California Privacy Policy

Last Updated on: April 12, 2023

Our Commitment to Privacy

This California Privacy Policy supplements the information contained in our HIPAA Privacy Notice and applies solely to patients, visitors, website users, and others who reside in the State of California (“you”). Hero DVO, LLC (d/b/a Hero Practice Services) and Kids Dental Place practices (“Hero,” “we,” or “us”) adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and any terms defined in the CCPA have the same meaning when used in this Policy.

This Policy does not apply to workforce-related personal information collected from our California-based employees, job applicants, contractors, or similar individuals, who receive separate privacy disclosures applicable to them.

Please read this California Privacy Policy carefully and contact us with any questions. By using our services and websites, you acknowledge that you have read and agree with this Privacy Policy. This California Privacy Policy may change from time without notice. Your continued use of the website after we revise this California Privacy Policy means you have read and understood those changes.

Personal Information We Collect and Disclose About You

The table below reflects the categories of personal information we collect and may have collected about you over the past twelve months, as well as the categories of sources from which the information is collected, the business or commercial purpose for which the information is collected, and the categories of third parties with whom we have disclosed that information for a business purpose.

For purposes of this California Privacy Policy, “personal information” does not include information excluded from the CCPA’s scope, such as health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA). For more information about how we collect and use your health and medical information, please review our HIPAA Privacy Notice.

We may collect the categories of personal information described below that you voluntarily provide directly or indirectly through service providers working on our behalf or through automatic data collection technologies that collect certain information about your equipment, browsing actions, and patterns. For more information about how we use Cookies and your rights, please see our Cookie Policy.

In general, we will use your personal information to fulfill the purpose for which you provide it and for our business operations, including as described in the table below. We will not use your personal information for purposes materially different than the purposes described in this California Privacy Policy, or in ways we reasonably believe would be unexpected to you, without first informing you and obtaining your consent where necessary.

Category of Personal Information Collected	Categories of Sources from Which the Information Was Collected	Business or Commercial Purpose(s) for Which Information is Collected	Categories of Third Parties to Whom this Type of Personal Information is Disclosed
Personal Identifiers such as name, alias, address, unique personal identifier, Internet Protocol address, email address, Social Security number, driver’s license number, passport number, or other similar identifiers. Health insurance information, including your health insurance plan type; and Medical information, including reason for visit. Financial information, such as credit or debit card number or bank account number	Directly from you Indirectly from you using tracking technologies and cookies	Used to provide you with information and services that you have requested from us Used for compliance and quality assurance purposes Used to meet legal and regulatory obligations Used for account maintenance Used for marketing communications Used to contact you with regard to a legal obligation Used to allow you to participate in features we offer to provide related customer service Used to book an appointment, provide you with requested services, send you information about requested services, and engage in follow-up communication. Used and share this information to process payments and provide you with requested products and services.	We may disclose this type of information to: Third-party service providers; or Other third parties (including government agencies) as required by law.
Internet or other electronic network activity information such as information regarding interaction with a website, application, or advertisement, and other similar information.	Indirectly from you using tracking technologies and cookies	Used to assist with website navigation, improve our services, Used to assist with marketing efforts Used to provide content from third parties	We may disclose this type of information to: Third-party service providers; or Other third parties (including government agencies) as required by law
Sensory Data Such as audio, electronic, visual, or similar information.	Directly from you	Used to provide customer service and for internal business purposes	We may disclose this type of information to: Third-party service providers; or Other third parties (including government agencies) as required by law.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). Some personal information included in this category overlaps with other categories addressed above. In addition to the Personal Identifiers described above, this category includes signatures, state identification card numbers, physical characteristics or descriptions, insurance policy numbers, education information, employment or employment history, bank account number, credit card number, debit card number, or any other financial information, or medical information or health insurance information.	Directly from you	Same as Personal Identifiers.	We may disclose this type of information to: Third-party service providers; or Other third parties (including government agencies) as required by law.

Disclosure to Third Parties

We do not currently sell your personal information or share it with third parties for cross-contextual behavioral advertising and do not intend to do so in the future.

We may disclose your personal information to the categories of third parties indicated in the table above for business purposes, including for example to maintain the security of our systems, to protect our rights or property or the rights, safety, or property of others, or in the event of a claim or dispute relating to our services.

Your Individual Rights 

As a California resident you have specific rights regarding your personal information. This section describes your rights and explains how to exercise those rights.

Right to Know. You have the right to request that we disclose what personal information we collect, use, and disclose about you.
Right to Delete. You have the right to request that we delete from our records the personal information we have collected about you, subject to certain exceptions. Once we receive and confirm your request, we will determine whether an exception applies. If an exception does not apply, we will delete your personal information from our records. We will also direct our service providers to delete your personal information from their records. If an exception applies, we will not delete your personal information from our records and we will notify you in writing of the reason that we are denying your request to delete your information from our records.

