Privacy Policy

Effective date: November 10, 2026

1. Who we are and what this policy covers

GLOW DNTL ("we", "us", "our") operates this website, glowdntl.com. This Privacy Policy explains what information we collect when you visit the website or contact us through it, how we use and share that information, and the choices and rights you have.

This policy covers:

This website, including its pages, online forms, appointment requests, online booking and online consultations
Chat, text messages, emails and phone calls that start from the website or our online ads
Our online advertising and the measurement of it

This policy does not cover health information we create or receive while providing you care. That information is protected health information under the Health Insurance Portability and Accountability Act (HIPAA) and is covered by our Notice of Privacy Practices (available at our office and on request). If this policy and the Notice of Privacy Practices differ about your health information, the Notice of Privacy Practices controls.

By using this website, you agree to this Privacy Policy, including Section 7 (Your consent to monitoring and recording). If you do not agree, please do not use the website, and contact us by phone at (949) 781-0050 instead.

2. HIPAA, your health information and our Notice of Privacy Practices

We are a health care provider covered by HIPAA. Protected health information (PHI) is information that identifies you and relates to your health, your care or payment for your care, such as your appointments, treatment, records and insurance.

We use and disclose PHI only as our Notice of Privacy Practices and HIPAA allow.
Our vendors that create, receive, keep or send PHI for us sign business associate agreements and must protect it as HIPAA requires.
Much of the information collected through a website is not PHI, for example a visit to a public page about a service. Some website information can be PHI, for example the details you submit when you request or book an appointment. We treat that information as PHI.
We do not sell PHI.
Our advertising measurement messages never include your name, your health information or the reason for your visit (Section 10). Advertising and analytics tags from partners such as Google and Meta run in your browser and may receive your IP address, browser details, cookies and the page you are on, as Sections 4 and 5 describe.

To use your HIPAA rights (for example, to get a copy of your records), follow the steps in our Notice of Privacy Practices or contact our Privacy Officer at (949) 781-0050.

3. Information you give us

We collect the information you choose to give us, including:

Contact details: name, email address, phone number, mailing address
Appointment requests and online booking: preferred date, time and location, whether you are a new or existing patient, the service you are interested in, insurance carrier and member details if you enter them
Messages: what you write in website forms, chat, email and text messages
Photos and files you upload: for example, smile or skin photos you send for a consultation or estimate
Payment information: card details you enter to pay a bill or deposit. These go directly to our payment processor; we do not store full card numbers on the website
Reviews and feedback: survey answers, ratings and comments
Communication choices: whether you agree to receive text messages, emails or calls, and when you opt out
Job applications: resume and contact details, if our website accepts applications

Please do not include detailed medical information in a website form or chat unless the form asks for it. We may ask you for more information when you become our patient; that information is covered by our Notice of Privacy Practices.

4. Information collected automatically

When you visit the website, we and our service providers collect some information automatically using the technologies in Section 5:

Device and browser: device type, operating system, browser, language, screen size and time zone
Network and location: your IP address, and the approximate city, region and country it suggests. Our own website analytics tool reads only the approximate location and does not store your IP address; some of our advertising and analytics partners receive it
How you arrived: the website, search engine or ad that sent you, campaign tags in the web address, and ad click identifiers (codes an ad platform adds to the link when you click an ad)
What you do on the website: pages you view, how long you stay, scrolling, mouse movement, clicks and taps, links and buttons you use, and whether you start or send a form (not what you type, unless you send the form)
Identifiers stored in your browser: cookies and similar codes that recognize your browser on later visits

We do not collect precise location (GPS) through the website.

5. Cookies, pixels, tags and similar technologies

Our website uses cookies (small files in your browser), browser storage, pixels, tags and scripts. Some are ours and some belong to service providers and partners. Our notice lets you choose which ones run (Section 7). They fall into these groups:

Essential: always on. Makes the website work: pages, forms, booking, security and remembering your privacy choice. Examples: our website host, form and booking tools, spam protection such as Google reCAPTCHA
Analytics: counts visits and shows how people use the website, including where people click, tap and scroll on each page, so we can improve it. Examples: Google Analytics and our website analytics tool
Advertising measurement: tells an ad platform when someone who clicked one of its ads sends a form or books an appointment (Section 10). Advertising tags from partners such as Google Ads, Microsoft Advertising and Meta (Facebook and Instagram) may also show our ads and measure them
Call tracking: shows a phone number that tells us which ad or page led to a call
Chat and messaging: runs the chat window and saves the conversation
Accessibility: offers display and reading tools, where shown

When they run. In Washington, Nevada and outside the United States (except Mexico), only Essential technologies run until you select "Accept" on our notice. Everywhere else, Analytics and Advertising measurement start when a page loads, and you can turn them off at any time with "Privacy choices" or "Reject". If your browser sends a Global Privacy Control signal, our website analytics tool does not run and we send nothing about your visit to advertising partners.

