HIPAA Notice of Privacy Practices & Privacy Policy

Effective Date: August 22, 2026

THIS NOTICE DESCRIBES HOW DENTAL AND HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. THE PRIVACY OF YOUR HEALTH INFORMATION IS IMPORTANT TO US.

OUR LEGAL DUTY

Aura Smiles PLLC (“Aura Smiles,” “we,” “our,” or “us”) is committed to protecting the privacy and security of your dental and health information. We understand that information about your health, dental treatment, and personal circumstances is private and personal, and we are dedicated to maintaining the confidentiality of your information.

We are required by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, as amended from time to time (collectively, “HIPAA”), to maintain the privacy of your protected health information (“PHI”), provide you with this Notice of Privacy Practices (“Notice”), and follow the privacy practices described in this Notice while it remains in effect.

This Notice describes:

• How Aura Smiles may use and disclose your protected health information.
• Our legal duties regarding your health information.
• Your rights regarding your health information.
• How you may exercise those rights.
• How you may contact us with questions, concerns, or complaints.

Aura Smiles provides concierge and mobile dental services. As part of providing dental care, we may collect, create, use, and maintain information about your dental health, medical history, treatment plans, communications, appointment information, payment information, and other information necessary to provide quality dental services.

We maintain administrative, technical, and physical safeguards designed to protect your health information from unauthorized access, use, or disclosure. Electronic patient information is maintained using secure systems with access controls designed to limit access only to authorized individuals who require the information to perform their responsibilities.

Patient records are maintained through Dentrix Ascend, a dental practice management platform designed to support secure handling of patient information. Aura Smiles uses reasonable safeguards and follows applicable HIPAA requirements when accessing, storing, and managing patient information through third-party systems.

If we experience a breach of unsecured protected health information that requires notification under applicable law, we will notify affected individuals as required.

We will not use or share your health information other than as described in this Notice unless you provide written authorization or such use or disclosure is otherwise permitted or required by law.

This Notice takes effect August 22, 2026, and will remain in effect until it is replaced.

We reserve the right to change our privacy practices and update this Notice from time to time. If we make material changes to this Notice, the revised Notice will be made available on our website:

https://theaurasmiles.com

The revised Notice will include a new effective date and will apply to all protected health information maintained by Aura Smiles after that effective date.

For more information about our privacy practices or to request an additional copy of this Notice, please contact Aura Smiles using the contact information provided at the end of this Notice.

USES AND DISCLOSURES OF HEALTH INFORMATION WITHOUT WRITTEN AUTHORIZATION

Aura Smiles may use and disclose your protected health information without your written authorization for purposes of treatment, payment, healthcare operations, and other purposes permitted or required by law.

The following describes examples of situations where we may use or disclose your health information without obtaining additional written authorization.

A. Uses and Disclosures for Treatment, Payment, and Health Care Operations

We may use your health information and share it with others, in electronic or other formats, to provide dental treatment, coordinate payment for services, and operate our dental practice.

We follow the HIPAA principle of using and disclosing only the minimum necessary information needed to accomplish the intended purpose, when applicable.

Treatment

Aura Smiles may use and disclose your health information to provide dental treatment and coordinate your care.

Examples include:

• Reviewing your dental history and health information.
• Performing dental examinations and procedures.
• Creating and managing treatment plans.
• Taking and reviewing dental images, photographs, scans, and diagnostic records.
• Sharing information with dental specialists, laboratories, pharmacies, or other healthcare providers involved in your care.
• Communicating with healthcare providers when coordination of care is necessary.

For example, we may share your dental information with a dental laboratory to fabricate a dental appliance, restoration, crown, bridge, aligner, retainer, or other dental device prescribed as part of your treatment.

We may also share information with another healthcare provider if doing so is necessary for your continued care or treatment coordination.

Payment

Aura Smiles may use and disclose your health information to obtain payment for services provided.

