Privacy Policy

1. Introduction

The Releaf Clinics ("Releaf," "we," "us," or "our") provides telehealth-based medical marijuana certification and renewal services, together with the Releaf Rewards members' club. We are committed to protecting the privacy and security of your personal information and your protected health information ("PHI") in compliance with the Health Insurance Portability and Accountability Act ("HIPAA") and applicable state laws.

This Privacy Policy describes what information we collect, how we use it, and the choices you have.

2. Information We Collect

We collect the following categories of information when you register, book an appointment, or participate in Releaf Rewards:

• Identification & Contact — name, email address, phone number, mailing address, and state of residence.
• Account & Booking — appointment dates and times, certification type (new or renewal), certification term, and card expiration date.
• Protected Health Information — information you provide to our certifying physicians to determine eligibility for a medical marijuana certification under your state's program.
• Rewards & Referrals — referral codes used, referrals made, reward tier, bonus points, and engagement task completions.
• Usage & Device — pages visited, browser type, and interaction data collected through cookies and analytics.

3. How We Use Your Information

We use your information to:

• Schedule and conduct telehealth certification appointments with licensed physicians.
• Issue and track your medical marijuana certification and renewal reminders.
• Administer your Releaf Rewards membership, tier, referrals, and earned discounts.
• Communicate with you about appointments, renewals, rewards, and program updates.
• Maintain records as required by state medical marijuana programs and applicable law.
• Improve our services, website, and member experience.

4. How We Share Your Information

We do not sell your personal information or PHI. We may share information only as necessary to provide our services or as required by law:

• Certifying Physicians — PHI is shared with our licensed physicians solely for the purpose of evaluating your eligibility for certification.
• State Medical Marijuana Programs — your certification is submitted to your state's health department as required to issue your patient ID card.
• Service Providers — trusted vendors (e.g., scheduling, email delivery, payment processing) who support our operations under appropriate confidentiality obligations.
• Legal Compliance — when required by law, court order, or to protect the rights, safety, or property of our patients, staff, or others.

5. Data Security & HIPAA Compliance

We maintain administrative, technical, and physical safeguards designed to protect your PHI in accordance with HIPAA. Access to PHI is restricted to authorized personnel who need it to perform their duties. Telehealth visits are conducted through secure, encrypted channels.

6. Cookies & Analytics

We use cookies and similar technologies to operate the website, remember your preferences, and analyze traffic. You can control cookies through your browser settings. Disabling cookies may limit some functionality.

7. Your Rights

You have the right to:

• Access and request a copy of your personal information.
• Request correction of inaccurate information.
• Request deletion of your account and personal data, subject to legal recordkeeping requirements.
• Opt out of marketing emails and SMS notifications at any time.

To exercise these rights, contact us at d.alexandra@thereleafclinics.com.

8. Data Retention

We retain your information for as long as your account is active and as necessary to provide services, comply with legal obligations, and maintain medical records as required by your state's program.

9. Children's Privacy

Medical marijuana certification is available only to patients who meet their state's eligibility requirements, including minimum age. We do not knowingly collect information from individuals who do not meet these requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date. Material changes will be communicated to active members by email.

11. Contact Us

Questions about this Privacy Policy or your information? Email d.alexandra@thereleafclinics.com or use the chat bubble in the corner of any page.