Privacy Policy

Effective Date: July 20, 2025

Last Updated: September 24, 2026

Elite Prosthetic Dentistry (“we,” “us,” “our,” or “the Practice”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website at eliteprostheticdentistry.com (the “Website”), interact with our online services, or otherwise engage with us through digital means. This Policy applies solely to information collected through the Website and does not apply to information collected offline or through other channels, such as in-person visits to our office.

Please note that as a healthcare provider, we are subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations, including the Health Information Technology for Economic and Clinical Health Act (“HITECH Act”). Protected Health Information (“PHI”) collected in the course of providing medical services is governed by our separate HIPAA Notice of Privacy Practices, which is provided to patients separately. If there is any conflict between this Privacy Policy and our HIPAA Notice, the HIPAA Notice will control with respect to PHI. This Privacy Policy is intended to supplement, not replace, our HIPAA obligations.

By accessing or using the Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not use the Website.

1. Information We Collect

We collect information that identifies, relates to, describes, or is capable of being associated with you (“Personal Information”). The types of Personal Information we may collect include:

a. Information You Provide Directly

• Contact and Identification Information: Such as your name, email address, phone number, mailing address, date of birth, and other demographic details when you fill out forms on the Website, including but not limited to:
  • Requesting an appointment or consultation (e.g., via the “Call Now” or contact form).
  • Downloading our free e-books or guides (e.g., “Cosmetic Dentistry Patient’s Guide”).
  • Subscribing to newsletters, updates, or marketing communications.
  • Submitting questions, comments, or feedback.
• Health-Related Information: If you voluntarily provide details about your dental history, concerns, or needs in forms or communications (e.g., describing symptoms or treatment interests). Note: Any health information submitted via the Website may be treated as non-confidential and non-PHI unless it is part of a secure patient portal or formal medical intake process. We strongly recommend not submitting sensitive health details via unsecured forms; instead, contact us directly for secure transmission.
• Payment Information: If applicable (e.g., for online payments or deposits), details such as credit card numbers, billing address, and payment history. We do not store full payment card details on our servers; these are handled by secure third-party payment processors.

b. Information Collected Automatically

• Device and Usage Information: Such as your IP address, browser type, operating system, device identifiers, pages viewed, time spent on pages, links clicked, and referral sources. Server logs kept by our hosting provider collect this for security and reliability. The analytics technologies described in Section 6 collect it only if you have turned them on.

• Location Information: Approximate location based on IP address, unless you provide more precise location data.

• Cookies and Similar Technologies: Cookies are small data files stored on your device. We use them in three categories:

  • Essential Cookies: Required for the Website to work and to stay secure, for example the security check applied by our hosting provider (Cloudflare) and the record of your own cookie choice. These are always active.
  • Analytics Cookies: Set by Google Analytics 4 to help us understand how the Website is used. Optional. Not set, and the related script not loaded, unless you turn Analytics on in our consent banner.
  • Marketing Cookies: Set by Google Ads and Meta tags to measure our advertising and to show relevant ads. Optional. Not set, and the related scripts not loaded, unless you turn Marketing on in our consent banner.

  Section 6 explains how the consent banner works, where each category is used, and the pages on which we never use optional cookies at all.

c. Information from Third Parties

• Data from analytics providers (e.g., Google Analytics), social media platforms (if you interact via links), or service providers that help us operate the Website.

We do not knowingly collect Personal Information from children under 13 years of age. If we learn we have collected such information, we will delete it promptly.

2. How We Use Your Information

We use your Personal Information for legitimate business purposes, including:

• Providing and improving our services, such as scheduling appointments, responding to inquiries, and delivering requested materials (e.g., e-books).
• Communicating with you, including sending newsletters, promotional offers, appointment reminders, and updates about our Practice.
• Analyzing Website usage to enhance user experience, content, and functionality.
• Marketing and advertising, including personalized content based on your interests.
• Complying with legal obligations, such as responding to subpoenas, court orders, or government requests.
• Protecting our rights, property, or safety, and that of our users or others (e.g., fraud prevention).
• For internal operations, such as auditing, data analysis, and research.