Because Aura Smiles may provide services on a concierge basis and may not submit claims to insurance plans, payment-related uses may include:

• Processing payments.
• Maintaining billing records.
• Communicating regarding balances.
• Providing payment receipts.
• Coordinating payment arrangements.
• Processing payments through secure third-party payment processors.

If you choose to use a financing option, payment plan, or third-party financial service, information necessary to process those arrangements may be shared with the applicable service provider.

Aura Smiles uses payment systems designed to comply with applicable Payment Card Industry Data Security Standards (PCI-DSS). Aura Smiles does not store complete payment card numbers on its own systems.

Health Care Operations

Aura Smiles may use and disclose your health information for healthcare operations necessary to operate our dental practice.

Examples include:

• Quality assessment and improvement activities.
• Reviewing treatment outcomes.
• Evaluating provider performance.
• Staff training and education.
• Compliance activities.
• Practice administration.
• Scheduling operations.
• Patient safety activities.
• Maintaining electronic systems.
• Improving patient experience.

These activities allow us to provide safe, effective, and efficient dental care.

Artificial Intelligence (AI), Automation, and Technology-Assisted Services

As part of our healthcare operations, Aura Smiles may use technology tools, including artificial intelligence (“AI”), automation, and other technology-assisted services to support practice operations.

These tools may assist with:

• Patient communications.
• Appointment scheduling.
• Appointment reminders.
• Call routing.
• Call documentation.
• Administrative support.
• Quality monitoring.
• Workflow improvement.
• Training and operational efficiency.

Any technology tools used by Aura Smiles are intended to support our workforce and improve services while maintaining appropriate safeguards designed to protect patient information.

Aura Smiles takes reasonable steps to ensure that information accessed through these tools is limited to what is necessary for the intended purpose.

Disclosures to Your Family Members, Friends, or Others Involved in Your Care

Aura Smiles may disclose your health information to a family member, friend, caregiver, or another person identified by you as being involved in your dental care or payment for your dental services.

Before making such disclosures, we will generally provide you with an opportunity to agree or object when reasonably possible.

Examples include:

• Discussing treatment plans with a spouse, parent, caregiver, or other individual you have identified.
• Allowing another person to coordinate appointment scheduling on your behalf.
• Providing treatment or billing information to someone you authorize to assist with your care.

If you are unavailable, unable to communicate, or experiencing an emergency situation, Aura Smiles may use professional judgment to determine whether sharing limited information is in your best interest.

Any disclosure will be limited to the information reasonably necessary for the purpose of assisting with your care or payment.

Business Associates

Aura Smiles may disclose your health information to third-party individuals or organizations known as Business Associates when they perform services on behalf of Aura Smiles that require access to protected health information.

A Business Associate is a person or organization that performs certain functions or services involving the use or disclosure of PHI on behalf of a healthcare provider.

Examples of Business Associates may include:

• Dental practice management software providers.
• Secure technology providers.
• Billing or payment service providers.
• Communication platforms.
• Document storage providers.
• IT and security service providers.
• Other vendors supporting healthcare operations.

Aura Smiles requires Business Associates to enter into appropriate agreements requiring them to protect the privacy and security of your health information and use your information only for authorized purposes.

Dentrix Ascend Patient Records System

Aura Smiles maintains patient dental records using Dentrix Ascend, a cloud-based dental practice management platform used to manage patient information, treatment records, scheduling, and other dental practice functions.

Patient information maintained within Dentrix Ascend may include:

• Patient demographics.
• Medical and dental history.
• Treatment plans.
• Clinical notes.
• Dental images and records.
• Appointment information.
• Billing and payment-related information.

Aura Smiles relies on Dentrix Ascend as a third-party technology provider supporting our dental operations. We take reasonable steps to ensure that appropriate safeguards are in place when using third-party systems that handle protected health information.

Appointment Reminders, Treatment Alternatives, and Health-Related Benefits and Services

Aura Smiles may use and disclose your health information to contact you regarding:

• Appointment reminders.
• Scheduling changes.
• Follow-up appointments.
• Treatment recommendations.
• Post-treatment instructions.
• Preventive dental care recommendations.
• Available dental services that may benefit your oral health.

