Privacy Policy

Who we are

Dental HIPAA Hub (dentalhipaahub.com) is an independent informational resource for US dental practices. We are not affiliated with HHS, OCR, or any government agency. We are not a HIPAA Business Associate — we do not handle Protected Health Information (PHI) on behalf of any covered entity. Our contact email is info@dentalhipaahub.com.

Important note: we do not handle PHI

Dental HIPAA Hub is an informational website. We do not store, process, or transmit Protected Health Information (PHI) from dental patients. If you are a dental practice looking for a HIPAA Business Associate Agreement (BAA), that agreement is with your software vendors — not with us.

Information we collect

We collect information only in the following circumstances:

• Email address — when you voluntarily submit your email through our HIPAA Risk Calculator or guide email capture forms. We use this to send the requested resource and occasional compliance updates. Submission is always voluntary.
• Purchase information — when you purchase the SOP Kit, PayPal processes the transaction. We receive your email address to deliver the product. We do not store credit card numbers or payment credentials.
• Usage data — Vercel (our hosting provider) collects anonymized page view data: pages visited, approximate country-level location, device type. This data contains no personally identifiable information and is not linked to any individual.

We do not use third-party advertising trackers, behavioral ad networks, or pixel tracking from social media platforms.

How we use your information

• To deliver requested resources (checklists, guides, SOP Kit)
• To send compliance update emails if you have opted in — you may unsubscribe at any time via the link in any email or by contacting us directly
• To improve site content based on anonymized usage patterns

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Email communications & unsubscribe

If you submitted your email address, you may receive follow-up emails from Dental HIPAA Hub. Every email includes a one-click unsubscribe link. You may also unsubscribe by emailing info@dentalhipaahub.com with "unsubscribe" in the subject line. We honor all unsubscribe requests within 10 business days, as required by CAN-SPAM.

Cookies

We do not use tracking cookies for advertising or behavioral profiling. Vercel (our hosting provider) may set technical cookies necessary for site delivery and performance measurement. We do not use third-party advertising networks that set persistent cookies.

California residents (CCPA)

California residents have the right to: know what personal information we collect, request deletion of that information, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights under the California Consumer Privacy Act, contact us at info@dentalhipaahub.com. We will respond within 45 days as required by law.

EU/EEA residents (GDPR)

If you are located in the EU/EEA, your personal data (email address) is processed on the legal basis of consent (Article 6(1)(a) GDPR), given when you voluntarily submit your email. You have the right to access, rectify, erase, or port your data, and to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise these rights, email info@dentalhipaahub.com. We will respond within 30 days.

Data retention

Email addresses are retained while you remain subscribed. Upon an unsubscribe request, your email is removed from our mailing list within 10 business days. Purchase transaction records are retained for the period required by applicable tax law (typically 7 years). Anonymized analytics data has no retention limit as it cannot identify individuals.

Third-party services

We use the following third-party services that may process data on our behalf:

• Resend — email delivery. Processes email addresses for outbound delivery only.
• PayPal— payment processing. Governed by PayPal's own privacy policy. We do not receive or store full payment details.
• Vercel — hosting and anonymized analytics. Their privacy policy governs data processed on their infrastructure.

Data security

We implement reasonable technical and organizational measures to protect the information we hold. Our site is served over HTTPS. Email addresses collected through our forms are stored in access-controlled systems. No internet transmission is 100% secure — we encourage you to contact us promptly at info@dentalhipaahub.com if you believe your information has been compromised.

Not legal advice

All content on Dental HIPAA Hub is for informational purposes only. Nothing on this site constitutes legal or compliance advice. Consult a qualified healthcare attorney or HIPAA compliance professional for advice specific to your practice.

Changes to this policy

We may update this policy periodically. The "last updated" date at the top reflects the most recent revision. We will post a notice on the site for material changes. Continued use of the site after a posted change constitutes acceptance of the updated policy.