Privacy Policy

Welcome to ToothacheTreatment.com ("Toothache Treatment," "Company," "we," "us," or "our").

At Toothache Treatment, protecting your privacy and maintaining the confidentiality of your personal and health information are important responsibilities.

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process information when you visit www.toothachetreatment.com, create an account, request dental-related services, complete a medical questionnaire, communicate with healthcare professionals, or otherwise interact with our website and services.

Our services may include online dental consultations, evaluation of toothaches, dental infections, broken teeth, gum conditions, and other oral health concerns, subject to applicable laws and professional judgment.

We recognize that information concerning your health is sensitive. We are committed to handling that information responsibly and in accordance with applicable federal and state privacy laws.

We may collect the following categories of information depending on how you interact with our services.

A. Personal Information

• Full name
• Date of birth
• Email address
• Telephone number
• Mailing or billing address
• Account credentials
• Identity verification information
• Payment and transaction information

B. Health and Dental Information

When you request healthcare services, we may collect:

• Dental symptoms and medical complaints
• Medical and dental history
• Current medications and allergies
• Previous diagnoses and treatments
• Photographs or images of affected teeth or gums
• Information provided through clinical questionnaires
• Consultation records
• Treatment recommendations
• Prescription-related information
• Communications with healthcare professionals
• Other information reasonably necessary to evaluate or coordinate your care

This information may qualify as protected health information under HIPAA or as consumer health data under applicable state laws.

C. Technical and Website Information

When you access our website, certain technical information may be collected automatically, including:

• IP address
• Browser and device information
• Operating system
• Website pages accessed
• Date and time of visits
• Referral information
• Cookie identifiers
• Website performance and diagnostic information

Depending on the circumstances, technical information associated with healthcare activities may be subject to heightened privacy protections.

We do not assume that information is non-sensitive merely because it was collected automatically.

We use personal information only for purposes permitted by applicable law, including:

Providing Healthcare Services: To facilitate consultations, review submitted health information, coordinate dental care, support clinical decision-making, and communicate treatment recommendations.

Account Administration: To create and maintain accounts, authenticate users, process transactions, provide customer support, and manage service requests.

Healthcare Operations: To support quality assurance, professional oversight, recordkeeping, regulatory compliance, and operational functions permitted by law.

Security and Fraud Prevention: To detect unauthorized access, investigate suspicious activity, prevent fraud, and protect patients, healthcare professionals, and our systems.

Service Improvement: To improve website functionality, accessibility, performance, and user experience using information and methods permitted by applicable privacy laws.

Legal Compliance: To satisfy lawful obligations, respond to legally valid requests, and protect legal rights.

We do not use protected health information for unrelated advertising or marketing unless the use is permitted by applicable law or supported by any legally required authorization.

Certain healthcare professionals, organizations, or service providers participating in our services may be subject to HIPAA.

Where HIPAA applies, protected health information must be used, disclosed, and safeguarded in accordance with applicable HIPAA requirements.

Toothache Treatment's specific HIPAA responsibilities depend on its legal and operational role, including whether it operates as a covered entity, business associate, or another type of service provider.

Where required, we enter into appropriate Business Associate Agreements with vendors handling protected health information.

We do not represent that all information collected through our public website is automatically protected health information under HIPAA. Information that falls outside HIPAA may still receive protection under other applicable privacy and consumer protection laws.

Patients receiving services from HIPAA-covered providers may receive a separate Notice of Privacy Practices explaining their rights and the provider's legal responsibilities.

We recognize the heightened privacy risks associated with tracking technologies on healthcare websites.

Our website may use cookies and similar technologies for essential website operations, security, preferences, and other purposes disclosed to users.

Where analytics or advertising technologies are used, we evaluate the information those technologies collect and receive, the purposes of processing, and the applicable legal requirements.

We do not authorize third-party advertising platforms to receive protected health information for targeted advertising without a legally valid basis and any required authorization.

We apply heightened restrictions to tracking technologies on pages or features involving:

• Patient account authentication
• Medical and dental intake questionnaires
• Patient dashboards
• Consultation communications
• Treatment and prescription information
• Medical image uploads
• Other activities involving identifiable health information

We do not treat ordinary cookie consent as a substitute for HIPAA authorization when HIPAA authorization is legally required.

Where applicable, users may manage nonessential cookies and exercise legally available opt-out rights through [Cookie Preferences Link].

Certain technical information may be necessary for security and essential website functionality.

We may disclose information only as permitted or required by applicable law and for legitimate purposes associated with providing and operating our services.

Recipients may include:

Licensed Healthcare Professionals: Dentists, physicians, and other authorized healthcare professionals involved in evaluating or coordinating care.

Pharmacies: When a prescription is clinically appropriate and legally authorized, relevant prescription information may be transmitted to a selected pharmacy.

Service Providers: Companies providing hosting, payment processing, communications, security, technical support, or other operational services, subject to appropriate contractual and legal safeguards.

Regulatory and Legal Authorities: Where disclosure is required or otherwise permitted by applicable law.

Business Successors: In connection with a merger, acquisition, restructuring, or transfer of assets, subject to applicable confidentiality, privacy, and healthcare laws.

We do not disclose patient records to third parties merely because they request them.

Where legally required, we obtain authorization before disclosing sensitive health information.

We do not sell identifiable patient medical or dental records as a commercial product.

Any disclosure of personal information for advertising, cross-context behavioral advertising, or other purposes defined as a "sale" or "sharing" under applicable state privacy laws must comply with the relevant requirements, including applicable notice, consent, authorization, and opt-out obligations.