Right to Correct Inaccurate Information. You have the right to request that we correct any inaccurate personal information we have collected about you. Once we receive and confirm your request, we will determine if the information is inaccurate and if so, we will immediately correct it. We may deny the request if we determine the information is more likely accurate than not after considering the totality of the circumstances.
Right to Limit Use and Disclosure of Your Sensitive Personal Information. You have the right to limit the use or disclosure of your sensitive personal information to that necessary for limited business purposes specified under the statute. Permitted uses and disclosures include, but are not limited to, maintenance or service of your account, providing customer service, processing payments, and other similar services necessary for business operations. We do not use or disclose your sensitive personal information except for such limited business purposes as permitted by law. Prior to using or disclosing your sensitive personal information for any additional purposes, we will provide you with notice specifying such additional purposes and informing you of your right to limit use of your sensitive personal information to those purposes specifically allowed by law.
Right to Opt-Out of Sale or Sharing of Your Personal Information with Third Parties. Although we do not currently sell your personal information or share it with third parties for cross-contextual behavioral advertising, and do not intend to do so in the future, you have the right to opt-out of any potential sale of your personal information. You also have the right to opt-out of any potential sharing of your personal information with third parties for cross-contextual advertising. You can do so by submitting a request at Email ccpa@herodvo.com or call this toll-free number [toll-free number 1-(855) 278-5468.
Non-Discrimination. You have the right not to be discriminated against by us for exercising any of the foregoing rights.

How to Submit a CCPA Request

To exercise any of your rights described in this California Privacy Policy, please submit a request to us by contacting us via one of the following methods:

Email ccpa@herodvo.com.
Contact us at [toll-free number 1-(855) 278-5468.

Please include in your request the type of request you are making, such as right to know, access, delete, correct, limit use or disclosure of sensitive information, opt-out of sale or sharing. Please also include your first and last name, date of birth (if a patient), email address, mailing address, phone number, and nature of your relationship with us (e.g., patient, website user, etc.).

Our Process to Verify Your Request

After submitting a request, we will take steps to verify your identity in order for us to properly respond and/or confirm that it is not a fraudulent request. In order to verify your identity, we will request, at a minimum, that you provide your name, email address, phone number, address, and relationship to us, so that we can seek to match this information with the information existing in our systems. When providing us this information, you represent and affirm that all information provided is true and accurate. If we are unable to verify that the consumer submitting the request is the same individual about whom we have collected personal information, we may contact you for more information, or we may not be able to meet your request.

Only you, or someone legally authorized to act on your behalf, may make a verifiable CCPA request related to your personal information. If you are making a CCPA request as the authorized agent of a California consumer, we will ask you also submit reliable proof that you have been authorized in writing by the consumer to act on such consumer’s behalf.

Right to Know requests may be made up to two (2) times in a 12-month period. We will not charge a fee to process or respond to a verifiable CCPA request. However, we have the right to charge for or decline any unfounded, excessive, or repetitive requests, in such cases we will inform you of our decision and, if applicable, provide you with a cost estimate before completing your request. 

Response Timing

When you make a request to exercise your CCPA rights, we will typically provide our response within 45 days. We will notify you within that time period and provide an explanation if we need additional time (up to 90 days) to process your request. When you opt-out from the sale or sharing of your personal information with third parties, we will honor your request as soon as feasible, but no later than 15 days from the date we receive your request.

Children Under the Age of 16

Our website is not intended for children under 16 years of age. No one under 16 may provide any information to or on the website. We do not knowingly collect or maintain personal information from children under the age of 16, and no part of our website is designed or intended to attract anyone under the age of 16. If you believe we might have any information from or about a child under 16, please contact us at ccpa@herodvo.com or 1-(855) 278-5468 so that we can immediately delete any such information.

Links to External Websites

Our website may have links to external websites that might have information on topics of interest to you. We do not make any guarantee, warranty, or representation regarding the accuracy of the information contained on those websites and has no control over the privacy or security practices of those external websites. You should read and understand the policies of all websites to understand their privacy practices.

Do Not Track Policy

Do Not Track is a privacy preference that users may set in their web browsers. When a user turns on the Do Not Track signal, the browser sends a message to websites requesting them not to track the user. At this time we do not respond to Do Not Track browser settings or signals. For information about Do Not Track, please visit: www.allaboutdnt.org.

Security Measures

Protecting your personal information is a top priority for us. In addition to applying confidentiality policies that govern our access and use of your information, we have implemented physical, administrative, and technical security features and methods designed to safeguard your data in our information systems, including the use of, as appropriate, encryption, firewalls, monitoring, access controls, and other controls where appropriate. While we take reasonable steps to protect your information, we cannot guarantee the security of all systems against any potential incident. If we ever learn of a breach of your information, then we will notify you in accordance with applicable law.

Retention of Your Personal Information

We retain your personal information only as long as necessary for the purpose for which it was collected. We may retain your data until the set retention period for the data expires. In some instances, such as to comply with a legal obligation, we may be required to maintain your personal information longer.

Updates to this California Privacy Policy

This California Privacy Policy was last updated in April 2023. We may change this Policy at any time. We encourage you to periodically review this California Privacy Policy for the latest information on our privacy practices.

Questions, Concerns, and Contact Information

For questions about our privacy practices or your rights, please contact us at E-mail ccpa@herodvo.com or 1-(855) 278-5468.