BuddPrivacy Policy
Including our HIPAA Notice of Privacy Practices.
Overview
BuddMD provides telemedicine medical marijuana certification services in New York and Connecticut. This policy describes how we handle information collected through our marketing website and our intake/telemedicine process.
Marketing website
The public pages of buddmd.com (Home, How It Works, Eligibility, Pricing, FAQ, and legal pages) do not collect or store protected health information (PHI). These pages may be hosted on general-purpose web infrastructure.
Intake and health information
Information you submit through our intake process — including your name, date of birth, contact information, condition/medical information, and identification documents — is protected health information (PHI). This information is collected and stored through a HIPAA-compliant intake platform operating under a signed Business Associate Agreement (BAA), not through the marketing website itself.
Payment information
Payments are processed by Stripe. Payment information is handled separately from your health information and is not combined with your medical records.
How we communicate with you
We may contact you by text/SMS, phone call, email, or video visit to verify your information and conduct your evaluation.
Your rights
Under HIPAA, you have rights regarding your health information, including the right to access your records and to request corrections. Contact details for exercising these rights will be provided as part of your intake.
Questions
Questions about this policy can be directed to us through the contact methods provided during your intake.