We do not use automated decision-making or profiling that produces legal effects concerning you.

3. Sharing and Disclosure of Your Information

We do not sell your Personal Information in the traditional sense (i.e., in exchange for monetary consideration). However, certain activities on our Website, such as the use of cookies or tracking pixels for interest-based advertising, may constitute “selling” or “sharing” of Personal Information as those terms are broadly defined under the California Consumer Privacy Act (CCPA/CPRA) or similar state laws. Those activities happen only after you have turned on Marketing cookies in our consent banner, and only on the general pages described in Section 6. You may withdraw that choice at any time through the Your Privacy Choices link in the footer of every page, or by submitting a request through our Do Not Sell or Share My Personal Information form. We also treat the Global Privacy Control browser signal as a valid opt-out. We do not rent or trade your Personal Information to third parties for their independent marketing purposes. We may share information as follows:

• Service Providers: With vendors who assist us in operating the Website, such as hosting providers, analytics firms (e.g., Google), email service providers, and payment processors. These parties are contractually obligated to use your information only for our purposes and to maintain confidentiality.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, where your information may be transferred as a business asset.
• Legal Requirements: When required by law, regulation, legal process, or enforceable governmental request (e.g., to law enforcement or in response to a subpoena).
• Protection of Rights: To enforce our terms, protect against harm, or investigate violations.
• With Your Consent: For any other purpose with your explicit permission.

Note: Information submitted via forms may be subject to re-disclosure and may no longer be protected by HIPAA if it is not classified as PHI. We are not responsible for the privacy practices of third parties.

4. Security Measures

We implement reasonable administrative, technical, and physical safeguards to protect your Personal Information from unauthorized access, use, alteration, or destruction. These include encryption, firewalls, access controls, and secure servers. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you transmit information at your own risk.

In the event of a data breach involving Personal Information, we will notify affected individuals as required by applicable law, including HIPAA where PHI is involved.

5. Data Retention

We retain your Personal Information only for as long as reasonably necessary to fulfill the purposes for which it was collected, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on the type of data:

• Contact and inquiry data (e.g., form submissions, email correspondence): Retained for up to three (3) years after your last interaction with us, unless a longer period is required by law.
• Analytics and cookie data: Retained in accordance with the retention settings of the applicable platform. Google Analytics 4 event-level data is retained for no more than fourteen (14) months. Cookie lifetimes are listed in Section 6.
• Marketing communication records: Retained until you unsubscribe or request deletion, plus a reasonable period to process the request.
• Protected Health Information (PHI): Retained in accordance with HIPAA requirements and applicable District of Columbia recordkeeping laws, which generally require retention of dental records for a minimum of ten (10) years for adults and until a minor patient reaches age 21, whichever is longer.

When Personal Information is no longer needed, we will securely delete or de-identify it in accordance with our data management practices.

6. Cookies and Tracking Technologies

a. How consent works on this Website

We use an opt-in model. When you first visit the Website, a bar at the bottom of the page asks for your choice. It offers Accept All, Reject All, and Manage Preferences, which lets you turn Analytics and Marketing on or off separately. The Analytics and Marketing boxes start unchecked. Until you make a choice, no Analytics or Marketing script is loaded and no Analytics or Marketing cookie is set. Only Essential cookies are used while the bar is open, and you can read the page and decide at your own pace.

Your choice is stored in your browser (in local storage under the name epd-consent) for twelve (12) months, after which we ask again. You may change or withdraw your choice at any time by clicking Your Privacy Choices in the footer of every page, which reopens the preferences panel. If you withdraw consent for a category, we delete the first-party cookies for that category that we are able to delete and stop the related scripts. Withdrawing consent does not affect processing that took place while your consent was in effect.

We honor the Global Privacy Control (GPC) signal. If your browser or a browser extension sends it, we treat it as a rejection of all optional cookies, we do not show the consent bar, and we note the signal in the preferences panel. You may still turn a category on yourself afterward if you wish.

b. Pages on which we never use optional cookies

Because we are a healthcare provider, we keep every page where you can send us information, and every page connected to your care, free of third-party analytics and advertising technology under every setting, including after you have accepted cookies. These pages include our appointment request, contact, call-us, and emergency contact pages, referral forms for doctors, confirmation (“thank you”) pages, the patient portal and patient resource pages, the landing pages we use for our own advertising, and this policy and our other legal pages. On those pages the only cookies are Essential cookies.

c. Where each category is used

Analytics (Google Analytics 4) may run, once you have turned Analytics on, on our informational pages (for example service, education, patient success story, second-opinion, decision-guide, and location pages) and on our general pages (for example the home page, pages about the practice and the team, directions, and travel information).

Marketing (Google Ads and Meta) may run, once you have turned Marketing on, only on our general pages. We do not run advertising tags on pages about specific conditions or procedures, or on any page listed in Section 6(b).

d. The technologies we use

Google Analytics 4 (Analytics): A web analytics service provided by Google LLC. It collects information about how the Website is used, such as pages visited, time spent, referral source, device and browser type, and approximate location derived from your IP address. We have turned off Google Signals and advertising personalization for this property, so Google Analytics data from this Website is not used to build advertising audiences. We also use Google’s Consent Mode, which tells Google tags what you have and have not allowed. Google processes this data under its own privacy policy at policies.google.com/privacy. You may additionally block Google Analytics in any browser with the Google Analytics Opt-Out Browser Add-on.

Google Ads via Google Tag Manager (Marketing): Google Tag Manager loads our Google Ads tags, which measure whether our advertising led to a visit, link ad clicks to later actions on our general pages, and build audiences for remarketing. This may constitute “selling” or “sharing” of Personal Information under certain state privacy laws. It is loaded only after you turn Marketing on, and only on our general pages.

Meta Pixel (Marketing): A tool provided by Meta Platforms, Inc. that measures the effectiveness of our advertising on Facebook and Instagram and can be used to show you relevant ads there. This may constitute “selling” or “sharing” of Personal Information under certain state privacy laws. It is loaded only after you turn Marketing on, and only on our general pages.

We do not use session-recording, heat-mapping, or keystroke-capture tools on the Website.

e. Cookies you may see

Cookie	Set by	Category	Purpose	Lifetime
cf_clearance	Cloudflare (our hosting and security provider)	Essential	Confirms your browser passed a security check	Up to 1 year
epd-consent (local storage)	This Website	Essential	Records your cookie choice	12 months
_ga, _ga_*	Google Analytics 4	Analytics	Distinguishes visitors and sessions	Up to 2 years
_gcl_au	Google Ads	Marketing	Links ad clicks to actions on the Website	90 days
_fbp	Meta Pixel	Marketing	Distinguishes visitors for advertising measurement	90 days
fr (set on facebook.com)	Meta	Marketing	Advertising delivery and measurement	90 days
test_cookie, IDE (set on doubleclick.net)	Google	Marketing	Checks cookie support and measures advertising	Up to 13 months

Embedded forms and videos from JotForm and YouTube may set their own cookies when you use them; see Section 7.

f. Other ways to control advertising cookies

You can also control cookies through your browser settings, and you can opt out of interest-based advertising from participating networks through the Network Advertising Initiative at optout.networkadvertising.org or the Digital Advertising Alliance at optout.aboutads.info.

7. Third-Party Links and Services

The Website may contain links to third-party sites (e.g., social media, partners). We are not responsible for the privacy practices or content of these sites. Review their policies before providing information.

The Website also embeds services from third parties that operate under their own privacy policies. Our online forms are provided by JotForm (using its HIPAA-enabled service), which sets its own functional cookies when you open or submit a form and applies its own security check. Videos are embedded from YouTube in privacy-enhanced mode, which sets cookies only when you play a video. Adobe Fonts (Typekit) supplies a typeface and may log the request in its server logs. These embedded services are essential to the features you are using and are not controlled by the Analytics or Marketing settings in our consent banner.

