Privacy Policy

Effective Date: February 10, 2025 Last Updated: February 10, 2025

Dental Website ADA (“Company,” “we,” “us,” or “our”) is committed to protecting the privacy of our customers and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our website or services.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when you:

  • Sign up for an account: Practice name, contact name, email address, phone number, selected package, and billing preferences.
  • Provide website credentials: Website login URLs, usernames, passwords, domain names, and hosting provider information necessary for us to install the accessibility overlay on your website(s).
  • Provide email setup information: Email addresses to be configured with HIPAA-compliant email hosting.
  • Contact us: Any information you include in correspondence with us, such as support requests or feedback.

1.2 Payment Information

We collect payment information (credit card number, expiration date, and billing address) through our third-party payment processor, Stripe. We do not store your full credit card number on our servers. Payment processing is handled entirely by Stripe and is subject to Stripe’s Privacy Policy.

1.3 Information Collected Automatically

When you visit our website, we may automatically collect:

  • Device and browser information: Browser type, operating system, device type, and screen resolution.
  • Usage data: Pages visited, time spent on pages, referring URLs, and navigation patterns.
  • IP address: Your Internet Protocol address, which may indicate your general geographic location.
  • Cookies and similar technologies: See Section 5 for details on our use of cookies.

2. How We Use Your Information

2.1 Service Delivery

We use your information to:

  • Create and manage your account.
  • Install and configure the accessiBe accessibility overlay on your website(s).
  • Set up and manage Hushmail HIPAA-compliant email accounts.
  • Process payments and manage billing.
  • Communicate with you about your account, services, and support requests.

2.2 Service Improvement

We may use aggregated or de-identified information to:

  • Analyze usage trends and improve our website and services.
  • Develop new features or service offerings.
  • Monitor and improve service performance.

2.3 Communications

We may use your email address to:

  • Send account-related notifications (billing confirmations, service updates, password resets).
  • Respond to your inquiries and support requests.
  • Send important notices about changes to our terms, policies, or services.

We do not send unsolicited marketing emails. If we introduce marketing communications in the future, you will have the ability to opt out.

We may use your information to:

  • Comply with applicable laws, regulations, or legal processes.
  • Protect our rights, privacy, safety, or property, and that of our customers or the public.
  • Detect, prevent, or address fraud, security issues, or technical problems.

3. How We Share Your Information

3.1 Third-Party Service Providers

We share your information with the following third-party providers as necessary to deliver our services:

  • Stripe: Payment processing. We share your payment information and basic account details with Stripe to process transactions. Stripe’s Privacy Policy.
  • accessiBe: Website accessibility overlay. We may share your website domain and basic site information to provision the accessibility overlay. accessiBe’s Privacy Policy.
  • Hushmail: HIPAA-compliant email hosting. We share email address information to set up email accounts. Hushmail’s Privacy Policy.

3.2 Website Credentials

When you provide website login credentials for accessibility overlay installation, this information is encrypted using industry-standard AES-256 encryption and stored securely. Access to stored credentials is strictly limited to authorized personnel who require it to perform the services.

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government agency request).

3.4 Business Transfers

If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

3.5 No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Security

4.1 Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

  • AES-256 encryption for stored website credentials.
  • HTTPS encryption for all data transmitted to and from our website.
  • Secure payment processing through Stripe (PCI DSS compliant).
  • Access controls restricting data access to authorized personnel.
  • Regular review of our data collection, storage, and processing practices.

4.2 Limitations

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

4.3 Breach Notification

In the event of a data breach that affects your personal information, we will notify you in accordance with applicable laws and regulations.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help the website recognize your device and remember certain information about your visit.

5.2 Cookies We Use

We may use the following types of cookies:

  • Essential cookies: Required for the website to function properly, such as maintaining your login session.
  • Analytics cookies: Help us understand how visitors interact with our website so we can improve it.

5.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect the functionality of our website.

6. Your Rights and Choices

6.1 Access and Correction

You may access and update your account information at any time by contacting us. We will respond to your request within a reasonable timeframe.

6.2 Account Deletion

You may request deletion of your account and associated personal information by contacting us. Upon such a request, we will delete or de-identify your information within 30 days, except where we are required to retain it by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

6.3 Data Portability

You may request a copy of the personal information we hold about you in a commonly used, machine-readable format.

6.4 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
  • No Sale of Information: We do not sell personal information as defined by the CCPA.

To exercise your CCPA rights, contact us using the information in Section 10.

6.5 European Residents (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, object to processing, and data portability. To exercise these rights, contact us using the information in Section 10.

7. Data Retention

7.1 Retention Period

We retain your personal information for as long as your account is active or as needed to provide you services. After account termination, we retain your data for 30 days to allow for data export requests, after which it is permanently deleted unless retention is required by law.

7.2 Aggregated Data

We may retain aggregated, de-identified data that does not identify you individually for analytical purposes indefinitely.

8. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page. Material changes will be communicated to active customers via email at least 30 days before they take effect. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your rights, or have concerns about how your information is handled, please contact us through the contact information provided on our website.