Effective September 13, 2026. This policy describes how we handle information through this website. It does not replace our Notice of Privacy Practices for patient records.

1. Scope of this policy

Tooth Acres Dentistry ("we," "us," or "our") operates the website at toothacresmountdora.com. This policy applies to information collected through this website, including appointment requests, cookie choices, and emails sent to the office. Information created or maintained as part of dental care is handled under the practice's separate Notice of Privacy Practices. Please contact the office for a copy of that notice or with questions about patient records.

2. Information collected through the website

Information you provide directly

Appointment requests. Your name, phone number, optional email, service of interest, preferred date or time, the concerns you choose to describe, and your communication choices.
Communications. Information you provide when you call or email the office, including contact details and the contents of your communication.
Consent choices. Whether you agreed to appointment follow-up, optional text messages, optional marketing email, and each cookie category.

The public appointment form is for scheduling and general communication, not detailed medical or dental intake. Please do not submit diagnoses, medications, insurance numbers, government identifiers, payment-card information, or other sensitive health or financial details through it. Call the office for the appropriate way to provide sensitive information. If you have a life-threatening emergency, call 911.

Information collected automatically

Essential website data. Security and delivery systems necessarily process information such as IP address, request time, browser details, and requested page to deliver and protect the site. Infrastructure providers may keep security and operational logs under their own retention practices.
Cookie choices. We store a random, non-identifying browser ID, the categories selected, consent-policy version, action, timestamp, and the website path where the choice was made. The consent record does not include a name, email, phone number, full URL, query string, or user-agent string.
Optional measurement data. If an analytics service is enabled and you consent, it may receive a cleaned page path, generic interaction event, browser or device information, and campaign tags from an approved allowlist. Form values are excluded. Analytics and advertising services are not currently running because no active measurement or pixel ID is configured.
Map data. Google Maps receives ordinary connection and browser data only after you choose “Load map.” The embedded map is configured not to receive the referring page address from this site.
Financing tool data. Cherry is contacted only after you select the button to view Cherry financing options. Cherry then receives ordinary connection and browser data and separately handles any information you choose to enter into its financing experience under its own terms and privacy practices. Appointment-form details are not sent to Cherry by this website.

3. Cookies, analytics, and advertising

The website uses a default-deny consent system. Strictly necessary technology may run to deliver the site, prevent abuse, submit forms, and remember your choices. Functional, analytics, marketing, and advertising technology stays off unless you affirmatively allow its category. Dismissing or ignoring the banner does not grant consent.

You may accept all, reject non-essential technology, choose categories individually, or withdraw a choice at any time through . When a category is withdrawn, the site stops future use and attempts to remove the related first-party cookies and storage it can control. Browser restrictions may prevent us from deleting a cookie set directly by another provider.

Strictly necessary: site delivery, security, form submission, abuse prevention, and remembering privacy choices. Always on.
Functional: remembers optional site and accessibility preferences and enables a map only when requested.
Analytics: measures aggregate site use with restricted, sanitized information so we can improve the website.
Marketing: would support optional campaign or email measurement. No marketing-tracking provider is currently enabled.
Advertising: may measure advertisements on non-sensitive pages only after consent and separate approval. Advertising technology is blocked throughout the appointment process and on treatment or condition pages, even if this category was allowed elsewhere.

Our current, itemized technology status, cookie names, purposes, and durations are published in the Privacy Center. That inventory also identifies tools that are available in code but not currently enabled, and tools that are prohibited or removed.

4. How we use information

Respond to and coordinate appointment requests and office communications.
Provide optional appointment-related text messages when requested.
Record an optional marketing-email choice when separately selected. No patient marketing-email platform is currently enabled through this website.
Deliver, maintain, secure, troubleshoot, and prevent abuse of the website.
Remember and honor cookie choices.
Measure site performance or campaigns only with the applicable permission.
Comply with applicable legal obligations and protect legal rights.

5. How appointment information is handled

Appointment requests are submitted to a first-party website endpoint, processed through our managed backend and transactional-email service, and delivered to the office so the team can respond. The site does not place what you type into analytics or advertising event payloads. Measurement is limited to generic events such as whether a request was started, completed, failed, or contained validation errors; those events do not include field names or values.

