Privacy policy

This policy explains what information MJCard collects when you use mjcard.com, apply for a medical cannabis card, or contact us, how we use it, and the choices you have. MJCard is operated by MJCard LLC.

Information we collect

When you apply

Your name, date of birth, email address, mobile phone number and home address.
How long you have lived in your state, and the gender, ethnicity and race details your state's medical cannabis program asks every patient for.
Photos of the front and back of your driver's license or state ID, and the details we read from them (including the barcode).
Health information: the condition you are applying for, when you were diagnosed, your answers to the health questions, and anything you tell the doctor.
If someone applies for you, the caregiver's name, date of birth, contact details, address, ID details and relationship to you.
Your signature, your appointment time, and whether you paid.

When you pay. Payments are handled by our payment processor. We receive confirmation that you paid; we do not store your full card number.

When you sign in. Your email address and password. Passwords are stored as a one-way hash, never as plain text.

When you contact us. Your name, email address, phone number if you give it, and your message.

When you browse the site. Your IP address, browser and device type, the pages you visit, and cookies (see "Cookies and analytics" below).

How we use your information

To run your visit: check your details, let a licensed physician evaluate you, and schedule your appointment.
To file your certification with your state's medical cannabis program when your doctor certifies you.
To take payment and send you receipts, appointment details and messages about your application.
To answer your questions and give support.
To keep the service secure, prevent fraud, and meet our legal and record-keeping duties.
To send offers and resources by text or email, only if you opted in. You can opt out at any time.

We do not sell your personal information.

Physicians who evaluate you, and the clinical staff who support them.
Your state's medical cannabis program, which receives the certification and registration details it requires.
Service providers that work for us under contract, only as needed to provide the service. Today these are: electronic health records (DrChrono), appointment scheduling (Calendly), payment processing (Stripe or Authorize.net), email and text messaging providers (including Twilio for texts), an ID-document verification service, cloud hosting (Amazon Web Services), and Google for address lookup and website analytics.
Others when the law requires it, for example in response to a valid court order, or to protect someone's safety.

Your health information

Information you share for your medical evaluation is health information. We and the physicians you see protect it as required by applicable law, including the Health Insurance Portability and Accountability Act (HIPAA) where it applies. To get the Notice of Privacy Practices, or to see, correct or get a copy of your health information, email support@mjcard.com and we will reply within 30 days.

How long we keep it

We keep your information for as long as we need it to provide the service, and for as long as medical record and other laws require us to keep it afterwards. Those periods depend on your state. When we no longer need it, we delete it or make it anonymous.

How we protect it

We use measures such as encrypted connections (HTTPS), encryption of sensitive application details in our database, and limited, logged access for staff. No system is perfectly secure, so please contact us right away if you think your account has been misused.

Your choices and rights

See or correct your information. Sign in to the patient portal, or contact us.
Stop marketing messages. Reply STOP to a text, or use the unsubscribe link in an email. You will still get messages about your own application and visit.
Delete your information. Ask us, and we will delete what the law allows us to delete. Medical records we are required to keep are kept for the required period.
State privacy rights. Depending on where you live, you may have further rights, such as knowing what we hold about you. Contact us to use them.

Cookies and analytics

We use cookies that the site needs to work (for example, to keep your application saved and to keep you signed in). We also use Google Tag Manager and Google Analytics to understand how people use the site, so we can improve it. You can block or delete cookies in your browser settings; parts of the application may not work without the necessary ones.

Children

Our services are for adults. A patient under 18 can apply only through a parent or legal guardian acting as their caregiver.

Changes to this policy

We will post any change on this page and update the date at the top. If a change materially affects how we use your information, we will tell you before it takes effect.

Contact us

Questions about this policy or your information: email support@mjcard.com, call 833-285-LIVE (5483), or write to 2550 Heritage Ct SE, Suite 100-C, Atlanta, GA 30339.