and contact information (phone number, email address, mailing address)
• Florida driver's license or state ID number
• Medical records, health history, current medications, and diagnosis documentation
• Insurance information (if applicable)
• Photographs taken for your state-issued medical marijuana patient ID card
• Payment information for evaluation fees

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address, browser type, and operating system
• Pages visited, time spent on pages, and referring URLs
• Device identifiers and general geographic location

This information is collected through cookies, web beacons, and similar technologies. You can control cookie preferences through your browser settings.

How We Use Your Information

We use the information we collect to:

• Schedule and conduct medical marijuana evaluations
• Submit your certification to the Florida Office of Medical Marijuana Use (OMMU) Compassionate Use Registry
• Upload required documentation to state systems on your behalf
• Communicate with you regarding appointments, renewals, and follow-up care
• Process payments for services rendered
• Comply with federal, state, and local laws and regulations
• Improve our website and patient experience
• Respond to inquiries and provide customer support

HIPAA Compliance

Canna Clinic MD is a healthcare provider subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Your Protected Health Information (PHI) is handled in strict accordance with HIPAA Privacy and Security Rules.

• Your medical records and patient status are never shared with employers, insurers, government agencies, or any unauthorized third party
• Your status as a medical marijuana patient does not appear on background checks, employment screenings, or public records
• All electronic health records are encrypted and stored on HIPAA-compliant systems
• Physical records are stored in locked, secure facilities with access limited to authorized personnel
• All staff members receive HIPAA training and are bound by confidentiality agreements

You have the right to request a copy of our Notice of Privacy Practices at any time by contacting our office.

Disclosure of Your Information

We do not sell, trade, or rent your personal information to third parties. We may disclose your information only in the following limited circumstances:

• State Registry Submission: To submit your certification to the Florida OMMU Compassionate Use Registry as required by Florida law (Section 381.986, Florida Statutes)
• Treatment Purposes: To other healthcare providers directly involved in your care, with your written consent
• Legal Compliance: When required by law, subpoena, court order, or government investigation
• Service Providers: To trusted third-party vendors who assist with website hosting, payment processing, or appointment scheduling, bound by confidentiality agreements
• Emergency Situations: To prevent serious harm to you or others when legally permitted

Florida Medical Marijuana Program Privacy

Under Florida law, your participation in the medical marijuana program is confidential. The Florida Department of Health maintains the Compassionate Use Registry as a confidential database. Information in the registry is exempt from public records disclosure under Florida Statute 381.986(15). Your patient status is not accessible to:

• Employers or prospective employers
• Health insurance companies
• Law enforcement (except pursuant to a valid court order)
• Landlords or housing authorities
• The general public through any public records request

Data Security

We implement appropriate technical and organizational security measures to protect your personal and medical information, including:

• SSL/TLS encryption for all data transmitted through our website
• Encrypted storage of electronic health records
• Access controls limiting information access to authorized personnel
• Regular security assessments and updates
• Secure disposal of records in accordance with retention requirements

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

Your Rights

As a patient and website visitor, you have the right to:

• Access and obtain a copy of your medical records
• Request corrections to inaccurate information in your records
• Request restrictions on certain uses or disclosures of your PHI
• Receive an accounting of disclosures of your PHI
• Opt out of marketing communications at any time
• File a complaint with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated

Cookies and Tracking

Our website may use cookies and similar tracking technologies to improve your browsing experience and analyze site traffic. Types of cookies we may use include:

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: Help us understand how visitors interact with our site
• Preference Cookies: Remember your settings and preferences

You may disable cookies through your browser settings, though this may affect website functionality. We do not use cookies to collect Protected Health Information.

Third-Party Links

Our website may contain links to third-party websites (such as the Florida OMMU portal, dispensary websites, or educational resources). We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party site you visit.

Children's Privacy

Our website is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors through our website. Minor patients are served through their parent or legal guardian acting as a designated caregiver, and all information is collected from the adult caregiver.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to file a complaint, please contact us: