Privacy Policy
This is not your medical records notice
This policy covers information handled through this website. The protected health information created when we care for you is governed separately by our Notice of Privacy Practices, which you receive at your first visit and can request from either front desk at any time. Where the two overlap, the Notice of Privacy Practices controls your health information.
01Who is responsible for your information
Lighthouse Oral & Maxillofacial Surgery is responsible for the information collected through this site. You can reach us at either office, or by email at [email protected].
02Information you give us
We only ask for what a given request actually needs. Depending on what you use the site for, that may include:
- Appointment requests — your name, phone number, email address, which office you prefer, and whatever you choose to tell us in the message field.
- Doctor referral forms — the referring practice’s details, the patient’s name, date of birth and contact information, the reason for referral, and any radiographs, scans or photographs the referring office uploads.
- Denture and prosthesis lab requests — practice and case details, along with any files attached to the request.
- Photo and video authorization forms — your name, date of birth, signature, and the specific permissions you grant or withhold.
- Event sign-ups — your name and contact details.
Please keep web forms to the information requested. Email and web forms are ordinary internet channels and are not the right place for detailed medical history. If something needs to be discussed in confidence, call the office and we will take it from there.
03Information collected automatically
Our hosting and security infrastructure records standard technical details with each request: your IP address, browser and device type, the pages requested, timestamps, and the page that referred you. We use these records to deliver the site, diagnose errors, and identify and block abusive traffic. We do not use them to build a profile of you.
05How we use information
- To respond to appointment requests and questions.
- To schedule and coordinate surgical care.
- To communicate with referring dental and orthodontic offices about shared patients.
- To fulfill laboratory and prosthesis requests.
- To record and honor the media permissions you grant or withdraw.
- To keep the site secure and functioning.
- To meet our legal, regulatory, and professional obligations.
We do not sell your personal information. We do not rent it, trade it, or hand it to data brokers, and we do not share it for anyone else’s advertising.
06Service providers we rely on
Running the site means a handful of vendors process information on our behalf. They act on our instructions, for the purposes below and nothing else:
| Cloudflare | Domain routing, website hosting and delivery, storage of photo and video files, and cookieless visitor statistics |
|---|---|
| Cloudinary | Image processing and delivery |
| Bunny.net | Video streaming and playback |
| Supabase | Database for site content and form submissions |
| Resend | Delivery of automated notification email |
| Microsoft 365 | Practice email |
| Vercel | Hosting for the private staff content system behind this site |
We may also disclose information when the law requires it, when we must protect someone from harm, or to our own professional advisors in confidence.
07Photographs and videos of patients
No patient photograph or video appears on this site without a signed written authorization from that patient, or from a parent or guardian for a minor. The authorization spells out what may be used and where.
You can change your mind. Call or email us and we will remove your images from this site and stop using them going forward. We will be straightforward with you about one limit: if material has already been reshared by someone else, we cannot reach into their copy. Everything under our control comes down.
08How we protect information
The measures actually in place on this site and the staff system behind it:
- All traffic is encrypted in transit with current TLS, and insecure requests are upgraded automatically.
- Photo and video files live in access-controlled storage rather than on the public web server.
- Administrative access to the content system is limited to authorized practice staff using individual accounts, with passwords stored only as salted hashes.
- The site’s server only accepts requests from a short, explicit list of approved origins.
- A content security policy restricts what code and media the site is permitted to load, which limits the damage any injected content could do.
We want to be plain with you rather than reassuring: no system connected to the internet is perfectly secure, and we make no claim that ours is. What we can tell you is what we have done, which is written above.
09Your choices and requests
You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] or call either office. We may need to verify who you are before we act, which protects you as much as us.
One honest limit on deletion: clinical records must be retained for periods set by Texas law and professional standards, so we cannot always erase everything on request. We will tell you clearly what we can and cannot remove, and why.
10Children
This website is not directed to children, and we do not knowingly collect information from a child through it. When we treat a minor, a parent or legal guardian provides the information and the consent. If you believe a child has submitted information here, contact us and we will remove it.
11Do Not Track signals
Some browsers can send a “Do Not Track” signal. No common standard for honoring it was ever settled, so most sites ignore it silently. In our case the question is moot: we do not run cross-site tracking, so there is nothing here for such a signal to switch off.
12Links to other websites
We link to third parties such as patient financing providers and mapping services. Once you follow one of those links you are on their site, under their privacy policy, and we have no control over or responsibility for how they handle your information. Read their terms before providing anything sensitive.
13Changes to this policy
If this policy changes we will revise the effective date at the top of the page, and we will describe anything significant rather than quietly editing the text.
14Questions
If anything here is unclear, or you want to exercise one of the choices above, email [email protected], call (346) 867-3139 for Memorial or (713) 790-1995 for Medical Center, or ask at either front desk. A person will answer you.