Privacy Policy

Introduction

Welcome to WhoIsMyDentist.com ("we," "us," or "our"), operated by WIMD Holdings, Inc., a Delaware corporation. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website (the "Site") or interact with our services. By using the Site, you agree to the collection and use of information in accordance with this Policy.

This Policy is written to be read and understood by a general audience. Where we describe specific legal rights, those descriptions apply only to the extent the corresponding laws apply to you.

Public Data We Display

WhoIsMyDentist.com is a transparency platform. The dental practitioner profiles, license numbers, public board actions, disciplinary history, and clinic addresses displayed on our Site are sourced from official, publicly available state government records. These sources may include Departments of Health, State Dental Boards, and other licensing authorities. We are not the custodian of these government records. Information displayed on the Site may not always reflect the most current data available from government sources.

We source this information from public records, and we are not responsible for inaccuracies, omissions, or outdated entries in the underlying government data. We do not independently warrant the accuracy of publicly sourced information, and we are not liable for inaccuracies in that data except to the extent we are notified of a specific error and have verified and failed to correct it through our own correction process.

If you are a dental professional and believe your public record data is inaccurate, you should contact your respective state licensing board to correct the underlying government file, because that record originates with and is controlled by the relevant government agency. We also provide a process for users to request corrections or updates to information as displayed on the Site, which we review based on available documentation and applicable data verification standards. To submit such a request, contact us at the address in the "Contact Us" section below.

Claiming a profile does not grant ownership of, or editorial control over, underlying public-record information displayed on the Site. Profile claims are intended solely to verify identity and enable access to any available profile management features. Public-record information obtained from government sources may continue to be displayed consistent with applicable law and our editorial policies.

Not a Consumer Reporting Agency

We are not a consumer reporting agency as defined by the Fair Credit Reporting Act ("FCRA"), 15 U.S.C. § 1681 et seq. The information on this Site is not collected or maintained for the purpose of furnishing consumer reports, and we do not provide information for any FCRA-regulated purpose.

You may not use this Site, or any information obtained from it, in whole or in part:

• as a factor in establishing an individual's eligibility for employment, including hiring, retention, promotion, or reassignment;
• as a factor in establishing eligibility for credit, insurance, or a government license or benefit;
• for tenant screening or housing decisions; or
• for any other purpose regulated by the FCRA or any comparable state law.

By accessing the Site, you agree not to use it for any of the prohibited purposes described above.

Information We Collect Directly From You

We collect information you provide directly, as well as certain information automatically when you interact with our platform. Information collected directly from you includes:

• Account and Claim Information: When a dental professional initiates a "Profile Claim," we collect your name, email address, and professional verification details to authenticate your identity and authorize access.
• Communication Data: If you contact our support team by email or through a contact form, we retain the contents of that communication to respond to and assist you.
• Payment Information: If you make a payment, our payment processor collects the payment details necessary to complete your transaction. We do not collect or store full payment card numbers. See "How We Share Information" below.
• Profile Information: If you claim a profile, submit office information, or contribute updates to practitioner records, we collect the information you voluntarily provide, which may include professional biography, specialty, education, languages, procedures performed, contact information, profile photographs, and other profile content.
• Office Claim Information: When you claim an office or practice location, we collect the office or practice name, the associated National Provider Identifier (NPI), the office phone number, and your attestation of association with that location. We use this information to verify your relationship to the practice before any office claim is approved or published.

Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect certain technical information, including:

• Log Data: IP address, browser type and version, pages visited, referring and exit pages, date and time of visit, and time spent on pages.
• Device Information: Operating system, device type, and screen resolution, used for technical compatibility and Site optimization.
• Cookies and Similar Technologies: See the "Cookies and Tracking Technologies" section below.

This automatically collected data is used for security, fraud prevention, Site performance, and aggregate analytics. We do not use this data to actively identify or profile individual users beyond what is necessary to operate, secure, and improve the Site.

Cookies and Tracking Technologies

A cookie is a small text file stored on your device. We use the following categories of cookies and similar technologies:

• Essential Cookies: Required to maintain session state and security. The Site cannot function properly without these, and they cannot be disabled through our preference tools.
• Analytics Cookies: Used to understand aggregate Site usage and improve performance. These are set by our analytics provider and report usage in aggregate form.

We do not use cookies for cross-context behavioral advertising, and we do not permit third parties to use cookies on the Site to build advertising profiles about you.

You can manage non-essential cookies through your browser settings, and disabling cookies may affect Site functionality. We also honor browser-based opt-out preference signals, including the Global Privacy Control ("GPC"), where required by applicable law. To learn more about GPC, visit globalprivacycontrol.org.

How We Use Your Information

We do not sell, rent, or trade your personal information to third parties. Information collected directly from you is used to:

• authenticate and process practitioner profile claims;
• review, verify, and process office claims, profile updates, office corrections, office additions, and other user-submitted contributions;
• send essential transactional notifications, by email or within the Site, including claim approvals, claim denials, contribution status updates, password reset messages, account security notifications, and similar service-related communications;
• respond to your support inquiries;
• process payments for paid features;
• maintain the security and integrity of our platform;
• provide practitioner dashboards, contribution history, and profile insights;
• protect against fraud, abuse, and misuse; and
• comply with applicable legal obligations.

