​Green Medical and Consulting, LLC

Effective Date: June 22, 2022
Last Updated: October 27, 2026

1. Introduction

Green Medical and Consulting (“Clinic,” “we,” “our,” or “us”) is committed to protecting the privacy and confidentiality of individuals who visit our website, contact our office, schedule appointments, or receive our healthcare services.

This Privacy Policy explains how we collect, use, maintain, and disclose personal information through our website, online scheduling systems, patient communications, and related services.

Medical information is handled in accordance with applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), when applicable, and other laws governing confidential healthcare information.

This policy should be read together with our separate Notice of Privacy Practices, when applicable, which describes how we use and disclose protected health information in connection with healthcare services.

2. Information We Collect

Depending on your interactions with the Clinic, we may collect the following information:

Personal and contact information

• Full name, date of birth, mailing address, telephone number, and email address.

• Emergency contact information, when appropriate.

• Information necessary to verify identity and eligibility for services.

Health and medical information

• Medical history, current symptoms, diagnoses, medications, allergies, and treatment history.

• Information concerning qualifying medical conditions and prior medical cannabis use.

• Relevant medical records, laboratory results, and information provided by referring healthcare professionals.

• Clinical assessments, evaluation notes, treatment recommendations, and follow-up documentation.

Appointment and payment information

• Appointment requests, scheduling details, cancellation history, and patient communications.

• Payment records, invoices, and transaction information.

• Insurance or billing information, if applicable.

Website and technical information

• Internet protocol (IP) address, browser type, device information, pages visited, and basic website usage information.

• Information collected through cookies or similar technologies, where used and permitted by law.

We collect only information reasonably necessary for our legitimate healthcare, administrative, security, and legal purposes.

3. How We Use Information

We may use collected information to:

• Schedule, conduct, and document medical cannabis evaluations.

• Assess medical history and determine whether a patient may qualify for a recommendation or certification under applicable state law.

• Provide follow-up care and communicate clinical recommendations.

• Maintain accurate medical records.

• Process payments and manage administrative operations.

• Respond to questions and appointment requests.

• Improve website functionality, security, and patient experience.

• Meet professional licensing, recordkeeping, reporting, and other legal obligations.

• Prevent fraud, investigate security incidents, and protect patients and the Clinic.

We do not guarantee that an evaluation will result in a medical cannabis recommendation, certification, or state-issued authorization.

4. Disclosure of Information

We may disclose information when permitted or required by applicable law, including:

• Healthcare providers: To other treating professionals when appropriate for treatment and permitted by law.

• Service providers: To vendors supporting electronic health records, secure scheduling, telehealth, payment processing, communications, and information technology, subject to applicable privacy and security requirements.

• Legal and regulatory authorities: When required by law, valid legal process, professional licensing requirements, or authorized regulatory requests.

• Public health and safety: When a disclosure is legally authorized or required to address specific public health or safety concerns.

• With your authorization: When you provide the legally required permission for a particular disclosure.

We do not sell patient medical records or use confidential patient information for unrelated commercial purposes. We do not disclose protected health information for marketing purposes without authorization when HIPAA requires it.

Information submitted through public website forms or nonclinical website tools may be subject to different legal protections than information maintained in our clinical record systems.

5. Cookies and Website Technologies

Our website may use cookies, analytics, or similar technologies to maintain functionality, understand website traffic, and improve performance.

We will configure these technologies in accordance with applicable privacy laws and our obligations regarding sensitive health information. We will not knowingly permit advertising or analytics technologies to improperly collect or disclose identifiable patient information.

You may be able to control cookies through your browser settings. Disabling certain cookies may affect website functionality.

6. Telehealth and Electronic Communications

When telehealth services are offered, the Clinic uses technology selected to support secure healthcare communications and applicable privacy requirements.

Electronic communications may include appointment reminders, patient portal messages, email, and text messages. Although we take reasonable precautions, no electronic communication method is entirely risk-free.

Patients should use the designated patient portal or other Clinic-approved secure communication method for sensitive medical information whenever available.

Please notify us if you wish to change your communication preferences or request confidential communications through an alternative method.

7. Information Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, or disclosure.

Safeguards may include access controls, staff confidentiality requirements, secure recordkeeping systems, and vendor security requirements.

No website, electronic transmission, or storage system can be guaranteed to be completely secure. In the event of a reportable security incident, we will provide notifications as required by applicable law.

8. Data Retention

We retain information for the periods required by applicable medical record retention laws, professional licensing rules, contractual obligations, and legitimate business needs.

Medical records may be retained after a patient stops receiving services. Requests to delete information are subject to applicable recordkeeping obligations and legal restrictions.

9. Your Privacy Rights

Depending on applicable law and the type of information involved, you may have the right to:

• Request access to or a copy of your medical records.

• Request correction of information you believe is inaccurate or incomplete.

• Request confidential communications.

• Request restrictions on certain uses or disclosures.

• Request an accounting of certain disclosures.

• Receive a copy of our Notice of Privacy Practices.

• File a privacy complaint without retaliation.

• Exercise additional rights provided by applicable state privacy laws.

Requests concerning medical records should be directed to the Clinic's Privacy Officer using the contact information below. We will respond in accordance with applicable law.

10. Children's Privacy

Our website is not intended to collect personal information from children independently without appropriate authorization. Minors seeking medical cannabis evaluations must satisfy applicable state requirements concerning age, parental or legal guardian involvement, consent, and eligibility.

We will handle information concerning minors in accordance with applicable privacy and healthcare laws.

11. Third-Party Websites

Our website may contain links to third-party websites, state medical cannabis programs, patient portals, or payment services. We are not responsible for the privacy practices of independent third parties. Please review their privacy policies before submitting information.

12. Changes to This Policy

We may revise this Privacy Policy periodically to reflect changes in our practices, services, or legal obligations. Updates will be posted on our website with a revised effective or updated date.

Changes to our healthcare privacy practices will also be addressed through our Notice of Privacy Practices when required.

13. Contact Information

For questions about this Privacy Policy, privacy requests, or concerns regarding the handling of your information, contact:

Green Medical and Consulting, LLC
Privacy Officer: Kristie Peggins
Address: 2350 McIngvale Rd Hernando, MS 38632
Telephone: 662-912-6399
Email: kpeggins@gmedicalclinic.com
Website: www.gmedicalclinic.com

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights when applicable. Filing a complaint will not affect your eligibility to receive services from the Clinic.

This Privacy Policy is intended to provide general information about our privacy practices. It does not replace a legally required HIPAA Notice of Privacy Practices or any additional consent or authorization required by law.