Privacy Policy
On this page
- What information we collect
- Why the information is collected, and what happens if you don't provide it
- Consent for especially sensitive information
- Who the information is shared with — including transfer to Greece
- Information security
- Retention period
- Your rights
- Cookies and technical tools
- Changes and contact
1. What information we collect
To coordinate an eligibility review for you with a licensed doctor in Greece, our eligibility questionnaire collects:
| Category | Details |
|---|---|
| Identification | Full name, passport number, nationality, age, gender |
| Contact | Email, phone/WhatsApp |
| Identity verification | Photo of the passport page, verification selfie |
| Medical information | Free-text description of the medical condition, existence of a prior license/prescription, product preference, existing prescription file (if attached) |
| Stay in Greece | City/region of stay, estimated arrival date |
| Other | Selected service track, source of arrival at the Site |
2. Why the information is collected, and what happens if you don't provide it
The information is collected for one sole purpose: transferring it for review by a licensed doctor in Greece for a decision on issuing a medical cannabis prescription, and logistical coordination of the process. Providing the information is voluntary but required to receive the Service — without the details listed above we cannot forward your request to the doctor.
The information is not used for third-party marketing purposes, is not sold, and is not shared with any party other than the treating doctor, as detailed in Section 4.
3. Consent for especially sensitive information
Some of the details you provide — health condition, and passport/selfie images used for identity verification — are "especially sensitive information" under the Israeli Privacy Protection Law, 5741-1981 (including Amendment 13 to the law). Therefore, before submitting the questionnaire, we request your explicit, separate consent for: (a) processing the medical information for the purpose of referral to a doctor; (b) use of the passport photo and selfie for identity verification; (c) transfer of the information to a medical provider outside Israel, as detailed in the following section. You may decline any of these consents separately, though declining may prevent us from providing the Service.
4. Who the information is shared with — including transfer to Greece
The information provided is transferred to the licensed doctor in Greece reviewing your request, solely for the purpose of the medical decision. Greece is a member state of the European Union, subject to European data protection law, and we work to obtain a written commitment from the medical provider in Greece to maintain the confidentiality and security of the information, in accordance with the Privacy Protection Regulations (Transfer of Data to Databases Outside the State's Borders), 5761-2001.
To operate the Service we use infrastructure and technology providers (site hosting, form intake and processing, and file storage) acting as data processors on our behalf and solely per our instructions, subject to confidentiality and security commitments. Beyond this and the transfer to the doctor in Greece, the information is not sold and is not shared with any third party for commercial or marketing purposes, except where required by law (for example, a demand from a competent authority) or to protect the security or bodily integrity of the user or others.
5. Information security
We employ reasonable security measures appropriate to the sensitivity of the information collected, and work to continuously improve them, including: encryption in transit (HTTPS/TLS) for all communication between your browser and our servers, and encryption at rest for identity documents and medical information stored with us and with our infrastructure providers. Access to the information is limited to staff and the direct parties involved in handling your request. Given the sensitive nature of the information (health-related and biometric-for-identification), we recommend users attach files in a protected format and avoid sharing additional sensitive details beyond what the questionnaire requires. In the event of a serious security incident, we will act in accordance with the reporting obligations that apply to us under the Privacy Protection Law and its regulations.
6. Retention period
We retain the information provided only for the period required to complete the referral to the doctor and process the request, and no later than 12 months from the date of the request, unless longer retention is required by law (for example, for statute-of-limitations purposes) or at your explicit request. At the end of the period, the information will be deleted or anonymized so that it can no longer be identified.
7. Your rights
Under the Privacy Protection Law, you have the following rights:
- Access — to receive a breakdown of the information held about you;
- Correction — to request correction of incorrect or outdated information;
- Deletion/restriction of use — to request deletion of the information or restriction of its use, to the extent there is no legal obstacle to doing so (for example, a retention obligation for an open proceeding).
To exercise any of these rights, contact us at the address in Section 9. We will respond to your request within a reasonable time.
8. Cookies and technical tools
To understand and improve how the Site is used, we use a traffic-analytics tool — Google Analytics — which runs across all pages of the Site. In addition, we use Meta and TikTok advertising pixels to measure the effectiveness of our campaigns. All of these cookies load only after receiving your explicit consent in the cookie notice shown when you enter the Site; choosing "decline" prevents them from loading entirely, and full use of the Site remains available.
As a health-related service, we have placed substantial restrictions on the advertising pixels — going beyond what is required — so that advertising platforms never receive any indication of your medical situation:
- Homepage only. The advertising pixels load solely on the homepage. They are not loaded on the medical questionnaire, the thank-you page, the guide, or the legal pages — so the address of the page you visited never reveals a medical interest to Meta or TikTok.
- No conversion events. The pixels report a page view (PageView) only. We do not report to any advertising platform that you completed the questionnaire, made an enquiry, made a purchase, or any other event.
- No Advanced Matching. We do not pass your name, email address, phone number, or any other personal identifier to the advertising platforms — neither in the clear nor in hashed form.
The IP address in the analytics tool is truncated (anonymize_ip) so it is not stored in full. Fonts are loaded from Google's content delivery network (Google Fonts) for proper display of the Site.
9. Changes and contact
We may update this policy from time to time; the version published on the Site at the time of use is the binding version. For questions, access/correction/deletion requests, or privacy-related inquiries: 1cana.flight@gmail.com.