Privacy Policy
Last updated: Jun 24, 2025
XXXXX (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you entrust to us when you visit XXXXX.com or communicate with our practice. This Privacy Policy explains how we collect, use, disclose, and safeguard information in compliance with the European Union General Data Protection Regulation (“GDPR”), the United States privacy laws that apply in the states where we operate (including the California Consumer Privacy Act and similar statutes), and other applicable regulations. If you have any questions, you may contact us at XXXXX@XXXX.COM.
1. Who we are and how to reach us.
XXXXX is a dental clinic with patients in both the European Union and the United States. Our primary place of business is [insert full clinic address and registered entity name]. For EU visitors, XXXXX is the “data controller” responsible for deciding how your personal data are processed. You may reach our data-protection contact at XXXXX@XXXX.COM or by mail at the address above.
2. What information we collect.
When you browse our website we automatically collect certain technical information—such as IP address, device type, browser details, pages visited, and the date and time of each request—through cookies and similar technologies. If you submit a contact or appointment-request form, we will collect the information you provide (typically your name, e-mail address, phone number, preferred appointment time, and any comments). If you sign up for newsletters or marketing communications, we collect your e-mail address and marketing preferences. Because the website is informational only, it is not intended to collect health information subject to the U.S. Health Insurance Portability and Accountability Act (“HIPAA”); any protected health information you share with us is handled offline within our patient-management system under HIPAA safeguards.
3. Cookies, analytics, and tracking.
XXXXX uses Google Analytics to understand how visitors use our site so we can improve its performance and content. Google Analytics places first-party cookies in your browser; these cookies may collect truncated IP addresses and usage statistics. For EU visitors, non-essential cookies (including analytics) are set only after you provide consent via our cookie banner. You can withdraw consent or disable cookies at any time through your browser settings.
4. Why we process your data.
We process personal data to (a) provide and improve the website, (b) respond to enquiries and schedule appointments, (c) send service or marketing communications you have requested, (d) detect and prevent misuse or security incidents, and (e) comply with legal obligations. Our legal bases under the GDPR are your consent (for marketing and analytics cookies), the performance of a contract or steps taken at your request (for appointment requests), our legitimate interests (for basic site functionality and security), and compliance with legal requirements.
5. Sharing and international transfers.
We do not sell your personal information. We may share it with trusted service providers that help us operate the website or manage communications (for example, website-hosting companies, e-mail service providers, and Google Analytics). These providers are bound by contractual confidentiality and data-protection obligations. Because XXXXX is based in both the EU and the U.S., your information may be transferred to countries outside the one in which you reside. When we transfer EU personal data to the United States, we rely on Standard Contractual Clauses or other lawful transfer mechanisms and apply appropriate safeguards such as encryption at rest and in transit.
6. How long we keep your data.
We retain website log data for up to 12 months for security and analytics purposes, contact-form submissions for up to 24 months (unless you become a patient, in which case your data may be transferred into your patient file and retained in accordance with medical-record regulations), and marketing-e-mail subscriber data until you unsubscribe or we learn that your address is no longer valid.
7. Your privacy rights.
If you are in the EU, you have the right to access, correct, erase, restrict, or port your personal data, and to object to certain processing activities. U.S. residents in certain states may have analogous rights to access or delete personal information or to opt out of targeted advertising. To exercise any of these rights, please e-mail XXXXX@XXXX.COM with your request. We will respond within one month (45 days for U.S. state requests) or notify you if we need additional time. You may also lodge a complaint with your local supervisory authority; EU residents can contact the data-protection authority in their member state.
8. Children’s privacy.
Our website is not directed to children under 16 years of age, nor do we knowingly collect personal information from children online. If you believe we have received personal data of a child without parental consent, please contact us and we will delete it.
9. Security measures.
We employ administrative, technical, and physical safeguards—including TLS encryption, access controls, and regular security reviews—to protect your information against unauthorized access, alteration, or disclosure. No internet transmission is completely secure, however, so we cannot guarantee absolute security.
10. Links to third-party sites.
Our website may contain links to external sites we do not control. This Privacy Policy applies only to XXXXX.com; we recommend reviewing the privacy policies of any third-party sites you visit.
11. Changes to this policy.
We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. When we do, we will post the revised version on this page with an updated “Last updated” date. Significant changes will be highlighted or otherwise communicated to you.
By continuing to use XXXXX.com you acknowledge that you have read and understood this Privacy Policy. If you have questions about our privacy practices, please contact us at XXXXX@XXXX.COM.
