Privacy Policy
How DPCFinder collects, uses, and protects your information
Last updated: March 2026
DPCFinder ("we," "us," or "our") operates the DPCFinder website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
1. Information We Collect
We collect information in the following ways:
Information You Provide
- Email addresses— when you subscribe to our newsletter ("The Direct Care Guide") or create an account.
- Contact form submissions — when you submit an inquiry or contact a DPC practice through our lead forms, including your name, email, phone number, and message.
- Practice account information — when doctors claim or create a practice listing, including practice name, address, contact details, services, and pricing.
Information Collected Automatically
- Analytics data — page views, click events, search queries, referral sources, and general usage patterns.
- Device information — browser type, operating system, screen resolution, and general location (city/state level, not precise).
- Cookies— small data files stored on your device to maintain session state and preferences. See the Cookies & Tracking section below.
2. How We Use Your Information
- Newsletter delivery — to send you our monthly newsletter with DPC tips, new practice listings, and healthcare savings strategies.
- Lead forwarding — when you contact a practice through our site, we forward your inquiry to that practice so they can respond to you directly.
- Site improvement — to analyze how visitors use our site, identify popular content and searches, and improve the user experience.
- Practice management — to enable DPC practices to manage their directory listings, respond to patient inquiries, and process subscription payments.
- Communications — to send transactional emails such as account confirmations, billing receipts, and important service updates.
3. Third-Party Services
We use the following third-party services to operate DPCFinder. Each has its own privacy policy governing their use of your data:
Supabase
— Database & AuthenticationStores user accounts, practice listings, newsletter subscriptions, and contact form submissions.
Stripe
— Payment ProcessingHandles all payment transactions for premium practice listings. We do not store credit card numbers on our servers — Stripe processes and secures all payment data.
Resend
— Email DeliverySends our newsletter, transactional emails, and practice notification emails on our behalf.
Vercel
— Hosting & InfrastructureHosts our website and may collect standard server logs including IP addresses and request metadata.
5. Data Retention
- Newsletter subscriptions — we retain your email address until you unsubscribe. Upon unsubscribing, your email is removed from our mailing list within 30 days.
- Contact form leads — we retain lead data for up to 12 months, after which it is automatically deleted unless the associated practice requests earlier removal.
- Practice accounts — account data is retained for the duration of the account. If a practice cancels their subscription, we retain their basic listing data (name, address) for the public directory but remove premium features and contact details within 30 days.
- Analytics data — aggregated analytics data is retained indefinitely. Individual session data is retained for up to 24 months.
6. Your Rights
You have the right to:
- Unsubscribe — opt out of our newsletter at any time using the unsubscribe link in any email.
- Request your data — ask us for a copy of the personal data we hold about you.
- Request deletion — ask us to delete your personal data from our systems.
- Correct your data — request corrections to any inaccurate personal data we hold.
- Data portability — request your data in a common, machine-readable format.
To exercise any of these rights, contact us at privacy@dpcfinder.com. We will respond to your request within 30 days.
7. Data Security
We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), encrypted storage, and access controls. However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.
8. Children's Privacy
DPCFinder is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify newsletter subscribers via email. We encourage you to review this policy periodically.
10. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
DPCFinder
Email: privacy@dpcfinder.com