Effective Date: November 18, 2025

Finger Lakes Endodontics (“we,” “our,” or “us”) is committed to protecting your privacy and maintaining the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://fingerlakesendodontics.com and when you receive dental services from our practice.

1. INFORMATION WE COLLECT

Protected Health Information (PHI) When you become a patient, we collect and maintain health information necessary to provide quality dental care, including:

• Personal identification information (name, address, phone number, email, date of birth, Social Security number)
• Medical and dental history
• Treatment records and clinical notes
• Diagnostic images (X-rays, scans)
• Insurance information
• Payment and billing records

Website Information When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Device information

Information You Provide

• Contact form submissions
• Appointment requests
• Email communications
• Phone call records
• Mobile phone numbers for SMS communications

2. HOW WE USE YOUR INFORMATION

Treatment, Payment, and Healthcare Operations We use your protected health information to:

• Provide, coordinate, and manage your dental treatment
• Process insurance claims and billing
• Conduct quality assessment and improvement activities
• Train our staff
• Comply with legal and regulatory requirements

Website and Communications We use information collected through our website to:

• Respond to your inquiries
• Schedule appointments
• Send appointment reminders via email, phone, or SMS text message
• Provide information about our services
• Improve our website functionality
• Analyze website usage and traffic patterns

SMS Text Messaging If you opt-in to receive SMS text messages from us, we may use your mobile phone number to send appointment reminders, practice updates, and customer care messages. No mobile opt-in message consent will be shared with third parties or affiliates for marketing purposes.

3. HOW WE SHARE YOUR INFORMATION

We may share your information in the following circumstances:

With Your Consent We will share your health information with other healthcare providers, family members, or others when you give us written authorization.

Treatment, Payment, and Healthcare Operations

• Other healthcare providers involved in your care
• Insurance companies for payment and coverage determinations
• Business associates who perform services on our behalf (billing companies, IT providers, consultants)

SMS Text Messaging No mobile opt-in message consent will be shared with third parties or affiliates for marketing purposes.

Required by Law

• Public health authorities
• Law enforcement officials
• In response to court orders or subpoenas
• To prevent serious threats to health or safety
• For workers’ compensation purposes
• To report abuse, neglect, or domestic violence when required

4. YOUR RIGHTS UNDER HIPAA

As our patient, you have the following rights regarding your health information:

• Right to Access: You may request to inspect and obtain copies of your health records
• Right to Amend: You may request corrections to your health information
• Right to an Accounting: You may request a list of certain disclosures we have made
• Right to Request Restrictions: You may request limitations on how we use or disclose your information
• Right to Confidential Communications: You may request that we contact you in a specific way or at a specific location
• Right to a Paper Copy: You may request a paper copy of this Privacy Policy at any time
• Right to be Notified of a Breach: You will be notified if your unsecured health information is breached

5. COOKIES AND TRACKING TECHNOLOGIES

Our website may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small data files stored on your device. You can control cookie preferences through your browser settings, though disabling cookies may limit some website functionality.

6. THIRD-PARTY SERVICES

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

7. DATA SECURITY

We implement appropriate physical, technical, and administrative safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure storage of physical records
• Encryption of electronic health records
• Access controls and authentication requirements
• Regular security assessments
• Staff training on privacy and security practices

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. CHILDREN’S PRIVACY

Our services may be provided to minors. When treating patients under 18, we collect and maintain health information as necessary for treatment. Parents or legal guardians have the right to access their child’s health records, subject to applicable state and federal laws.

9. RETENTION OF INFORMATION

We retain your health records in accordance with federal and state laws, which typically require maintaining records for a minimum of 6-7 years after your last visit. Some records may be retained longer as required by law or for legitimate business purposes.

10. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting to our website. We will provide notice of material changes through our website or by other appropriate means. The updated policy will apply to all information we maintain.

11. NOTICE OF PRIVACY PRACTICES

This Privacy Policy is supplemented by our HIPAA Notice of Privacy Practices, which provides additional detail about how we use and disclose your protected health information. You will receive a copy of our Notice of Privacy Practices at your first visit to our office.

12. SMS TEXT MESSAGING TERMS AND CONDITIONS

If you consent to receive SMS from Finger Lakes Endodontics, you agree to receive customer care text message SMS from us. Reply STOP to unsubscribe; Reply HELP for help; msg & data rates may apply; Messaging frequency may vary. Visit https://fingerlakesendodontics.com/privacy-policy to see our privacy policy and terms and conditions.

By providing your mobile phone number and opting in to receive text messages, you consent to receive automated appointment reminders, practice updates, and other customer care messages from Finger Lakes Endodontics. You may opt out at any time by replying STOP to any message. Message and data rates may apply depending on your mobile carrier and plan. Message frequency varies based on your appointment schedule and practice communications.

13. CONTACT US

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to file a complaint, please contact us:

Finger Lakes Endodontics 964 College Ave, Elmira, NY 14901 Phone: (607) 732-9915

You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated:

Office for Civil Rights U.S. Department of Health and Human Services 200 Independence Avenue, S.W. Washington, D.C. 20201 Phone: 1-877-696-6775 Website: www.hhs.gov/ocr/privacy/hipaa/complaints

We will not retaliate against you for filing a complaint.