Communications may occur through:

• Telephone calls.
• Voicemail messages.
• Email.
• SMS/text messaging.
• Other communication methods you have provided or authorized.

For example, Aura Smiles may send a reminder regarding an upcoming appointment, contact you after a procedure to check on your recovery, or provide information about recommended dental treatment.

Patient-Related Communications

Aura Smiles may use your information to communicate with you regarding your dental care and related services.

Examples include:

• Treatment follow-up communications.
• Oral health education.
• Dental care instructions.
• Treatment coordination.
• Requests for additional information needed to provide care.
• Appointment scheduling.
• Patient satisfaction communications.

Aura Smiles may use photographs, dental images, scans, or other clinical records as part of your treatment documentation.

Any use of your information beyond treatment, payment, healthcare operations, or other permitted purposes will require your written authorization when required by law.

Electronic Communications, SMS/Text Messaging, and Telephone Communications

Aura Smiles may communicate with you electronically as part of providing dental services.

By providing your telephone number, email address, or other contact information, you acknowledge that Aura Smiles may contact you through these methods for healthcare-related purposes.

These communications may include:

• Appointment reminders.
• Scheduling communications.
• Treatment information.
• Billing communications.
• Responses to inquiries.
• Follow-up communications.
• Practice updates.

SMS/text messages may be sent using automated communication technology where permitted by applicable law.

Message and data rates may apply depending on your mobile carrier.

You may request alternative communication methods by contacting Aura Smiles.

You may opt out of non-essential marketing communications at any time. Opting out of marketing communications will not prevent Aura Smiles from contacting you regarding appointments, treatment, billing, or other healthcare-related matters.

Marketing Communications

Aura Smiles may communicate with patients about dental services, educational information, promotions, and practice updates.

Certain marketing communications involving protected health information may require your written authorization under HIPAA.

Aura Smiles will not sell your protected health information.

We will not disclose your health information to third parties for their independent marketing purposes unless permitted by law or you provide written authorization.

B. Uses and Disclosures for Public Need

Aura Smiles may use or disclose your health information when necessary to comply with legal requirements or for certain public interest activities permitted by HIPAA.

The following are examples of situations where disclosure may occur without your written authorization.

Required by Law

Aura Smiles may use or disclose your health information when required by federal, state, or local law.

Examples may include:

• Responding to legal obligations.
• Reporting information required by regulatory authorities.
• Complying with court orders.

Public Health Activities

Aura Smiles may disclose your health information to authorized public health authorities when permitted or required by law.

Examples include activities related to:

• Preventing or controlling disease.
• Reporting certain public health concerns.
• Supporting public health investigations.

Health Oversight Activities

Aura Smiles may disclose your health information to government agencies authorized to conduct oversight activities.

These activities may include:

• Audits.
• Investigations.
• Inspections.
• Licensing activities.
• Regulatory compliance reviews.

Abuse, Neglect, or Domestic Violence

Aura Smiles may disclose your health information to appropriate authorities if we reasonably believe you may be a victim of abuse, neglect, domestic violence, or another crime.

Any disclosure will be made only as permitted or required by law.

Food and Drug Administration (FDA) Activities

Aura Smiles may disclose health information to appropriate persons or organizations involved in FDA-related activities, including:

• Reporting product defects.
• Tracking problems with dental products or devices.
• Repairing or replacing defective products.
• Monitoring product safety.
• Reporting adverse reactions.

Lawsuits and Disputes

Aura Smiles may disclose your health information in response to legal proceedings when permitted by law.

This may include:

• Court orders.
• Subpoenas.
• Discovery requests.
• Administrative proceedings.

Where required, reasonable efforts will be made to notify you or obtain appropriate protections for your information.

Law Enforcement

Aura Smiles may disclose your health information to law enforcement officials when permitted or required by law.

