Privacy Policy.

01What we collect

To care for you and run a small dental practice, we collect three kinds of information:

Health information

Medical and dental history, imaging (X-ray, CBCT, intraoral scans), treatment notes, prescriptions, and insurance details — all entered with your consent at intake or during a visit.

Contact information

Name, phone number, email, address, date of birth, and emergency contact. We use this to confirm appointments and send routine recall reminders.

Website information

If you visit smilesbygoh.com, our hosting provider logs your IP address, device, and which pages you visited — standard server logs, retained for 30 days. We use a single, privacy-respecting analytics tool to count visits in aggregate. No cross-site tracking, no advertising pixels, no social-network embeds.

02How we use it

• Treatment. Your clinical record is read by Dr. Goh and the hygienists and assistants on your case.
• Communication. Appointment reminders, recall notices, and follow-ups about treatment you've started.
• Payment. Submitting claims to your dental insurance and processing payments through our merchant.
• Improving the practice. Aggregate, de-identified review of outcomes — never tied to you by name.

03When we share

We share information only as needed and only with these recipients:

• Your insurance carrier, to submit claims and pre-authorisations.
• Specialists we refer you to (e.g. oral surgeon, periodontist), with your consent.
• Our dental laboratory, to fabricate restorations from your scans.
• Service providers bound by HIPAA business-associate agreements (EHR, imaging, secure messaging).
• Law enforcement or public-health authorities, where required by law.

We do not sell, rent, or trade any patient information for marketing or advertising. Ever.

04Your rights

Under HIPAA and Nevada state law, you can:

• Request a copy of your dental record at any time (typically within 30 days).
• Ask us to correct anything in your record you believe is inaccurate.
• Request a list of disclosures we've made in the past six years.
• Opt out of recall and marketing communications without affecting your care.

To exercise any of these rights, see our Notice of Privacy Practices or email smilesbygohteam@gmail.com.

05Security

Records live in an EHR with end-to-end encryption in transit and at rest. Office workstations log out automatically. Physical files — when they exist — are stored in a locked room accessible only to clinical staff. We train every team member on HIPAA at hire and again each year.

06Cookies & analytics

This website uses a single first-party cookie to remember whether you've dismissed our promotional banner. No third-party advertising or social-network cookies are set. Our analytics tool aggregates visits without setting any cookie or fingerprinting your browser.

07Contact

If you have questions about this policy or how we handle your information, write or call our Privacy Officer: