HIPAA Compliance
At Goldflower, we are committed to protecting your privacy and the confidentiality of your health information. This notice outlines how we handle your protected health information (PHI) in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
Our Responsibilities
As a provider of medical cannabis products and services, we may collect certain health-related information from you. We understand the sensitive nature of this information and follow strict protocols to safeguard it. We are required by law to:
- Maintain the privacy of your PHI
- Provide you with this notice of our legal duties and privacy practices
- Abide by the terms of this notice
- Notify you in the event of a breach involving your health information
How We Use & Disclose Information
We may use or disclose your PHI in the following ways:
- For Treatment: To coordinate or manage your care and provide you with our services
- For Payment: To process transactions related to your medical cannabis purchases
- For Healthcare Operations: To improve the quality of our offerings, conduct audits, or manage business-related activities
We may also share information when required by law, such as in response to a court order or public health request.
Your Rights
You have the right to:
- Request a copy of your health information
- Ask us to correct inaccurate or incomplete records
- Limit certain uses or disclosures of your data
- Request an accounting of disclosures
- File a complaint if you believe your privacy rights have been violated
We will never sell your information or use it for marketing without your explicit written consent.
Data Security
Goldflower employs industry-standard security protocols – both digital and physical – to protect your health information. Access is restricted to authorized personnel, and we review our policies regularly to stay in compliance with HIPAA regulations.
Contact Us
If you have questions about this notice or how we use your health information, please contact us.