Privacy Policy (EU & US)

Effective Date: July 21, 2026
Last Updated: July 21, 2026

Grams Family Dental (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of all individuals who visit our website, engage with our services, or otherwise interact with us.

We process personal data in accordance with applicable privacy laws, including:

  • The EU General Data Protection Regulation (EU GDPR),
  • The UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018,
  • The U.S. state privacy laws, including the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and other applicable U.S. laws,
  • Other relevant data protection regulations in jurisdictions where we operate.

Grams Family Dental is based in Wisconsin and operates under Wisconsin and applicable federal law. This Global Privacy Notice explains how we collect, use, share, and protect your personal data across jurisdictions and how you can exercise your privacy rights, regardless of where you live.

We are the data controller for personal data collected via our website and services. In some cases, we may also act as a data processor when processing data on behalf of our clients.

1. Data Controller & EU Representative

Grams Family Dental
12320 W Oklahoma Ave
Milwaukee, WI 53227
Email: office@gramsfamilydental.com
Phone: (414) 321-6890

If required under Article 27 GDPR, we may designate an EU Representative, whose contact details will be made available here or upon request.

2. Personal Data We Collect

We may collect the following categories of personal data:

  • Contact Information: name, email address, phone number, postal address (if provided).
  • Communications Data: inquiries, messages you send, feedback, requests.
  • Technical & Usage Data: IP address, browser type, device identifiers, operating system, pages visited, time stamps, referring URL, and other analytics data collected via cookies or similar technologies.
  • Marketing & Preference Data: your preferences for receiving communications or promotional content.

This Privacy Policy governs data collected through our Website for general browsing, marketing, and communication purposes. It does not govern Protected Health Information (PHI) collected in the course of providing dental care. PHI is instead governed by our HIPAA Notice of Privacy Practices, provided to patients at intake and available upon request at our office.

Please do not submit medical history, insurance details, or other health information through general website contact or appointment request forms. If you need to share this information with us, please do so by phone, in person, or through a secure patient portal, if available.

3. Legal Basis for Processing (GDPR)

Purpose Description Legal Basis
Service delivery & support Responding to inquiries, managing projects, and providing services Contract performance or legitimate interest
Marketing & communication Sending newsletters, promotional updates (if opted in) Consent
Analytics & improvement Monitoring and improving website performance, security Legitimate interest
Compliance & protection Meeting legal obligations, protecting legal rights Legal obligation

When processing is based on consent, you can withdraw your consent at any time without affecting prior processing.

4. How We Use Personal Data

We use personal data to:

  • Respond to inquiries and provide requested services.
  • Operate, maintain, and improve the Website.
  • Send marketing communications (when consent has been given).
  • Analyze website usage and improve user experience.
  • Detect and prevent fraud, abuse, or security issues.
  • Comply with legal or regulatory requirements.

We will not use your personal data for purposes other than those described in this policy without your consent or legal permission.

5. Sharing & Disclosure

We may share your personal data with:

  • Service providers who support our operations (e.g., hosting, scheduling, analytics, marketing, and compliance tools).
  • Third-party platforms (e.g., social media integrations, advertising networks) where applicable.
  • Legal or regulatory authorities, when required to comply with the law.
  • Professional advisers under confidentiality obligations.

All third parties must process data securely and in compliance with GDPR Article 28. Where any service provider may have access to Protected Health Information, we maintain a Business Associate Agreement (BAA) with that provider as required under HIPAA.

5A. Security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information. While we strive to protect your information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

6. International Transfers

If your personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Additional security measures, where required

You can request details of these safeguards at office@gramsfamilydental.com.

7. Data Retention

We retain personal data only as long as necessary for the purposes described, or to comply with legal obligations. Retention periods depend on:

  • The type of data,
  • The purpose of processing, and
  • Legal or regulatory requirements.

Dental treatment records are retained in accordance with applicable Wisconsin recordkeeping requirements.

Website and marketing data unrelated to treatment (such as contact form submissions that do not result in a patient relationship) is retained only as long as reasonably necessary for the purpose collected. Data that is no longer required is securely deleted or anonymized.

8. Cookies & Tracking

We use cookies and similar technologies to:

  • Enable website functionality,
  • Analyze usage and performance,
  • Personalize content and marketing (where consented).

Non-essential cookies (e.g., analytics or advertising cookies) are only used if you give consent via our cookie banner. You can withdraw consent at any time via the banner or your browser settings.

See our Cookie Policy for details.

9. Accessibility

We are committed to making our Website accessible to all users, including individuals with disabilities. We use AudioEye to support ongoing accessibility monitoring and remediation in line with the Web Content Accessibility Guidelines (WCAG). If you experience any difficulty accessing content on our Website, please contact us at office@gramsfamilydental.com so we can assist you.

