Privacy Policy
Luxo Mobile Dental Services, Inc. (“Luxo Mobile Dental,” “Luxo,” “we,” “our,” or “us”) is committed to maintaining the privacy, confidentiality, and security of all personal information and protected health information (“PHI”) entrusted to us. This Privacy Policy describes how we collect, use, disclose, and safeguard information obtained through our website and in connection with the provision of mobile dental services.
This Privacy Policy is intended to comply with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the California Confidentiality of Medical Information Act (“CMIA”), the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA/CPRA”), and other applicable state and federal privacy laws.
1. Information We Collect
We may collect the following categories of information:
- Identifiers: Name, email address, phone number, mailing address, and other identifying details.
- Protected Health Information (PHI): Dental records, medical history, treatment information, diagnostic results, insurance information, and related healthcare data
- Financial Information: Payment card details and billing information processed via PCI-compliant platforms.
- Internet/Technical Data: IP address, device identifiers, browser type, geolocation, and interaction data automatically collected through cookies or similar technologies.
2. Purposes for Collection and Use
We collect and use information for the following lawful purposes:
- Delivering dental services, including diagnosis, treatment, and care coordination.
- Appointment scheduling, patient communications, and follow-up care.
- Processing payments, billing, and facilitating insurance or out-of-network reimbursement claims.
- Compliance with HIPAA, OSHA, CDC, and other applicable healthcare regulations.
- Internal operations, including quality assurance, auditing, training, and data security monitoring.
- Responding to legal and regulatory obligations, subpoenas, investigations, or lawful requests by public authorities.
- Marketing, website analytics, and service improvements (subject to applicable opt-out rights).
3. Disclosure of Information
We may disclose personal information and PHI in accordance with HIPAA and other applicable laws:
- To Covered Entities and Business Associates: Service providers, dental laboratories, insurance carriers, billing services, and technology vendors under written agreements that require HIPAA-compliant safeguards.
- For Legal and Regulatory Compliance: As required by law, regulation, or order, including disclosures to state dental boards, public health authorities, or law enforcement agencies.
- For Business Transactions: In connection with mergers, acquisitions, restructurings, or transfers of assets, subject to confidentiality and compliance with applicable law.
- With Patient Authorization: To third parties when a valid HIPAA authorization is executed by the patient.
Luxo Mobile Dental does not sell or rent personal information to third parties.
4. HIPAA Notice of Privacy Practices
This Privacy Policy is distinct from, and supplements, Luxo Mobile Dental’s Notice of Privacy Practices required under HIPAA. Patients will receive the Notice of Privacy Practices at the time of care, which governs the use and disclosure of PHI for treatment, payment, and healthcare operations, as well as patients’ rights under HIPAA.
5. Cookies and Tracking Technologies
Our website may use cookies, pixels, and related tracking tools for operational and analytical purposes. Users may adjust browser settings to decline cookies; however, certain website features may be limited.
6. Data Security
Luxo Mobile Dental employs administrative, physical, and technical safeguards designed to protect information against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include encryption, secure servers, restricted access controls, and HIPAA-compliant electronic systems.
Despite these safeguards, no electronic transmission or storage system can be guaranteed as 100% secure.
7. California Privacy Rights (CCPA/CPRA)
California residents may exercise the following rights subject to applicable exceptions:
- Right to Know: Request disclosure of categories and specific pieces of personal information collected, used, or disclosed.
- Right to Delete: Request deletion of personal information, subject to retention obligations under medical record laws.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out: Direct us not to sell or share personal information (Luxo does not sell personal data).
- Right to Limit Use of Sensitive Information: Request limitations on the use of sensitive personal information, including PHI, consistent with HIPAA and CMIA requirements.
To exercise these rights, please submit a verifiable request via the contact information.
8. Data Retention
Luxo Mobile Dental retains personal information and PHI for the period required by federal and state law, including California’s medical record retention requirements, and as necessary for treatment, payment, operations, and legal obligations.
9. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time. Updates will be posted with a revised “Effective Date.” Continued use of our services following updates constitutes acceptance of the revised policy.
10. Contact Information
Questions regarding this Privacy Policy or the handling of your information may be directed to: