Rapid Referrals, LLC
PRIVACY POLICY | November 2026
1. Purpose and scope
Rapid Referrals, LLC, doing business as My Rapid Card (“Rapid Referrals,” “we,” “our”), respects the privacy of
patients and website visitors. This Privacy Policy describes how we collect, use, disclose, retain, and safeguard
information in connection with www.myrapidcard.com, appointment scheduling, in-person medical evaluations, and
medical cannabis certification services in South Dakota. It should be read alongside our separate Terms of Use. This
policy does not replace any patient notice or authorization required by applicable law.
2. Information we collect
Website and scheduling information. When you contact us or schedule an appointment, we may collect your name,
telephone number, email address, appointment preferences, and other information you choose to provide. Our
website and its service providers may also process technical information such as IP address, browser type, device
information, and basic usage data, depending on the tools enabled on the site.
Medical information collected in person. Patients currently complete paper medical history forms at their
appointments. These forms and information obtained during the evaluation may include medical conditions,
symptoms, medications, relevant treatment history, and practitioner notes. We currently retain these patient medical
records in paper form.
Payment information. The practice collects payment only after a qualifying certification has been completed. Payment
processors may handle card or transaction details; this policy does not assume that Rapid Referrals stores complete
payment card numbers.
3. How we use information
We use information to schedule and confirm appointments; communicate with patients; conduct medical evaluations;
document clinical findings; determine whether certification is appropriate; complete required certification and
program-related steps; process payments and refunds; respond to questions and records requests; maintain records;
protect the security of our operations; and comply with applicable law. We do not sell patient medical information.
4. Disclosures of information
State medical cannabis program. When a practitioner completes a certification, information required for that process
may be transmitted to the South Dakota Department of Health or its designated registry system. The State
independently governs its registry and related application processes.
Service providers. We may share limited information with vendors that support appointment scheduling, website
hosting, payment processing, communications, or other administrative functions, to the extent needed for those
services and subject to applicable safeguards and legal requirements.
Other disclosures. We may disclose information with the patient’s valid authorization, as required by law or lawful
process, for legitimate medical or operational purposes permitted by applicable law, or where necessary to address a
serious safety concern as legally permitted. We do not disclose identifiable medical information for unrelated
advertising or promotional purposes without any authorization required by law.
5. Website technology and third-party services
Our website uses WordPress and an online appointment scheduling function. Cookies and similar technologies may
be used for essential website functions and, if enabled, analytics or performance measurement. The specific cookies,
Rapid Referrals, LLC • Privacy Policy • Draft November 2026
analytics services, and third-party integrations in use should be confirmed before publication of this policy. Links to
outside websites are governed by those sites’ own privacy practices. Patients should avoid sending detailed medical
histories through ordinary website contact fields or unsecured email.
6. Appointment reminders and communications
We may use the telephone number or email address provided by a patient for appointment confirmations, reminders,
scheduling changes, and other service-related communications. Ordinary email and text messaging may not be fully
secure; patients should avoid including sensitive medical details in replies unless a secure channel has been arranged.
Promotional messages, if any, will be handled separately and in accordance with applicable consent and opt-out
requirements.
7. Paper records, security, and retention
Medical history forms and other patient medical records are currently retained as paper records. Rapid Referrals uses
reasonable administrative, physical, and procedural safeguards appropriate to the information held and the practice’s
operations. No storage or communication method can be guaranteed completely secure. Records are retained and
disposed of in accordance with applicable professional, legal, and record-retention requirements. This policy does not
promise a particular retention period or security technology that has not been verified.
8. Patient requests and choices
Patients may contact Rapid Referrals to request access to their records, ask that inaccurate information be reviewed,
inquire about a disclosure, or raise a privacy concern. We will evaluate and respond to requests consistent with
applicable South Dakota and federal law, including any applicable identity-verification, access, amendment, and
retention requirements. Requests to delete records may be limited by legal and professional recordkeeping
obligations. Patients may also contact us about communication preferences.
9. HIPAA and other applicable law
Rapid Referrals currently operates as a cash-pay practice and does not submit health insurance claims. Whether a
provider is a covered entity under the federal Health Insurance Portability and Accountability Act (HIPAA) depends on
whether it conducts certain covered electronic transactions and other applicable facts; cash-pay status alone is not a
definitive determination. We will comply with HIPAA requirements to the extent they apply, as well as other applicable
privacy, medical confidentiality, and consumer-protection laws. This policy does not assert that Rapid Referrals is or is
not a HIPAA-covered entity.
10. Minors
Information concerning minors is handled in accordance with applicable law, including requirements governing parent
or guardian participation, consent, and access to medical records. A parent or guardian’s ability to obtain information
may depend on the circumstances and applicable legal restrictions.
11. Changes to this policy
We may update this Privacy Policy to reflect changes in law, technology, services, or practice procedures. The updated
version will be posted on our website with a revised effective date. Material changes will be communicated as required
by applicable law.
12. Contact
For questions, records requests, or privacy concerns, contact:
Rapid Referrals, LLC (DBA My Rapid Card)
Website: www.myrapidcard.com
Rapid Referrals, LLC • Privacy Policy • Draft November 2026
Email: info@myrapidcard.com
Phone: (605) 390-3854
