Privacy Policy

Effective Date: April 24, 2026  |  Falcon Direct Care, LLC  |  Licensed in Colorado & North Carolina

1. Information We Collect

We collect the following categories of information in connection with your care:

• Clinical/Health Information: Medical history, psychiatric history, medication history, lab results, visit notes, and treatment plans
• Identity Information: Name, date of birth, address, phone number, email address
• Payment Information: Payment method details processed through our PCI-compliant payment processor (Bluefin). We do not store full card numbers.
• Communications: Messages sent through our secure patient portal (Charm Health), email, or intake forms (JotForm)
• Technical Data: IP address, browser type, and page visits collected via our website

2. How We Use Your Information

Your PHI is used for Treatment, Payment, and Healthcare Operations (TPO) as permitted under HIPAA:

• Treatment: Coordinating your care, sending prescriptions to compounding pharmacies, reviewing PDMP records
• Payment: Processing cash-pay invoices and receipts
• Operations: Quality improvement, compliance auditing, and practice administration
• Communications: Appointment reminders, async check-ins, and clinical follow-ups via secure messaging

3. Telehealth-Specific Disclosures

All clinical services are delivered via telehealth. By engaging with Falcons ADHD Plus you acknowledge:

• Video visits are conducted through Charm Health's HIPAA-compliant telehealth platform
• Telehealth carries inherent technology risks including interruption or interception of data transmissions
• We take reasonable safeguards to protect all electronic PHI (ePHI) transmitted during visits
• You have the right to withdraw from telehealth at any time without affecting your right to other available services

4. Compounding Pharmacy Disclosures

When prescriptions are sent to our compounding pharmacy partners (Empower Pharmacy, Olympia Pharmacy), your name, date of birth, prescription details, and shipping address are shared as required to fulfill your medication order. These pharmacies are HIPAA Business Associates and operate under signed Business Associate Agreements (BAAs).

5. We Do Not Sell Your Information

Falcon Direct Care does not sell, rent, or trade your personal or health information to any third party for marketing purposes. We do not accept advertising revenue. Our practice is 100% cash-pay — no insurance company ever receives your PHI.

6. Your HIPAA Rights

You have the following rights regarding your health information:

• Right to Access: Request a copy of your medical records
• Right to Amend: Request corrections to your records
• Right to an Accounting: Request a list of disclosures we have made of your PHI
• Right to Restrict: Request limits on how we use or disclose your PHI
• Right to Confidential Communications: Request we contact you in a specific way
• Right to a Paper Copy: Request a paper copy of this Notice at any time

To exercise any of these rights, contact us at the information below.

7. Data Security

We implement HIPAA-required administrative, physical, and technical safeguards including encrypted communications, role-based access controls, and annual security reviews. All staff with PHI access receive HIPAA training. In the event of a breach affecting your unsecured PHI, we will notify you as required by law within 60 days of discovery.

8. Minors

Our services are intended for adults (18+). We do not knowingly collect information from minors without appropriate parental consent and applicable state authorization.

9. State-Specific Rights

Colorado residents may have additional rights under the Colorado Privacy Act (CPA). North Carolina residents may have additional rights under applicable NC consumer protection statutes. Contact us to exercise state-specific privacy rights.

10. Changes to This Policy

We reserve the right to update this Privacy Policy. Material changes will be posted to this page with an updated effective date. Continued use of our services constitutes acceptance of the revised policy.