10. Your GDPR Rights

If you are in the EU/EEA, you have the following rights:

  • Access: to request a copy of your data.
  • Rectification: to correct inaccurate information.
  • Erasure: to request deletion (“right to be forgotten”).
  • Restriction: to limit processing in certain circumstances.
  • Portability: to receive data in a portable format.
  • Objection: to object to processing, including marketing.
  • Withdrawal of consent: at any time.
  • Complaint: to your local supervisory authority.

We will respond to rights requests within 30 days, extendable by 60 days for complex cases.

11. Marketing Opt-Out

You can opt out of marketing communications at any time by:

  • Clicking the “unsubscribe” link in marketing emails, or
  • Emailing office@gramsfamilydental.com with “Opt-Out of Marketing” in the subject line.

You may still receive service or legally required notifications.

12. Security Measures

We use technical and organizational measures to protect personal data, including:

  • SSL/TLS encryption,
  • Secure servers,
  • Access control,
  • Staff training,
  • Regular security assessments.

No system is completely secure, but we strive to protect your information with industry best practices.

13. Children’s Privacy

This Website is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we learn we have inadvertently collected data from a child, we will delete it promptly.

14. Use of Artificial Intelligence

We may use artificial intelligence (AI) and other automated tools to support certain Website and business functions. This may include:

  • Chatbots or virtual assistants that answer general questions or assist with appointment scheduling
  • Automated appointment reminders and follow-up communications
  • Website personalization and analytics
  • AI-assisted drafting of general marketing or educational content

What this does not include. AI tools are not used to diagnose dental or medical conditions, recommend treatment, or make any decision about your care. All clinical decisions are made exclusively by our licensed dental providers.

Automated interactions. If you interact with a chatbot or automated assistant on our Website, we will disclose that you are communicating with an automated system rather than a person, where required by law or where it would not otherwise be reasonably clear.

No automated decision-making with legal or similarly significant effects. We do not use AI to make decisions about you (such as decisions about eligibility for services, pricing, or employment) that would produce legal effects or similarly significantly affect you without human involvement.

Data used with AI tools. Where we use third-party AI tools or platforms, we take reasonable steps to ensure that any personal data processed by those tools is handled consistently with this Privacy Policy and, where applicable, HIPAA. We do not permit Protected Health Information to be used to train third-party AI models without appropriate safeguards (such as a Business Associate Agreement) and, where required, patient consent.

Your options. If you would prefer not to interact with an automated chatbot or assistant, you may contact our office directly by phone at (414) 321-6890.

15. Governing Law

This Privacy Policy is governed by the laws of the State of Wisconsin and applicable U.S. federal law, without regard to conflict of law principles, except where superseded by applicable international data protection law (such as GDPR) with respect to individuals to whom those laws apply. Any disputes relating to this Policy that are not otherwise resolved through the processes described above shall be subject to the jurisdiction of the state and federal courts located in Milwaukee County, Wisconsin.

16. Changes to This Policy

We may update this Privacy Policy periodically. If material changes are made, we will update the Last Updated date and, where appropriate, provide notice on the Website.

17. Contact Us

For questions or to exercise your rights under this policy:

Grams Family Dental
12320 W Oklahoma Ave
Milwaukee, WI 53227
Email: office@gramsfamilydental.com
Phone: (414) 321-6890

If required, our EU Representative’s details will be provided here.

U.S. Privacy Rights Addendum

(For California, Virginia, Colorado, Connecticut, Utah residents)

This section supplements our Privacy Policy to comply with applicable U.S. state privacy laws, such as the California Consumer Privacy Act (CCPA/CPRA) and similar laws in other states.

A. Your U.S. Privacy Rights

Depending on your state, you may have the right to:

  • Know what personal information we collect and how we use it.
  • Access a copy of your personal information.
  • Request correction of inaccurate personal information.
  • Request deletion of your personal information.
  • Opt out of the sale or sharing of personal information (we do not sell data).
  • Limit the use or disclosure of sensitive personal information (if applicable).
  • Use an authorized agent to make a request on your behalf.
  • Not be discriminated against for exercising your privacy rights.

B. “Do Not Sell or Share” Disclosure

We do not sell or share personal information as defined under CCPA/CPRA.

If this changes in the future, we will update this policy and provide a clear opt-out mechanism.

C. Authorized Agent

If you are a California resident, you may designate an authorized agent to exercise your privacy rights. We may require verification of your identity and the agent’s authority to act on your behalf, as permitted by law.

D. How to Exercise Your Rights

To exercise your rights, email us at office@gramsfamilydental.com with “U.S. Privacy Request” in the subject line.

We will respond within 45 days (or 90 days for complex requests) as required by law.

E. Non-Discrimination

We will not deny services, charge different prices, or provide a different quality of service because you exercised your privacy rights.