Legal Bases for Processing (EEA and UK Users)

If you are located in the European Economic Area ("EEA") or the United Kingdom ("UK"), we process your personal data only where we have a valid legal basis to do so. Depending on the context, our legal bases are:

• Contract: to provide services you request, such as processing a profile claim or a payment.
• Legitimate Interests: to secure and improve the Site, prevent fraud, and operate our platform, where those interests are not overridden by your rights.
• Consent: where we rely on your consent, such as for non-essential cookies, which you may withdraw at any time.
• Legal Obligation: to comply with laws that apply to us.

How We Share Information

We may disclose information you provide to trusted third-party service providers solely to operate our platform and provide you services. We share the following categories of information with the following categories of recipients:

These providers are contractually obligated to protect your information through binding data processing terms and may only use it to provide services to us. We do not authorize them to use your personal information for their own marketing or other independent purposes. We may also disclose information when required to do so by law, in response to valid legal process, or to protect the rights, safety, and integrity of our users, our platform, or the public.

Data Retention

We retain personal information only for as long as necessary for the purposes described in this Policy, after which we delete or anonymize it, except where retention is required by applicable law or for legitimate legal defense purposes. Our general retention periods are:

Specific retention periods are set internally and are kept no longer than reasonably necessary for the relevant purpose.

Data Security

We implement administrative, technical, and physical safeguards designed to protect the information you submit to us. These measures include encryption in transit (TLS) and at rest, access controls that limit access to authorized personnel, secure cloud hosting on Amazon Web Services (AWS), and monitoring designed to detect and respond to security incidents.

No method of transmission over the internet or electronic storage is completely secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify affected individuals and the appropriate authorities consistent with applicable law, including any notification timelines those laws require.

Your Choices and Rights

If you have created an account or claimed a profile, you may:

• log into your dashboard to update your contact preferences or account details;
• where available, choose whether certain voluntarily provided profile information is publicly displayed;
• request deletion of your account by contacting us at support@whoismydentist.com;
• where the Site offers in-product controls, submit account deletion, content removal, or correction requests through your dashboard, which we review before taking any action; and
• opt out of non-essential communications at any time.

Please note that account deletion removes your account credentials but does not remove the underlying public government record data displayed on your profile, because that data originates with and is controlled by the relevant government agency. To correct the underlying record, contact the applicable state licensing board.

California Residents: CCPA and CPRA Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), provides you with the following rights regarding your personal information, subject to certain exceptions:

• Right to Know: You may request the specific pieces of personal information we have collected about you, as well as the categories of personal information collected, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclose it.
• Right to Delete: You may request that we delete personal information we have collected from you.
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You may direct us not to sell or share your personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: Where applicable, you may direct us to limit the use of sensitive personal information to what is necessary to provide our services. See "Sensitive Personal Information" below.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, contact us at support@whoismydentist.com. We will verify your request using the information associated with your account or other reasonable means. You may use an authorized agent to submit a request on your behalf, in which case we may require proof of the agent's authority. We will not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

We also honor opt-out preference signals such as the Global Privacy Control, as described in the "Cookies and Tracking Technologies" section.

California's "Shine the Light" law (Cal. Civ. Code § 1798.83) permits California residents to request information about disclosures of personal information to third parties for those third parties' direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

Sensitive Personal Information

We do not collect sensitive personal information from users for the purpose of inferring characteristics about them. The professional licensing information displayed on practitioner profiles is drawn from public government records, not collected from you. We do not use or disclose any sensitive personal information for purposes that would trigger a right to limit its use under the CCPA. If our practices change, we will update this section and provide any required choices.

Other U.S. State Privacy Rights

Residents of certain other states, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others with comprehensive privacy laws in effect, may have rights similar to those described above, including the rights to access, correct, delete, and obtain a portable copy of personal information, and to opt out of targeted advertising, sale of personal data, and certain profiling. Where applicable law requires, we honor universal opt-out mechanisms, including the Global Privacy Control.

To exercise these rights, contact us at support@whoismydentist.com. If we decline a request, you may have the right to appeal that decision by replying to our response, and we will inform you of the outcome of any appeal as required by applicable law.

EEA, UK, and International Users

If you are located in the EEA or the UK, you have the rights to access, rectify, and erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority.

WhoIsMyDentist.com is operated from the United States, and your information will be processed in the United States. Where we transfer personal data from the EEA or the UK to the United States, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, where required. To exercise any of these rights, contact us at the address in the "Contact Us" section.

Children's Privacy

The Site is intended for dental professionals and the general adult public, and it is not directed to children. We do not knowingly collect personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act ("COPPA"), and we do not knowingly collect such information without verifiable parental consent.

If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly. A parent or guardian who believes we may have collected information from a child under 13 may contact us at the address below to request review and deletion. Where state law provides additional protections for minors under the age of 18, we comply with those requirements, including any restrictions on processing or selling the personal data of minors for targeted advertising.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this document and, where appropriate, by providing a more prominent notice, such as an email or a notice on the Site. We will maintain a record of material revisions so that the current and prior versions can be identified. Your continued use of the Site after the effective date of any changes constitutes your acceptance of the updated Policy.

Third Party Links

The Site may contain links to third-party websites, including government agencies, state licensing boards, healthcare providers, and other external resources. We do not control and are not responsible for the content, availability, security, or privacy practices of third-party websites. We encourage users to review the privacy policies and terms of any third-party websites they visit.

Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please contact us:

We aim to respond to privacy requests within the timeframes required by applicable law.