Privacy policy

Draft pending legal review. This policy is draft-quality and has not yet been reviewed by qualified legal counsel. It describes the site as it actually behaves today and will be finalized before launch. It is not legal advice.

What the marketing form collects

The only form on this site is a nonclinical scheduling request. It collects your name, email address, phone number, whether you are a new or renewal patient, your preferred appointment mode, and — optionally — your region and a short scheduling note, plus a consent checkbox.

The form deliberately collects nothing clinical: no diagnosis, no medical records, no medications, no cannabis history, and no government identification numbers. Please keep it that way — medical details belong in your conversation with the physician, not in a website form.

This website is not a HIPAA-secure channel

Submitting the scheduling form does not create a physician-patient relationship, and this website is not presented as a HIPAA-secure communication channel. Clinical information is exchanged only through appropriate clinical channels after your evaluation is scheduled. If you send medical details through the form anyway, you do so outside those protections — so please don't.

How submissions work today

Until a secure form endpoint (SECURE_FORM_ENDPOINT) is configured, submissions run in mock mode: the server validates what you entered, simulates downstream processing, and returns a reference ID. Nothing is persisted to a database and nothing is transmitted to any third party. As of this writing, no endpoint is configured — that is the honest state of the system, not an oversight.

The form uses standard anti-abuse measures — a hidden honeypot field, a minimum time-to-submit check, and a simple rate limit — which process submissions transiently in memory and store nothing long-term.

Third-party vendors: currently none

Configured vendors that receive visitor data from this site: none. Every integration slot is listed below with its live status, so this page cannot quietly drift out of date:

• Secure form endpoint (SECURE_FORM_ENDPOINT) — not configured. Would receive scheduling-form submissions if configured.
• Scheduling provider — not configured. Would power appointment booking if configured.
• Analytics provider — not configured. Would provide site analytics if configured — disabled by default.

Analytics are disabled by default: with no analytics vendor configured, this site runs no analytics cookies, pixels, or tracking scripts. If a vendor is ever added, this section will name it before it goes live.

What we never do with your information

• We do not sell personal information — to anyone, for any reason.
• We do not share your details with dispensaries, product brands, or advertisers.
• We do not add you to marketing lists you did not ask to join, and we do not rent or trade contact information.

State registry data is not ours

Information you enter into the Florida Medical Marijuana Use Registry is held by the State of Florida under its own policies. We do not operate the registry and cannot access, correct, or delete state-held records — those requests go to the state.

Your choices and requests

You may ask what information we hold about you, request a correction, or ask us to delete your scheduling request. Reach us at hello@placeholder-clearhealthflorida.example.com or (000) 000-0000 (Monday–Saturday, 9:00 AM–6:00 PM ET). Because mock-mode submissions are not persisted, there is usually nothing to delete — but we will confirm that in writing if you ask. You can also reach us through our contact page.