Privacy

‍

Effective Date: 10/30/25

1. Introduction

HiDoc HDHQ4 LLC (“HiDoc”, “we”, “us”, or “our”) provides online medical evaluation and certification services for qualifying medical-cannabis patients (“Services”). We are committed to protecting your privacy and ensuring that your personal and health information is handled with the utmost security, confidentiality, and integrity.

2. Scope; What Information We Collect

2.1 We collect information you provide when you register, schedule an appointment, participate in a consultation, or use our platform. This may include:

Name, address, email, phone number, date of birth, government ID (or equivalent)
Medical history, qualifying condition(s), and other health-related information you disclose
Appointment records, consultation notes, state registry submissions
Payment or billing information (if applicable)
Usage data (e.g., login times, device/IP info) for service access purposes

2.2 We may also collect or generate certain Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (“HIPAA”) when relevant to our service. HIPAA applies to covered entities and business associates, and we adhere to applicable protections for PHI.

3. Use of Information

We use your information to:

Verify your identity and eligibility for consultation
Provide evaluation services and recommendations to state registries
Communicate with you about appointments, reminders, renewal notices, and our Services
Maintain and improve our platform, perform analytics, detect fraud or misuse
Comply with legal/regulatory obligations (e.g., state medical-cannabis program requirements)

4. Sharing & Disclosure of Information

4.1 Your Consent Required – We do not share your personal or health information with third-parties for marketing or sale without your explicit consent.

4.2 Service Providers / Business Associates – We may share your information with third-party service providers engaged by us (e.g., telehealth platform vendors, payment processors, state registry interface vendors) who operate under contractual obligations (including business associate agreements where applicable) to protect your data in line with HIPAA’s Security and Privacy Rules.

4.3 Legal / Regulatory Obligations – We may disclose information if required by law, regulation, or to protect the rights, safety or property of HiDoc or others.

4.4 State Registry Submissions – As part of the medical-cannabis certification process, we will submit your certification to the appropriate state medical-cannabis registry (where required). That submission is required for the service you are requesting.

4.5 Aggregated/De-identified Data – We may use de-identified or aggregated data for research, analytics or business purposes; such data does not identify you and may be used without further consent.

5. Your Rights

You have rights concerning your information, including:

Right to access your health/medical records (to the extent permitted by law)
Right to request correction/amendment of inaccurate information
Right to revoke consent for non-mandatory disclosures (where feasible)
Right to request accounting of disclosures made without your authorization (where required by law)
Right to request restrictions on certain uses and disclosures (subject to certain limitations)
Right to request portability of your information (where applicable)

6. Security

We implement appropriate administrative, technical and physical safeguards to protect the confidentiality, integrity and availability of your information — consistent with HIPAA’s Security Rule and telehealth best practices. We require secure transmission (e.g., encryption in transit and at rest), access controls, audit logging, and periodic risk assessments.

7. Data Retention and Deletion

We retain your personal and health information for as long as needed to provide services, satisfy legal/regulatory requirements (including state medical-marijuana program rules) and enforce our agreements. When data is no longer required, we will delete or de-identify it unless legal retention obligations apply.

8. Cookies & Tracking

Our website uses cookies and similar tracking technologies to provide you with optimized user experience, website analytics, and security monitoring. You may manage cookie settings through your browser; however, disabling certain cookies may impact your access to parts of our site.

9. International Transfers

If we or our service providers transfer your information outside the U.S., we will ensure appropriate safeguards are in place in accordance with applicable data protection laws.

10. Children’s Privacy

Our Services are intended for users 18 years or older (or the age of majority in your jurisdiction). We do not knowingly collect personal or medical information from minors without parental/guardian consent.

11. Updates to This Privacy Policy

We may modify this Privacy Policy from time to time. When we make changes, we will update the effective date at the top and notify you (e.g., via email or website notice) as required by law. Continued use of our Services after changes means you accept the modified policy.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

12. Contact Us

If you have questions or concerns about this policy, or wish to request access/amendment of your data, please contact us at:

HiDoc HDHQ4 LLC

Email: support@sayhidoc.com

‍