Privacy Policy

Molly Oral & Facial Surgery, Inc. (“Molly,” “we,” “us”) respects your privacy. This policy explains what information we collect through molly.carenetic.digital (the “Site”), how we use it, and the choices and rights you have, including under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, “CCPA”). Health information you share as a patient is protected under HIPAA and the California Confidentiality of Medical Information Act, and is described in our Notice of Privacy Practices.

Information we collect

• Information you provide. For example, your name, contact details, date of birth, insurance information, and messages you send through booking, contact, insurance, referral, payment or careers forms.
• Automatically collected information. For example, device and browser type, pages visited, referring URLs, and approximate location derived from your IP address, collected through cookies and similar technologies.
• Location, if you allow it. If you choose “Use my location” on our office finder, your browser shares your coordinates with the page to sort offices by distance. We don’t store them.

How we use information

• To schedule consultations and surgery, check insurance, and respond to your requests
• To send appointment reminders and, with your consent, text messages
• To coordinate care with a dentist or doctor who referred you, when you ask us to or the law allows
• To operate, secure and improve the Site
• To comply with legal obligations

We do not sell or share your personal information, as those terms are defined in the CCPA, and we do not use health information for advertising.

Cookies and analytics

We use essential cookies to make the Site work and to remember your cookie choices. With your agreement, we use Google Analytics, loaded through Google Tag Manager, to understand aggregate usage: which pages people visit, how they arrived, and clicks such as calling an office or starting to book. It records no names, nothing you type, and no health information.

• Never on forms. Analytics and other outside tools never load on pages where you enter information, such as booking, patient forms, contact, insurance, payment, referral and job application pages, or on the confirmation page that follows.
• Your choice. Choose Decline on the cookie banner, or open Cookie preferences at the bottom of any page, and analytics stop loading. Changing your mind later removes the analytics cookies we set.
• Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out and decline analytics and advertising cookies.

We don’t use advertising pixels, and we never place them on pages where you enter health information. You can also block or delete cookies through your browser settings.

Maps

Our office maps are rendered with MapLibre GL using map tiles from OpenFreeMap and data © OpenStreetMap contributors. Loading a map sends standard request information (such as your IP address) to the tile provider.

Your California privacy rights

If you are a California resident, you have the right to:

• Know what personal information we collect, use and disclose, and to receive a copy of it
• Delete personal information we collected from you, subject to legal exceptions (for example, records we must keep under medical record laws)
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information (we do neither)
• Limit the use of sensitive personal information (we use it only to provide the services you request)
• Not be discriminated against for exercising any of these rights

To make a request, email privacy@molly.surgery or call (949) 555-0100. We will verify your identity before responding, and respond within 45 days. You may use an authorized agent, who must provide written permission from you. California’s “Shine the Light” law also lets you ask whether we disclosed personal information to third parties for their direct marketing; we do not.

Categories and retention

In the past 12 months we have collected identifiers, contact details, insurance information, internet activity on the Site (with your consent), and approximate location. We disclose them only to service providers bound by contract, such as scheduling, payment and hosting vendors, and as required by law. We keep website inquiries for up to three years and patient records for as long as California law requires.

Data security

Forms are submitted over encrypted (HTTPS) connections. Patient information is stored in HIPAA-compliant systems with access controls, audit logs and business associate agreements with our vendors.

Your choices

You can opt out of marketing emails at any time with the unsubscribe link, reply STOP to any text message, or contact us to access or correct your information.

Children

The Site is not directed to children under 13, and we do not knowingly collect their personal information online. Parents and guardians book and complete forms on behalf of minors.

Contact

Questions? Email privacy@molly.surgery or write to Molly Privacy Officer, 2 Park Plaza, Suite 600, Irvine, CA 92614.