Until December 1, 2026: Google Analytics and the advertising partners' tags already on the website (for example Google Ads and Meta) may still run when a page loads, whatever you choose. On December 1, 2026 we remove the advertising partners' tags from the website, and Google Analytics then follows your choice.

Partners that set their own cookies use the information under their own privacy policies, for example Google. Section 12 explains how to limit these technologies.

6. No visit recordings

We do not record your visits to this website. Our website analytics tool counts where people click, tap and scroll on each page, so we can see which parts of the website help patients, without recording your screen or anything you type. It does not store your IP address.

7. Your consent to monitoring and recording

Our notice tells you about the technologies in Section 5 when you first visit.

In Washington, Nevada and outside the United States (except Mexico): when you select "Accept", you agree that we and our service providers may collect, monitor and record your activity on this website as Sections 4 and 5 describe, including analytics, advertising measurement and call tracking. If you select "Reject", only Essential technologies run.
Everywhere else: by continuing to use this website, you agree to the same. You can withdraw at any time with "Privacy choices" or "Reject".

You also agree that:

Our service providers receive and record those communications on our behalf, to provide services to us, under written contracts that limit how they use them.
We may share information with advertising and analytics partners as described in Section 10.

You give this consent for the federal Electronic Communications Privacy Act and for state laws that require consent to record or intercept communications, including the California Invasion of Privacy Act and similar laws in Florida, Pennsylvania, Washington, Maryland, Massachusetts and other states.

To change or withdraw your consent, use "Privacy choices", turn on Global Privacy Control in your browser, or clear or block cookies and site data, and contact us to ask about information already collected (Section 14). Withdrawing does not affect what was collected before. Section 5 explains the tags that may still run until December 1, 2026.

8. How we use information

We use the information described above to:

Answer your questions, schedule and confirm appointments, and send reminders
Prepare estimates and treatment information you ask for
Communicate with you by phone, text, email and chat, including, with your permission, about offers and services
Run, maintain and improve the website, and fix problems
Understand how people find and use the website, and which pages and ads lead to appointment requests
Show and measure our advertising (Section 10)
Keep the website and our systems secure, and prevent fraud, spam and misuse
Meet legal, regulatory and record-keeping requirements, and protect our rights
Do anything else we tell you about when we collect the information, or with your consent

Our service providers may use software, including artificial intelligence, to help answer messages, draft replies and estimates, transcribe calls and summarize information for our team. They do so on our behalf and under the same limits as everything else in this policy.

We may create information that is de-identified or combined with other people's, so it no longer identifies you, and use it for any lawful purpose. We will not try to re-identify it.

9. How we share information

We do not sell your personal information for money. We share it only as follows:

Service providers: website hosting, marketing and website analytics software, patient communication and scheduling tools, call tracking, payments, IT and security. Written contracts limit their use to providing services to us. Those that handle PHI sign business associate agreements
Advertising and analytics partners: showing and measuring our ads, counting visits, as described in Section 10. They use the information under their own privacy policies
Professional advisors: lawyers, accountants, auditors and insurers, under confidentiality duties
Authorities and others when the law requires: responding to subpoenas, court orders and lawful requests; protecting the safety, rights or property of our patients, our team or others. Only what is required or permitted by law
A buyer or successor: if our practice, or part of it, is sold, merged or transferred. The new owner must protect the information as this policy describes
Anyone you direct us to: for example, a family member or another provider you ask us to contact, with your consent

Our service providers may also use information that is de-identified or combined with other people's to provide and improve their services.

10. Advertising and analytics partners; sale and sharing

We advertise on platforms such as Google, Microsoft (Bing) and Meta (Facebook and Instagram). These partners may collect information about your visit through their cookies, pixels and tags, combine it with what they know from other websites and apps, and use it to show you our ads and measure them.

