Consumer Health Data Privacy Policy
Last updated: August 19, 2026
This policy is for residents of Washington and Nevada, and covers only consumer health data as those states define it. Everything else we collect is described in our Privacy Policy.
It is published by the dental practice of Dr. Carlos Aguilar León, Oral Hospital - Galería Dental, Heredia, Costa Rica.
The consumer health data we collect, and why
We collect only what you send us when you ask for an evaluation:
| Category | What it is | Why we collect it |
|---|---|---|
| Health conditions, treatments and procedures sought | The dental treatment you say you are considering, and anything you tell us about your teeth or your case in the message box | So the doctor can judge whether the treatment fits your case and prepare a preliminary recommendation and estimate |
| Information identifying you as seeking health care services | The fact that you asked this dental practice for an evaluation, and which treatment page you asked from | To answer your enquiry and keep a record of what was asked and answered |
| Bodily and dental images and measurements | X-rays, CBCT scans or photos of your smile — only if you choose to upload them after sending the form | So the doctor can review your case before you travel |
We use this data only for the purposes above. We do not use it for advertising, we do not use it to build audiences or profiles, and we do not use it to train AI systems.
Where it comes from
- From you directly — everything above is typed or uploaded by you into the evaluation form on this website.
That is the only source. We do not buy consumer health data, receive it from data brokers, or infer it from your activity elsewhere.
When we ask for your consent
On the first step of the evaluation form, before you tell us anything about your teeth or the treatment you are considering. Nothing is recorded until you tick that box, and the box is not ticked for you.
The form then saves each step as you complete it, so if you stop partway through, what you had already entered is kept — always under the consent you gave on the first step, and never beyond it. To withdraw that consent, or to have the enquiry deleted, email us at contact@drcarlosaguilardds.com.
The consumer health data we share, and with whom
We share consumer health data only with the service providers that store it for us and with the people who treat and advise you. We share it with no one else.
| Category of recipient | Specifically | What they receive |
|---|---|---|
| Website hosting | Vercel Inc. | Your submission passes through their servers on its way to us |
| Storage and productivity software | Google LLC (Sheets, Drive) | Stores the enquiry record and any images you uploaded |
| Patient contact system | HighLevel Inc. (GoHighLevel) | Your contact details and the treatment you asked about, so the team can follow up. Your X-rays and photos are not sent here. |
| The treating practice and its marketing agency | Dr. Carlos Aguilar León and named staff; the agency personnel who administer the enquiry system | Access to the enquiry in order to review your case and reply to you |
We do not sell consumer health data, and we do not share it with advertising platforms, social networks or data brokers. We have no affiliates.
Your rights, and how to use them
If you live in Washington or Nevada, you have the right to:
- Confirm whether we are collecting, sharing or selling your consumer health data, and access that data;
- receive a list of every third party and affiliate we have shared it with, including how to contact them;
- withdraw your consent to our collecting and sharing it; and
- have it deleted — including from our backups and archives.
How to make a request
Email contact@drcarlosaguilardds.com with the word "health data" in the subject line, and tell us which of the above you want. Use the email address or phone number you gave us, so we can find your enquiry.
We respond within 45 days. If we need longer we will tell you why within those 45 days, and we may take one further 45-day extension. There is no charge.
Before we act we may need to confirm that you are the person the data is about. If we cannot confirm it, we will tell you rather than hand your health information to someone else.
If we refuse
You may appeal by replying to our answer and asking for it to be reviewed. We will respond to an appeal within 45 days and explain our reasoning. If we deny the appeal, you may complain to the Washington State Attorney General or, in Nevada, to the Nevada Attorney General.