Examples include:

• Responding to court orders.
• Complying with legal requirements.
• Identifying or locating individuals involved in certain investigations.
• Reporting certain legally required matters.

Serious Threat to Health or Safety

Aura Smiles may disclose your health information when necessary to prevent or reduce a serious and imminent threat to your health, safety, or the health and safety of another person.

Any disclosure will be limited to individuals or organizations capable of helping prevent or reduce the threat.

Workers’ Compensation

Aura Smiles may disclose health information as necessary to comply with workers’ compensation laws or similar programs that provide benefits for work-related injuries or illnesses.

National Security and Military Activities

Aura Smiles may disclose health information to authorized federal officials for lawful national security activities.

Certain disclosures may also be permitted regarding military personnel or individuals in custody of law enforcement when required for healthcare, safety, security, or legal purposes.

Coroners, Medical Examiners, and Funeral Directors

In the event of a patient’s death, Aura Smiles may disclose health information to:

• Coroners.
• Medical examiners.
• Funeral directors.

Such disclosures may be necessary to assist with identification, determine cause of death, or perform duties permitted by law.

Research

Aura Smiles may use or disclose health information for research purposes when permitted by applicable law and appropriate privacy protections are in place.

C. Completely De-Identified and Limited Data Health Information

Aura Smiles may use and disclose health information that has been modified or processed in a manner that removes information that could reasonably identify you.

Information that has been properly de-identified according to applicable HIPAA standards is no longer considered protected health information and may be used for purposes such as:

• Quality improvement.
• Dental education.
• Practice improvement activities.
• Healthcare operations.
• Research and analysis.
• Development and evaluation of dental services.

Aura Smiles may also use or disclose limited data sets when permitted by law. Limited data sets contain fewer identifying details than a complete patient record and may only be shared when appropriate agreements and safeguards are in place.

Any use or disclosure of de-identified or limited information will be performed in accordance with applicable federal and state privacy requirements.

REQUIREMENT FOR WRITTEN AUTHORIZATION

Aura Smiles may use or disclose your health information for treatment, payment, healthcare operations, and other purposes described in this Notice without requiring your written authorization when permitted by HIPAA.

For any use or disclosure of your health information that is not described in this Notice or otherwise permitted by law, Aura Smiles will obtain your written authorization before using or disclosing your information.

Examples of situations that generally require written authorization include:

• Uses or disclosures for certain marketing purposes.
• Disclosures that constitute a sale of protected health information.
• Any other use or disclosure not otherwise permitted under HIPAA.

You may provide written authorization allowing Aura Smiles to use or disclose your health information to another person or organization for purposes you specify.

You may revoke your written authorization at any time by submitting a written request to Aura Smiles. Your revocation will not affect any use or disclosure that was already made based on your authorization before it was revoked.

YOUR RIGHTS TO ACCESS AND CONTROL YOUR HEALTH INFORMATION

You have important rights regarding the health information that Aura Smiles maintains about you.

You may exercise these rights by submitting a written request using the contact information provided at the end of this Notice.

Aura Smiles will respond to your requests as required by HIPAA and applicable law.

Access to Your Health Information

You have the right to inspect and obtain copies of your health information maintained by Aura Smiles, with certain limited exceptions.

This includes information such as:

• Dental records.
• Treatment plans.
• Clinical notes.
• Diagnostic records.
• Dental images.
• Billing records maintained by Aura Smiles.
• Other health information maintained as part of your patient record.

If Aura Smiles maintains your health information electronically, you may request an electronic copy in a format that is readily producible.

You may also request that Aura Smiles send your health information directly to another person or organization that you clearly identify.

To request access to your records:

• Your request must generally be submitted in writing.
• You may be required to complete a medical/dental record request form.
• We may require verification of your identity before releasing records.

Aura Smiles may charge a reasonable, cost-based fee for copying, preparation, supplies, and postage when permitted by law.

If your request for access is denied, Aura Smiles will provide a written explanation describing the reason for the denial and your available rights, including any review rights available under applicable law.

