1. Introduction
GlobalCan.med is a secure medical cannabis telemedicine platform designed to support patients, doctors, pharmacies, suppliers and institutional partners.
This Privacy Policy explains what personal data may be collected, why it is processed, how it is protected and what rights users may have under applicable privacy laws.
2. Data controller and contact
For privacy-related questions, users may contact GlobalCan.med through the contact page or by using the official contact email displayed on the website.
Where local law requires a different controller, processor or representative, the relevant legal entity or provider may provide additional notices.
3. Personal data we may collect
We may collect identity data, contact data, account credentials, role information, uploaded documents, communication data, technical logs and service usage data.
For medical workflows, we may process health-related information, consultation details, eligibility answers, prescription-related data and documents uploaded by the user.
4. Health and sensitive data
Health-related information is processed only for platform functions such as patient onboarding, medical consultation, doctor review, documentation, prescription workflow, pharmacy coordination or compliance obligations.
Access to sensitive data should be limited to authorized users and roles, such as the patient, assigned doctor, authorized pharmacy, hospital or administrator where required.
5. Legal basis for processing
Depending on the context, processing may be based on user consent, performance of a contract, legal obligations, legitimate interests, healthcare-related requirements or explicit consent for sensitive data.
Users should not submit information that is not necessary for the requested service.
6. How data is used
Personal data may be used to create and manage accounts, verify users, enable secure communication, support consultations, process prescription-related workflows and provide platform functionality.
Data may also be used for security monitoring, fraud prevention, service improvement, legal compliance and operational support.
8. Payments and third-party services
Where payments are enabled, payment information may be processed by authorized third-party payment providers.
GlobalCan.med should not store full card data unless explicitly supported through a compliant payment provider and required by law or platform configuration.
9. Security measures
The platform should use role-based access control, secure sessions, CSRF protection, server-side validation, logging, encryption in transit and restricted access to sensitive files.
No online system can guarantee absolute security, but GlobalCan.med aims to apply reasonable technical and organizational safeguards.
10. Data retention
Personal data is retained only for as long as necessary for the purposes described in this policy, legal obligations, medical documentation requirements, dispute resolution or platform security.
Retention periods may differ depending on account type, country, provider obligations and applicable medical or legal rules.
11. User rights
Depending on applicable law, users may have rights to access, correct, delete, restrict, object to processing or request portability of their personal data.
Certain medical, legal, security or accounting records may need to be retained even where deletion is requested.
12. International transfers
Because the platform may support users and providers in multiple countries, data may be processed in or accessed from different jurisdictions where permitted by law.
Appropriate safeguards should be applied where required for international transfers.
13. Children and minors
GlobalCan.med is intended for adult users and authorized professional users unless a specific local legal framework permits otherwise.
Minors should not use the platform without appropriate legal authorization, guardian involvement or provider approval where required.
14. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect platform changes, legal requirements, provider workflows or security improvements.
The effective date may be updated when material changes are made.
15. Privacy contact
For privacy questions or data requests, users may contact GlobalCan.med through the contact page.
Requests may require identity verification before personal data is disclosed, corrected or deleted.