Privacy policy

Who we are and what this policy covers

Issaquah Premier Dental is the practice name of Diana Wu, DDS, PLLC, a dental office at 1740 NW Maple St, Suite 209, Issaquah, WA 98027. In this policy, "we" and "our" mean that practice, and "you" means anyone who visits www.issaquahpremierdental.com.

This policy covers the website. It explains what the site collects when you visit, what we do with it, and what choices you have.

It does not cover your dental record. Health information we collect and keep as your dental provider is protected health information under HIPAA, and it is governed by our Notice of Privacy Practices. If anything here appears to conflict with that Notice as it applies to protected health information, the Notice controls. The Notice is posted at /notice-of-privacy-practices.pdf, and you can ask the front desk for a paper copy at any time.

This website is not a patient portal

Please keep health details out of the message fields on this website and out of email. Our forms and our email inbox are ordinary business channels, not secure clinical ones. Keep your message general, for example "I would like to schedule a cleaning" or "I have a question about a bill," and we will pick up the health part of the conversation by phone or in the office.

If you are a patient and you need to talk about treatment, call the office at (425) 654-8601.

Information we collect

When you fill out the contact form on our homepage, which the contact page links to, we receive your name, email address, phone number, whether you are a new or existing patient, and whatever you write in the message field. The homepage contact form is delivered to our inbox by EmailJS, an email delivery service that sends form submissions on our behalf. The new patient form on our New Patients page is different. It is a Google Form that runs inside our practice's Google Workspace account, which is covered by our HIPAA agreement with Google. It asks for your name, email address, phone number, date of birth, dental insurance company and member ID, the approximate dates of your last cleaning and exam, your preferred day and time, how you heard about us, and a message. What you enter goes into a spreadsheet inside that account that only our scheduling team can open, and we handle it as part of your patient record under HIPAA and our Notice of Privacy Practices. When you email or call us, we receive whatever you send or tell us.

Some information is collected automatically. The site runs on Vercel. Like any web host, Vercel receives technical details of each request, including your IP address, your browser, and the page you asked for, and may keep them in logs for a limited time. We also use Google Analytics 4, described below, which collects information about how visitors move through the site.

Booking an appointment works differently. The Book Online button is a link that takes you off our website to the online scheduler run by Oryx Dental Software, our practice management provider, at mychart.myoryx.com. Nothing you enter there passes through our website. It is handled as part of your patient record under HIPAA and our Notice of Privacy Practices, and Oryx handles it for us as a HIPAA business associate.

How we use it

We use what you send through the form, by email, or by phone to answer you, to schedule or follow up on an appointment, and to keep a record of the conversation as part of running the practice.

We use server logs and analytics to keep the site working, to see which pages people actually use, and to find pages that are broken or confusing.

We do not use anything the website collects to make decisions about your care.

Analytics and cookies

We use Google Analytics 4, a Google service, to understand how visitors use the site. Google Analytics 4 does not log or store IP addresses. It uses cookies and similar technologies to collect the automatic information described above, including approximate location, which Google derives from your IP address before discarding it, the pages you view, and how you arrived at the site. Google processes that data for us, and Google's own description of how it handles data from sites that use its services is at https://policies.google.com/technologies/partner-sites.

The site does not show a cookie consent banner, so here is what that means in practice: analytics and the Google services described in the next section start running when a page loads, without asking you first.

You have two ways to limit this. Google publishes a browser add-on that opts you out of Google Analytics on every site you visit, at https://tools.google.com/dlpage/gaoptout. Your browser also has settings that block or delete cookies, including cookies set by other companies. Blocking cookies will not stop the server logs, which are created by the act of requesting a page.

Google reCAPTCHA and Google Maps

This site is protected by reCAPTCHA, which checks whether a submission to our homepage contact form is coming from a person or from a bot. To perform that check, Google receives information about your device and how you interact with the page.

The contact page also embeds a Google Map so you can find the office. Loading the page loads that map from Google, and Google may set cookies or collect information about your visit through it. If you would rather not load Google's content, the address is written out on that page and at the end of this policy.

Who we share information with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We do rely on a small number of companies to run the website and the practice, and they receive information in order to do that work for us. Vercel hosts the site and keeps the server logs. Google provides analytics, reCAPTCHA, and the embedded map. EmailJS delivers homepage contact form submissions to our inbox. Google Workspace hosts our email and the new patient form. Oryx Dental Software is our practice management provider and runs the scheduling page the Book Online button links to, and it handles patient information on our behalf and is required by HIPAA to protect it.

We may also disclose information when the law requires it, when we need to respond to a lawful request, when it is necessary to protect the rights or safety of our patients, our team, or the public, or in connection with a sale or transfer of the practice.

Washington consumer health data

Washington's My Health My Data Act, RCW 19.373, covers certain health-related information that is not protected health information under HIPAA and not otherwise exempt under the Act. What a visitor types into our forms can fall into that category.

Our Consumer Health Data Privacy Policy covers that information: what we collect, why, who receives it, and the rights the Act gives you. It is published at /consumer-health-data-privacy/ and linked from the footer of every page, including our homepage.

How long we keep information

Form submissions and email stay in our records as long as we need them to answer you and to keep a record of our correspondence, and no longer than that, apart from copies that stay in email backups for a limited time. Server logs and analytics data are kept for the retention periods our hosting and analytics providers apply.

Your dental record is separate. We keep dental records for at least six years from the date of the last treatment, as Washington law requires (WAC 246-817-310). A website inquiry that becomes part of your dental record is kept with that record.

Your choices and rights

For information this website collects, you can:

• ask what we hold about you and ask for a copy;
• ask us to correct or delete the information we hold, and we will tell you what we can reach ourselves and what sits with a service provider;
• opt out of Google Analytics with the add-on linked above, or use your browser's cookie controls; and
• use the rights the My Health My Data Act gives you, in the way our Consumer Health Data Privacy Policy describes.

To make a request, contact us using the details below.

Your rights in your dental record are separate and broader. Those come from HIPAA and Washington law, and our Notice of Privacy Practices describes them and how to use them.

Children

This website is meant for adults arranging dental care for themselves or their families. It is not directed to children under 13, and we do not knowingly collect information from them through the site. If you believe a child has sent us something through the website, contact us and we will delete it, unless a law or a patient record requires us to keep it. Care for a child who is a patient is arranged in the office with a parent or guardian, and it is covered by the Notice of Privacy Practices.

Security

We use reasonable safeguards to protect the information this website collects. No website, email message, or internet connection is perfectly secure, which is why we ask you to keep health details off the form and out of email.

Changes to this policy

We may update this policy. When we do, we will change the last updated date at the top of the page and post the new version here. If a change is significant, we will make a reasonable effort to point it out to visitors.

Contact us

Issaquah Premier Dental
Diana Wu, DDS, PLLC
1740 NW Maple St, Suite 209
Issaquah, WA 98027
Phone: (425) 654-8601
Email: hello@issaquahpremierdental.com

Questions about this policy, or about information the website collected, go to our Office Manager at the email address or phone number above.

Questions about your dental record, protected health information, or your rights under HIPAA go to our Privacy Official, Dr. Diana Wu, DDS, at the same address and phone number.