Right to Request an Amendment of Your Health Information

You have the right to request that Aura Smiles amend or correct your health information if you believe the information is incorrect or incomplete.

Your request must:

• Be submitted in writing.
• Identify the information you believe is incorrect or incomplete.
• Explain why you believe the information should be changed.

Aura Smiles will review your request and respond within the timeframe required by applicable law.

We may deny your request in certain situations, including when:

• The information was not created by Aura Smiles.
• The information is not part of the records maintained by Aura Smiles.
• The information is already accurate and complete.
• The information is not legally subject to amendment.

If your amendment request is denied, you may submit a written statement of disagreement that will become part of your health record as permitted by law.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures of your health information made by Aura Smiles during the previous six (6) years, or a shorter period if requested.

The accounting will include disclosures required to be tracked under HIPAA.

Certain disclosures are not required to be included, including disclosures:

• Made for treatment, payment, or healthcare operations.
• Made directly to you.
• Made pursuant to your written authorization.
• Made for certain legal, regulatory, or administrative purposes.

To request an accounting of disclosures, you must submit a written request.

Aura Smiles will respond within the timeframe required by HIPAA.

You are entitled to one accounting request within a twelve-month period without charge. Additional requests may be subject to a reasonable cost-based fee as permitted by law.

Right to Request Restrictions on Uses and Disclosures

You have the right to request restrictions on how Aura Smiles uses or discloses your health information.

For example, you may request that Aura Smiles:

• Limit information shared with certain individuals.
• Limit disclosures related to specific services.
• Restrict communications regarding certain treatment information.

Aura Smiles is not required to agree to all requested restrictions.

However, HIPAA requires that Aura Smiles agree to certain requests when:

1. The disclosure is for purposes of payment or healthcare operations (and is not required by law); and
2. The information relates only to a healthcare item or service that has been paid out-of-pocket and in full.

If Aura Smiles agrees to a restriction, we will honor that restriction except where:

• Emergency treatment is required.
• Disclosure is otherwise required by law.
• The restriction is no longer applicable.

You may revoke a restriction request in writing.

Right to Request Alternative Communications

You have the right to request that Aura Smiles communicate with you about your health information through alternative methods or at alternative locations.

For example, you may request:

• That we contact you only by email.
• That we call a different phone number.
• That we send correspondence to a different address.
• That we avoid leaving voicemail messages.

Your request should specify:

• The alternative method or location requested.
• Any relevant instructions regarding communication.

Aura Smiles will consider reasonable requests and will attempt to accommodate requests when possible.

Right to Receive Notification of a Breach of Unsecured Protected Health Information

Aura Smiles is required by law to maintain appropriate safeguards protecting your health information.

We use reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, or disclosure.

These safeguards may include:

• Secure electronic systems.
• Access controls.
• Password protection.
• Encryption where appropriate.
• Confidentiality requirements.
• Secure third-party healthcare platforms.

If Aura Smiles experiences a breach of unsecured protected health information that requires notification under HIPAA, we will notify affected individuals as required by law.

Notification may include:

• A description of what happened.
• The information involved.
• Steps you can take to protect yourself.
• Actions Aura Smiles is taking to investigate and address the breach.

Right to Receive a Paper Copy of This Notice

You have the right to request a paper copy of this Notice at any time.

You may request a paper copy even if:

• You previously received this Notice electronically.
• You viewed this Notice on our website.
• You acknowledged receipt electronically.

To request a paper copy, contact Aura Smiles using the information listed at the end of this Notice.

Right to Choose Someone to Act on Your Behalf

If you have provided another person with legal authority to act on your behalf regarding your healthcare decisions, Aura Smiles may recognize that person as your personal representative.

Examples may include:

• A person with healthcare power of attorney.
• A legal guardian.
• A parent or authorized representative for a minor patient.

Before allowing someone to exercise your rights, Aura Smiles may verify that the person has appropriate legal authority.

