Privacy Policy

This Privacy Policy describes how Quick Medical Cards ("we," "us," or "our"), operated in partnership with Burrwood Medical P.C., collects, uses, and protects your information when you use our website at quickmedicalcards.com and our telehealth services (collectively, the "Service").

We understand that health information is deeply personal. This policy explains exactly what we collect, why we collect it, and the choices you have.

When you register for or use the Service, we may collect:

• Identity and contact information: your name, home address, email address, phone number, and date of birth.
• Health information: your medical history, symptoms, current medications, qualifying conditions, and other details you share during your eligibility form and physician evaluation.
• Payment information: billing details processed through our payment processor. We do not store full credit card numbers on our servers.
• Usage information: IP address, browser type, device characteristics, and pages you visit on the Service.

• To schedule and conduct your physician evaluation.
• To submit your certification to your state's medical cannabis registry, where required.
• To process payments and refunds for your consultation.
• To communicate with you about your appointment, certification, and account.
• To improve the Service and comply with legal and regulatory requirements.

Burrwood Medical P.C. and its licensed physicians comply with the Health Insurance Portability and Accountability Act (HIPAA). Your protected health information (PHI) is used and disclosed only as permitted by HIPAA — for treatment, payment, and health care operations, or with your authorization. We maintain administrative, physical, and technical safeguards designed to protect the privacy and security of your health information. You will receive a Notice of Privacy Practices describing these protections in more detail as part of your evaluation.

We do not sell your personal information. We share information only in these circumstances:

• With your evaluating physician and Burrwood Medical P.C. so your evaluation and certification can be completed.
• With state medical cannabis programs and registries, as required to register your certification under your state's law.
• With PaymentCloud (NMI), our payment processor, to process payments and refunds. PaymentCloud's handling of payment data is governed by its own privacy policy.
• When required by law, such as in response to a subpoena or other legal process, or to protect the safety and security of the Service.

We retain your medical and certification records for the period required by applicable medical record laws in your state, which is typically at least six to ten years after your last visit. Account and billing records are retained as needed for tax, audit, and legal purposes. When retention is no longer required, we securely delete or de-identify your information.

We use cookies and similar technologies to keep the Service working, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling certain cookies may affect parts of the Service.

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information, subject to record-keeping requirements.
• Receive an accounting of certain disclosures of your health information.
• Revoke your authorization for certain uses of your health information.

To exercise any of these rights, contact us at support@quickmedicalcards.com. We will respond within the timeframes required by applicable law.

We use commercially reasonable safeguards — including encryption in transit and at rest, access controls, and audit logging — to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is not intended for individuals under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised effective date. Material changes to how we use your health information will be communicated as required by law.

If you have questions about this Privacy Policy or our privacy practices, contact us at support@quickmedicalcards.com. If you are a patient of Burrwood Medical P.C. and wish to exercise your HIPAA rights, you may also contact our Privacy Officer through the same address. Written requests may be mailed to Quick Medical Cards, 9 Burrwood Ct, East Northport, NY 11731.