6. Healthcare-sensitive browsing safeguards

Treatment and condition pages, contact and new-patient pages, and the appointment workflow receive additional safeguards. Advertising and marketing technology is blocked on those pages. Before any permitted analytics measurement, the site removes unapproved query parameters, substitutes a generic title for sensitive pages, and omits the referrer. We do not use session replay, heatmaps, keystroke capture, or third-party chat and scheduling widgets on this website.

7. Service providers and disclosures

We disclose information to providers that help us operate the website and respond to requests, subject to their services and our configurations. Current categories include:

Website hosting, delivery, and security providers that process ordinary connection and request data.
Managed backend and email-delivery providers that process appointment requests, consent records, and delivery records.
Google Maps after you choose to load it.
Cherry after you choose to load its financing tool or continue to its website. Cherry independently handles financing eligibility, applications, and payment plans under its own terms and privacy practices.
Optional analytics or advertising providers only when currently enabled, allowed by your choice, and permitted on the page you visit.

We may also disclose information when required by law, to protect safety or legal rights, or as part of a business transaction subject to appropriate safeguards. See the Privacy Center for the current technology inventory. Contractual and Business Associate Agreement requirements for providers that may handle patient or prospective-patient information remain subject to practice and legal review.

8. Retention

Appointment requests submitted through this website are not stored in any website database. They are delivered to the practice office as a message and retained only within the practice's own office systems. We retain other information only for the period reasonably needed for the purpose described, security and operational needs, legal obligations, dispute resolution, and applicable recordkeeping requirements. The practice's final retention schedule for consent records, email-delivery records, and provider logs is under privacy-officer and legal review. Where a provider controls retention, its applicable settings and terms also apply.

9. Your choices and privacy requests

Cookie choices. Open at any time. Rejecting non-essential technology does not prevent you from using the core website or submitting an appointment request.
Access, correction, or deletion. Ask whether we hold personal information about you, request access or correction, or ask us to delete it. Some information may need to be retained where permitted or required by law.
Email and text choices. Marketing email includes an unsubscribe method if that program is activated. For optional appointment texts, reply STOP to opt out. Service messages needed to respond to a request may still be sent through the method you asked us to use.
Verification and appeals. We may need to verify a request before acting on it. Rights and appeal options vary by location; contact us for assistance.

Submit a request through the contact information in Section 16 or use the Privacy Center. We will not discriminate against you for exercising an applicable privacy right.

10. Sale, targeted advertising, and sensitive information

We do not sell personal information for money. The website's current technical rules prohibit advertising providers from receiving form values, appointment details, direct identifiers, or visits to healthcare-sensitive pages. Because some state laws define “sale,” “sharing,” targeted advertising, and sensitive information differently, the practice's state-specific disclosures and opt-out obligations require attorney review. Until that review is complete, non-essential advertising remains consent-controlled and restricted as described above.

11. Children's privacy

We provide family dentistry, but this website is directed to adults making decisions for themselves or their families. A parent or legal guardian should submit any request for a child. We do not knowingly seek personal information online directly from children under 13. A parent or guardian who believes a child submitted information may contact us to request review or deletion, subject to applicable recordkeeping requirements.

12. Security

We use reasonable administrative and technical safeguards designed to reduce risk, including encrypted transmission, access restrictions, input validation, anti-spam controls, restrictive browser security policies, limited third-party destinations, and data minimization. No website, email, or internet transmission can be guaranteed fully secure. Please call the office instead of using the public form for sensitive details.

13. External links and services

Links may lead to services we do not control, including maps, social media, and review platforms. Their privacy practices apply once you leave this website or choose to load their content. Review their policies before providing information.

14. International visitors

Our office is located in the United States and our website is intended for U.S. visitors. If you access the site from outside the U.S., your information will be processed in the United States. International transfer terms and rights vary by location and require legal review.

15. Changes to this policy

We may update this policy as the website, providers, or legal requirements change. We will revise the effective date above and provide additional notice when appropriate. A material change to optional tracking may require a new consent choice.

16. Contact us

For privacy questions or to request access, correction, or deletion, contact:

Tooth Acres Dentistry
110 Waterman Avenue, Mount Dora, FL 32757
Phone: (352) 383-4414
Email: office@toothacresmountdora.com

Privacy Policy