Availability of Language Assistance Services

Aura Smiles is committed to providing meaningful access to individuals with limited English proficiency or individuals who require communication assistance.

When required by applicable law, Aura Smiles may provide appropriate language assistance services or auxiliary aids to help individuals understand their healthcare information and exercise their privacy rights.

YOUR CHOICES REGARDING YOUR HEALTH INFORMATION

For certain health information, you may tell Aura Smiles your preferences regarding how we communicate with you or share your information.

If you have a specific preference regarding how your information is handled in the situations described below, please contact Aura Smiles using the contact information listed at the end of this Notice.

You have the right and choice to request that we:

• Share information with family members, close friends, caregivers, or other individuals involved in your dental care.
• Share information with individuals who assist with payment or scheduling.
• Communicate with you through specific methods or at specific locations.
• Limit certain communications when appropriate.

If you are unable to communicate your preference, such as during an emergency situation, Aura Smiles may use professional judgment to determine whether sharing limited information is in your best interest.

We may also disclose information when necessary to reduce or prevent a serious and imminent threat to health or safety.

Marketing and Promotional Communications

Aura Smiles may communicate with current and prospective patients regarding dental services, educational information, special offers, practice announcements, and community outreach activities.

Examples may include:

• Invisalign promotions.
• Cosmetic dentistry information.
• Preventive dental education.
• New service announcements.
• Practice updates.
• Patient appreciation communications.

Aura Smiles may use contact information you provide to communicate these messages.

However:

• Aura Smiles will not sell your personal information.
• Aura Smiles will not disclose your protected health information to third parties for their independent marketing purposes without your written authorization.
• Certain marketing communications involving your protected health information may require your written authorization under HIPAA.

You may request to stop receiving promotional communications at any time by contacting Aura Smiles.

Stopping marketing communications will not prevent Aura Smiles from contacting you regarding:

• Appointments.
• Treatment recommendations.
• Billing matters.
• Healthcare-related communications.
• Other necessary patient care information.

Website Privacy Practices

Overview

Aura Smiles operates the website:

https://theaurasmiles.com

This section describes how Aura Smiles collects, uses, and protects information obtained through our website.

This website privacy section applies to information collected from website visitors, including individuals who:

• Browse our website.
• Submit online forms.
• Request consultations.
• Request appointment information.
• Contact our office electronically.

This website privacy section supplements, but does not replace, our HIPAA Notice of Privacy Practices.

Information that becomes part of your patient record is protected as Protected Health Information under HIPAA and will be handled according to the HIPAA sections of this Notice.

Information We Collect Through Our Website

When you visit the Aura Smiles website, we may collect certain information automatically for website operation, security, analytics, and improvement purposes.

This information may include:

• Internet Protocol (IP) address.
• Browser type.
• Device type.
• Operating system.
• Screen resolution.
• Pages visited.
• Time spent on pages.
• Date and time of website visits.
• Referring website or search source.
• General geographic information derived from IP address.
• Website interaction information.

This information is generally collected in aggregate form and is used to:

• Improve website functionality.
• Monitor website performance.
• Detect and prevent security issues.
• Understand visitor behavior.
• Improve patient experience.
• Evaluate marketing effectiveness.

Cookies and Similar Technologies

Aura Smiles may use cookies, pixels, web beacons, and similar technologies on our website.

A cookie is a small data file stored on your device that allows a website to recognize your browser and remember certain information.

Cookies may be used for purposes including:

Website Functionality

Cookies may help:

• Maintain website functionality.
• Remember user preferences.
• Improve navigation.
• Support website features.

Website Performance

Cookies may help us understand:

• Which pages visitors use.
• Whether website features are functioning properly.
• How visitors interact with website content.

Analytics

Cookies may allow us to measure:

• Website traffic.
• Visitor behavior.
• Popular pages.
• User engagement.
• Website improvements.

Marketing and Advertising

Where applicable, cookies and similar technologies may help Aura Smiles understand the effectiveness of marketing campaigns and provide more relevant information about our services.

