Privacy policy

This marketing website and the patient application are separate deployments, on separate domains, with separate databases and separate credentials. They share a visual design and one link. Nothing else.

The consequence is that a tracking tag added to this website is structurally incapable of reaching a page where you enter health information. That is not a promise about what we would choose to do. It is a statement about what the system can do.

This website carries no protected health information. It has no login, no patient records, and no form that asks about your health.

Calls to this practice are answered by an AI assistant and are recorded. You are told both things at the start of every call, before any speech recognition begins, because automated recognition of what you say is itself an interception under Florida law. Your consent is captured and logged with a timestamp. The disclosure is repeated at the end of the call.

If you decline, you are routed to a path that is not recorded. Declining does not affect your ability to become a patient or to be treated.

What the assistant processes

The audio of the call, a transcript, the answers you give to intake questions, and the insurance details needed to check your benefits. Intake answers are summarised for the surgeon by a language model running server-side under a business associate agreement — never in your browser, and never by a consumer AI product.

Clinical red flags in what you report — anticoagulants, bisphosphonates, cardiac history, pregnancy, a prior anaesthetic complication — are detected by rule-based code rather than by the model, and are surfaced to the surgeon whatever the summary says. That is a safety decision, not a privacy one, but it is the reason the model is never the last word on anything.

Recordings and transcripts are retained under the practice’s record retention schedule and are part of your record. You may request access to them on the same terms as the rest of your record.

HIPAA gives you rights over your own record. In summary, you may:

• See and get a copy of your record, usually within 30 days — 45 CFR §164.524.
• Ask for a correction where something is wrong or incomplete — §164.526.
• Get a list of certain disclosures the practice has made — §164.528.
• Ask for a restriction on how your information is used, and require one where you pay in full yourself and ask that the claim not go to your insurer — §164.522.
• Ask to be contacted a particular way, or at a particular address — §164.522(b).
• Get a paper copy of the Notice of Privacy Practices, whenever you ask.
• Be notified if there is a breach affecting your information — §164.404.
• Complain, without any effect on your care.

The full statement of these rights, with the detail HIPAA requires, is in the practice’s Notice of Privacy Practices, which you are given at your first visit and can ask for at any time.

Information is encrypted in transit and at rest, access is limited to those who need it to do their job, and access is logged. No system is perfect, and any practice claiming otherwise is overstating it — what can be said honestly is that the architecture keeps health information out of the places it does not need to be.

Records are retained for the period Florida law requires of a dental practice, and longer for a minor. Call recordings and transcripts are retained under the same schedule as the rest of the record.

This website is not directed at children and does not knowingly collect information from them. A patient under 18 is treated with a parent or legal guardian present, who signs on their behalf.