How we measure our ads. When someone sends a form on the website, books or requests an appointment online, or comes in for a visit after clicking one of our ads, we or our service providers may tell the ad platform that a result happened. That message is limited to:

The ad click identifier, if you clicked one of our ads
The time and a random record number
An event name that names no treatment or condition, for example "website form"
For some results, an estimated value: one average value for our practice, never your own amount
For Meta only: your browser type, the website's address (its home page, never the page you were on)

Only the ad platform whose ad you clicked receives the message. Our advertising measurement messages never include your name, email address, phone number, IP address, your health information or the reason for your visit.

Sale and sharing under state laws. Some state privacy laws treat letting advertising partners collect information through cookies and pixels for targeted ("cross-context behavioral") advertising as a "sale" or "sharing" of personal information, even when no money changes hands. To the extent our advertising is a sale or sharing, the categories involved are identifiers (cookie IDs, ad click identifiers, IP address), internet activity on this website and approximate location. You can opt out as described in Section 12. We do not knowingly sell or share the personal information of anyone under 16.

11. Calls, text messages, emails and chat

Phone calls. Phone numbers on the website or in our ads may be tracking numbers that tell us which ad or page led to your call. Calls may be recorded and transcribed for quality, training and scheduling, where the law allows. When a call you make to us is recorded, you will hear a recording notice at the start of the call, and when an automated assistant answers or places a call, you will hear a notice at the start of the call that it is an automated assistant; staying on the line means you agree.

Text messages. If you give us your mobile number and agree to receive texts, we may send appointment confirmations, reminders and, if you opt in, offers. Message frequency varies. Message and data rates may apply. Reply STOP to stop and HELP for help. Agreeing to marketing texts is not a condition of any purchase or of receiving care. We do not share your mobile number or text opt-in with third parties for their own marketing.

Emails. You can stop marketing emails with the unsubscribe link in any of them. We may still send messages about your appointments and account.

Chat. Messages you send in the website chat are saved and may be answered first by an automated assistant, with our team following up. Please do not share detailed medical information in chat.

12. Your choices

Privacy choices: select Privacy choices to accept, reject or choose which technologies run. Your browser keeps your choice for up to 180 days
Global Privacy Control: turn it on in your browser or with a browser extension. Our website analytics tool then does not run and we send nothing about your visit to advertising partners; until December 1, 2026, Google Analytics and advertising partners' tags may still run (Section 5). Where the law requires, we also treat the signal as your request to opt out of the sale or sharing of your personal information for that browser
Opt out of sale or sharing for targeted advertising: use Privacy choices or Global Privacy Control, or contact us (Section 21). Online opt-outs work per browser and device
Cookies: block or delete cookies in your browser settings. Some parts of the website, such as booking, may not work without essential cookies
Interest-based ads: Google Ads Settings, the Network Advertising Initiative, the Digital Advertising Alliance, and your Facebook and Instagram ad settings
Google Analytics: the Google Analytics opt-out browser add-on
Text messages: reply STOP
Marketing emails: use the unsubscribe link

Do Not Track. Browsers send Do Not Track signals in different ways, and there is no common standard for them. We do not respond to Do Not Track signals; we do honor Global Privacy Control as described above.

13. Consumer health data (Washington, Nevada, Connecticut and similar laws)

This section applies to residents of Washington and Nevada, and to anyone covered by a similar state consumer health data law. It does not apply to PHI, which HIPAA covers (Section 2).

What we collect: information that could suggest you are looking for health care, such as the service pages you view, appointment requests, booking details, messages, and the photos you send for an estimate (Sections 3 and 4).
Where it comes from: you, your browser and device, and our service providers.
Why we collect and use it: to answer you, schedule and provide the services you ask for, run and improve the website, and measure our advertising (Section 8).
Who receives it: our service providers, and advertising and analytics partners through the tags described in Sections 5 and 10. In Washington and Nevada, our analytics and advertising measurement wait until you select "Accept" on our notice, except that until December 1, 2026, Google Analytics and advertising partners' tags already on the website may still run when a page loads (Section 5).
What we never do: we do not sell consumer health data, and we do not set up geofences around health care facilities to track people or send them ads.
Your consent: we collect consumer health data to provide what you ask for and, in Washington and Nevada, through the technologies in Section 5 only after you select "Accept" (Section 7), except as Section 5 explains for the tags that may run until December 1, 2026. You can withdraw consent at any time with Privacy choices (Section 7).
Your rights: to confirm whether we collect, share or sell your consumer health data; to get a list of the third parties and affiliates that received it; to have it deleted; and to withdraw consent. Make a request as described in Section 14. If we deny your request, you can appeal, and if the appeal is denied you can file a complaint with your state Attorney General.