Where required by law, we provide mechanisms to exercise rights relating to the sale or sharing of personal information and targeted advertising.

We do not knowingly sell or share children's personal information in violation of applicable law.

We use administrative, technical, and organizational safeguards designed to protect personal and health information against unauthorized access, disclosure, alteration, destruction, or misuse.

Such safeguards may include, as appropriate:

• Access restrictions based on authorized responsibilities
• Authentication and account security controls
• Encryption and secure transmission methods
• Security monitoring
• Vendor risk management
• Employee confidentiality requirements
• Security assessments and incident response procedures

No website, electronic transmission, or storage system can be guaranteed completely secure.

We therefore cannot guarantee absolute security, but we take our legal responsibilities concerning the protection of personal and health information seriously.

Users should also protect their account credentials and notify us promptly if they suspect unauthorized account activity.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by applicable law.

Medical and dental records may be subject to professional recordkeeping obligations, state retention requirements, contractual duties, or legal preservation requirements.

Retention periods may vary based on the nature of the information, the healthcare professional involved, and the jurisdiction.

When information is no longer required, we take reasonable steps to delete, de-identify, or otherwise dispose of it securely, consistent with applicable requirements.

A request to delete information may not result in deletion of medical records that must legally be retained.

Depending on your state of residence, the nature of the information, and applicable law, you may have rights to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion of eligible information
• Obtain certain copies of your information
• Request information about certain disclosures
• Withdraw consent where legally permitted
• Opt out of certain targeted advertising or data-sharing practices
• Appeal certain privacy request decisions
• Exercise other applicable consumer or patient rights

Individuals whose information is protected by HIPAA may have additional rights under the HIPAA Privacy Rule, including rights concerning access, amendment, accounting of certain disclosures, and confidential communications.

Some rights are subject to legal exceptions and verification requirements.

To submit a privacy request, contact:

We will review and respond to verified requests within the time required by applicable law.

We will not unlawfully discriminate against individuals for exercising their privacy rights.

Residents of certain states may have additional rights concerning personal information or consumer health data.

These may include rights under applicable California privacy laws, Washington's My Health My Data Act, Nevada consumer health data requirements, and other relevant state privacy statutes.

Where applicable, we provide additional notices, consent mechanisms, authorization procedures, or opt-out options required by those laws.

If a separate Consumer Health Data Privacy Notice is required, it will be made available through our website and incorporated into our privacy compliance program.

Nothing in this Privacy Policy limits rights that cannot legally be waived.

We may communicate with users regarding account administration, appointment scheduling, consultation updates, prescription-related coordination, customer service, and other service-related matters.

Electronic communications may involve privacy risks, particularly where messages are accessed on shared devices or through unsecured accounts.

We seek to limit sensitive health information in ordinary email and text messages and use appropriate communication channels based on the nature of the information and applicable requirements.

Marketing communications are subject to applicable consent and opt-out requirements.

Where permitted, users may unsubscribe from promotional emails or opt out of promotional text messages using the instructions provided.

Opting out of marketing does not necessarily prevent necessary transactional, security, or healthcare communications.

When users pay for services, payment information may be processed by authorized third-party payment processors.

Payment processors may collect and process information under their own applicable privacy policies and contractual obligations.

We seek to limit our collection and storage of complete payment card information to what is necessary for legitimate business operations.

Payment-related information is not used for unrelated purposes except as permitted by applicable law.

Our services are not intended for use by children without appropriate involvement or authorization from a parent, legal guardian, or other legally authorized person where required.

We do not knowingly collect children's personal information in violation of applicable law.

The treatment of minors' medical information, parental access, and consent may vary under applicable state and federal laws.

Where we become aware of information collected in violation of applicable children's privacy requirements, we will take appropriate corrective action.

Our website may contain links to external websites, pharmacies, payment services, or other third-party resources.

We are not responsible for the independent privacy practices of third parties that we do not control.

Users should review the applicable privacy policies before providing information to external services.

This provision does not limit responsibilities we may have under applicable law for vendors or service providers acting on our behalf.

If we discover a security incident involving personal or health information, we will investigate and respond according to applicable law and our incident response procedures.

Where notification is legally required, we will notify affected individuals, regulators, healthcare partners, or other appropriate parties within the applicable legal deadlines.

Our response may include containment, investigation, mitigation, remediation, and measures designed to reduce the risk of recurrence.

We may update this Privacy Policy to reflect changes in our services, privacy practices, technologies, or legal obligations.

The revised policy will identify its updated effective date.

Where required by law, we will provide additional notice or obtain consent before implementing material changes affecting the collection, use, or disclosure of personal information.

Updates will not retroactively authorize uses or disclosures that require separate consent or authorization.

If you believe your personal or health information has been handled improperly, you may contact us to submit a privacy complaint.

We will review complaints and take appropriate action consistent with our legal obligations.

Where HIPAA applies, individuals may also have the right to submit complaints to the U.S. Department of Health and Human Services Office for Civil Rights.

We prohibit retaliation for exercising legally protected privacy rights or submitting a good-faith privacy complaint.

For questions, privacy requests, complaints, or concerns regarding this Privacy Policy, please contact:

Nothing in this Privacy Policy creates a guarantee of uninterrupted service, absolute information security, or protection against every potential cybersecurity threat.

This Privacy Policy is intended to describe our actual information practices and applicable responsibilities, not to expand or eliminate rights and obligations established by law.

Nothing in this policy limits any nonwaivable privacy, consumer protection, healthcare, or other statutory rights.

Where a provision conflicts with applicable law, the law controls.