Privacy Policy

Who we are

Trust DPC is a Direct Primary Care practice led by Dr. Tim Wiher, MD, MBA (“we,” “us,” “our”). This policy explains what information we collect through trustdpc.com, how we use it, and the choices you have.

Scope of this policy

This policy covers this website only. It does not cover your medical record. Once you become a patient, your health information is governed by our HIPAA Notice of Privacy Practices, which we provide separately.

This website is not a medical channel. Please do not use these forms to report symptoms, request urgent care, or send health details. If you are experiencing a medical emergency, call 911.

Information you give us

• Contact form (home page and Contact page): your first and last name and email address are required. Your phone number and message are optional.
• Waitlist form: your email address is required. Your phone number is optional.
• Consultation booking: your first and last name, email address, and phone number are required, plus an optional note about what you would like to discuss. We use the phone number to call you at your scheduled time.
• Direct contact: if you email or call us, we receive whatever you choose to send.

Scheduling and appointment information

Free consultations are booked through Cal.com, Inc. When you select a time on our scheduling page, your browser requests live availability from Cal.com and sends your name, email address, phone number, chosen time, and any note to Cal.com so the booking can be created.

Cal.com generates your confirmation email and adds the appointment to the practice’s Google Calendar so we know when to call you. Confirmation emails are delivered through Resend. Your confirmation email includes links to reschedule or cancel; if you cancel or reschedule from that email, or from the calendar invite, Cal.com and Google handle that change.

Information collected automatically

• Server logs: our hosting provider, Netlify, automatically records standard information such as your IP address, browser type, pages requested, and timestamps. We use this only to keep the site secure and reliable.
• Technical assets: pages load fonts from Google Fonts, page styling from the Tailwind CSS CDN, and interactive scripts from jsDelivr. Those providers receive your IP address and browser details as part of delivering those files.
• Embedded video: our “How Direct Primary Care Works” page embeds a video from YouTube (Google). YouTube may set cookies and collect standard viewing data when you play the video, governed by Google’s privacy policy.

We do not run analytics, advertising, or cross-site tracking on this website.

Cookies and temporary storage on your device

This website does not create an account for you and does not keep a profile of your visit. We do not set advertising or tracking cookies, and we do not run analytics.

The one thing this site remembers is the appointment you book, and it remembers it on your own device rather than on our servers. When you confirm a time, your browser saves that appointment — the date, the time, and a booking reference — in your browser’s local storage so that the confirmation page can display it and offer the cancel and reschedule options.

That record:

• lives only in your browser on the device you booked from;
• is replaced when you book a new appointment;
• is deleted automatically when you cancel;
• disappears if you clear your browser data, and is never visible to us.

If you book from a shared or public computer, clear your browser data when you are done.

Some third parties may set their own cookies: the YouTube video embedded on our “How Direct Primary Care Works” page may set cookies when you play it, and Google delivers the profile photo shown on our site. Those are governed by Google’s privacy policy and can be controlled through your browser settings.

How we use your information

• To respond to your messages and waitlist signups.
• To schedule, confirm, reschedule, and follow up on consultations.
• To operate, secure, and improve this website.
• To comply with legal obligations.

We do not sell or rent your personal information. We do not use it for advertising. You will only hear from us about the practice — no spam, ever.

Who we share it with

We share information only with the service providers needed to run this site and our scheduling:

• Netlify — website hosting, form submission processing, and notification emails to us.
• Cal.com — consultation scheduling, confirmations, and appointment management.
• Resend — delivery of confirmation emails.
• Google — calendar sync for booked appointments, web fonts, and the embedded video.

These providers process information on our behalf under their own terms of service and privacy policies, which we encourage you to review. We choose providers that offer appropriate protections for the information they handle, but their practices are governed by those agreements rather than by us. We will not share your information with anyone else unless required by law.

Security and retention

We take reasonable measures to protect your information from unauthorized access, loss, or misuse, including access controls on the accounts that hold it. We keep messages and contact information only as long as needed to serve you, and we delete it when you ask us to.

Your rights

• Everyone: you may request access to, correction of, or deletion of your personal information at any time. You may also unsubscribe from any emails we send.
• California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of any “sale” or “sharing” of personal information — we do not sell or share your information.
• EU/UK visitors, where it applies: if a law such as the GDPR applies to your interaction with us — for example because you contact us from the EU or UK — you may have the right to access, rectify, erase, or restrict processing of your data, to data portability, to object to processing, and to lodge a complaint with your local data protection authority. We do not specifically target or market to individuals in the EU or UK, and this website is intended for people in the United States.

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by law.

Children

This website is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

If we change this policy, we will update the effective date at the top of this page. Material changes will be noted on the website.

Contact

Questions or requests about this policy or your data? Email us at support.trustdpc@gmail.com, or call (949) 300-8519.