8. Your Privacy Rights and Choices

You have certain rights regarding your Personal Information:

• Access, Correction, and Deletion: Request access to, correction of, or deletion of your data by contacting us.
• Opt-Out: Unsubscribe from marketing emails via the “unsubscribe” link or by contacting us. You may still receive transactional communications (e.g., appointment confirmations).
• Global Privacy Control and Do Not Track: We honor the Global Privacy Control (GPC) signal as an opt-out of optional cookies and of the sale or sharing of Personal Information, as described in Section 6. We do not respond to the older “Do Not Track” browser setting, which has no accepted standard.
• Cookie Consent Withdrawal: You may withdraw or modify your cookie consent at any time by clicking Your Privacy Choices in the footer of any page and updating your preferences. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.
• HIPAA Rights: For PHI, you have rights under HIPAA, including access, amendment, accounting of disclosures, and restrictions. Refer to our HIPAA Notice of Privacy Practices for details.
• Do Not Sell or Share My Personal Information: You have the right to opt out of the “sale” or “sharing” of your Personal Information as those terms are defined under applicable state privacy laws. To exercise this right, you may turn off Marketing cookies through Your Privacy Choices in the footer of any page (which controls the tracking technologies that may constitute selling or sharing), enable the Global Privacy Control signal in your browser, or submit a formal request through our Do Not Sell or Share My Personal Information request form.

California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to Know: You may request that we disclose the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which the information was collected, the business or commercial purposes for collecting or selling the information, and the categories of third parties with whom we share the information.
• Right to Delete: You may request the deletion of Personal Information we have collected from you, subject to certain exceptions (e.g., legal obligations, completing a transaction, internal uses compatible with the context of collection).
• Right to Correct: You may request that we correct inaccurate Personal Information we maintain about you.
• Right to Opt Out of Sale/Sharing: You may opt out of the sale or sharing of your Personal Information for cross-context behavioral advertising, as described above.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit the use and disclosure of your sensitive Personal Information to purposes necessary to perform the services you request.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

Categories of Personal Information Collected: As described in Section 1, we collect identifiers (name, email, phone, IP address), internet activity information (browsing history, interactions with the Website), geolocation data (approximate, from IP), and health-related information (if voluntarily submitted). Categories of Third Parties: We may share this information with service providers (hosting, analytics, payment processing), advertising networks (via cookies, subject to consent), and as required by law.

To submit a verifiable consumer request, contact us using the information in Section 13 below, or use the Do Not Sell form linked above. We will verify your identity before processing the request and respond within 45 days, as required by law.

Other State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have similar rights, including the right to access, correct, delete, and opt out of targeted advertising and the sale of Personal Information. To exercise these rights, contact us using the information below. If we decline your request, you may appeal by contacting us and referencing your original request.

We will respond to verifiable requests within the timeframes required by law. We may deny requests if they are excessive, unfounded, or jeopardize others’ privacy.

9. International Data Transfers

Our servers are located in the United States. If you access the Website from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from your jurisdiction. By using the Website, you consent to this transfer.

10. Children’s Privacy

The Website is not intended for children under 13. We do not knowingly collect information from them. If you believe we have, contact us to request deletion.

11. Changes to This Privacy Policy

We may update this Policy periodically. Changes will be posted here with an updated “Last Updated” date. Continued use of the Website after changes constitutes acceptance. For material changes, we may provide additional notice (e.g., via email).

12. Disclaimers and Limitations

The information on the Website is for general informational purposes only and does not constitute medical advice, diagnosis, or treatment. Consult a qualified healthcare professional for personalized advice. We make no warranties about the accuracy, completeness, or availability of Website content.

TO THE EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, AND SHALL NOT BE LIABLE FOR ANY DAMAGES ARISING FROM USE OF THE WEBSITE OR THIS POLICY, INCLUDING INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES.

This Policy does not create any contractual or legal rights beyond those provided by applicable law.

13. Contact Us

For questions, requests, or concerns about this Privacy Policy or our data practices, contact:

Elite Prosthetic Dentistry
Address: 4400 Jenifer Street NW, Suite 220
Washington, DC 20015
Phone:(202) 244-2101
Email Us

For HIPAA-related inquiries, please review our Notice of Privacy Practices.

Thank you for trusting Elite Prosthetic Dentistry with your privacy.