14. State privacy rights and how to use them

Depending on where you live, and to the extent a state privacy law applies to us, you may have the right to:

Know and access the personal information we collect about you, and get a copy in a portable format
Correct inaccurate personal information
Delete personal information, with exceptions the law allows (for example, records we must keep)
Opt out of the sale or sharing of personal information, targeted advertising and certain profiling
Limit the use of sensitive personal information
Not be treated differently for using these rights

These rights come from laws in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states. Many of these laws do not apply to PHI, which HIPAA covers.

California. In the last 12 months we collected these categories of personal information:

Identifiers (name, email, phone, cookie IDs, ad click identifiers, IP address): shared with service providers and with advertising and analytics partners (Section 10)
Customer records (address, insurance carrier, payment details): shared with service providers
Internet activity (pages viewed, clicks, taps, scrolling): shared with service providers and with advertising and analytics partners
Approximate location (city, region and country): shared with service providers and with advertising and analytics partners
Audio and electronic information (call recordings, chat messages, uploaded photos): shared with service providers
Sensitive personal information (health information you send through the website): shared with service providers only. We do not use it to infer things about you

California residents can also ask, once a year, about disclosures for direct marketing (California Civil Code Section 1798.83). We do not disclose personal information to third parties for their own direct marketing.

California Online Privacy Protection Act (CalOPPA). A link to this policy, using the word "Privacy", is on our home page. This policy lists the personal information we collect (Sections 3 and 4) and who we share it with (Sections 9 and 10), including that advertising partners may collect information about your activity over time and across other websites (Section 10). You can review and ask us to correct your information as described in this section. We explain how we respond to Do Not Track signals in Section 12, and we post any changes to this policy on this page with a new effective date (Section 20).

How to make a request. Call (949) 781-0050. We will confirm your identity by matching information you give us with what we hold. An authorized agent may make a request for you with your signed permission. We respond within 45 days and will tell you if we need up to 45 more.

Appeals. If we deny your request, reply to our answer or call us. We will answer within the time your state's law requires. If we deny your appeal, you can contact your state Attorney General.

15. Children

The website is not meant for children under 13, and we do not knowingly collect personal information online from children under 13. A parent or guardian may give us information to request care for a child; we use it only for that purpose. If you believe a child under 13 has given us personal information through the website, contact us and we will delete it as the law requires.

16. Security

We and our service providers protect information with administrative, technical and physical safeguards, including encryption in transit and at rest, access limited to people who need it. No website or system is perfectly secure, so please do not send sensitive health or financial information by regular email. If a breach affects your information, we will notify you as the law requires.

17. How long we keep information

We keep information for as long as we need it for the purposes in this policy, and longer when the law requires it or to resolve disputes and enforce our agreements.

Health records and PHI: as long as medical and dental record laws in our state require, as described in our Notice of Privacy Practices
Contact details, appointment requests and messages: while you are our patient or prospective patient, and as long as needed for records, billing and legal requirements
Your text message and email choices (when you agreed or opted out): kept with your contact details in our messaging system, for as long as we keep those details there
Call recordings: as long as needed for quality, training and records
Website analytics and your privacy choice: as long as reasonably necessary to improve the website and measure our advertising, then deleted or de-identified. Your browser also keeps your privacy choice for up to 180 days, so the notice does not show again

When we no longer need information, we delete it or de-identify it.

18. Other websites and services

The website may link to or show content from other services, such as maps, videos, reviews, social media, financing and online scheduling. Those services collect information under their own privacy policies, not this one. Please read their policies before giving them information.

19. Accessibility

If you need this policy in another format, such as large print or read aloud, call (949) 781-0050.

20. Changes to this policy

We may update this policy. We will post the new version here with a new effective date, and for important changes we will also show a notice on the website. Using the website after a change means you accept the updated policy.

21. Contact us

Questions, privacy requests and appeals:

GLOW DNTL
23411 Aliso Viejo Parkway, Aliso Viejo, CA 92656
Phone: (949) 781-0050

For questions about your health information and HIPAA rights, contact our Privacy Officer at the same address, or see our Notice of Privacy Practices (available at our office and on request).