Managing Cookies

Most internet browsers allow you to control cookies through browser settings.

You may choose to:

• Accept cookies.
• Reject cookies.
• Delete existing cookies.
• Receive notifications before cookies are stored.

Disabling cookies may affect certain website features or functionality.

By continuing to use the Aura Smiles website, you acknowledge that cookies and similar technologies may be used as described in this Notice.

Website Analytics

Aura Smiles may use third-party analytics services to understand website usage and improve our services.

Examples may include analytics tools such as:

• Google Analytics.
• Website performance monitoring tools.
• Search and marketing measurement tools.

Analytics services may collect information such as:

• Pages visited.
• Visitor interactions.
• Device information.
• Browser information.
• Approximate location information derived from IP address.
• Referral sources.

This information helps Aura Smiles:

• Improve website content.
• Understand patient interests.
• Improve online appointment experiences.
• Evaluate advertising and outreach efforts.

Website analytics information generally does not identify you personally unless you voluntarily provide information through a website form or communication method.

Website Forms and Online Requests

Aura Smiles may provide online forms for purposes such as:

• Appointment requests.
• Consultation requests.
• Invisalign inquiries.
• Contact requests.
• General questions.

Information submitted through these forms may include:

• Name.
• Phone number.
• Email address.
• Preferred appointment information.
• Information regarding your dental needs.

By submitting information through the website, you authorize Aura Smiles to use the information to respond to your request and provide requested services.

Please do not submit highly sensitive medical information through general website forms unless specifically requested.

If you become a patient of Aura Smiles, information collected through these communications may become part of your patient record and may be protected under HIPAA.

Data Security and Protection of Website Information

Aura Smiles uses reasonable safeguards designed to protect information collected through our website.

These safeguards may include:

• Secure website connections.
• Access restrictions.
• Administrative security procedures.
• Secure technology providers.
• Monitoring for unauthorized access.

However, no internet transmission or electronic storage system can be guaranteed to be 100% secure.

By using our website, you acknowledge that electronic communication involves certain risks and agree to communicate electronically with Aura Smiles when you choose to do so.

Payment Information Security

Aura Smiles uses third-party payment processing systems designed to comply with applicable Payment Card Industry Data Security Standards (PCI-DSS).

Aura Smiles does not store complete credit card numbers, security codes, or payment authentication information on its own systems.

Payment information is processed through secure payment providers that maintain safeguards designed to protect payment information.

Payment information may be used for:

• Processing transactions.
• Confirming payments.
• Maintaining financial records.
• Resolving billing questions.
• Preventing fraud.

Consent to Electronic Communications

By providing your phone number, email address, or contact information through:

• The Aura Smiles website.
• Appointment requests.
• Patient forms.
• Direct communication with our office.

you consent to receive communications from Aura Smiles related to:

• Dental care.
• Scheduling.
• Appointments.
• Treatment.
• Billing.
• Practice updates.
• Requested information.

Communications may occur through:

• Phone calls.
• Voicemail.
• Email.
• SMS/text messages.

You may request different communication methods by contacting Aura Smiles.

REQUIREMENTS OF OTHER LAWS

Aura Smiles complies with applicable federal and state privacy laws governing the protection of dental and health information.

Certain laws may provide additional privacy protections beyond HIPAA. When a state or federal law provides greater privacy protection or additional rights regarding your information, Aura Smiles will follow the applicable requirements.

Additional protections may apply to certain categories of sensitive information, including but not limited to:

• Mental health information.
• Substance use disorder treatment information.
• HIV/AIDS-related information.
• Genetic information.
• Other specially protected health information.

Where additional authorization requirements apply, Aura Smiles will obtain the necessary authorization before using or disclosing such information unless otherwise permitted or required by law.

SECURITY OF YOUR INFORMATION

Aura Smiles takes the protection of your personal and health information seriously.

We maintain reasonable administrative, technical, and physical safeguards designed to protect your information from:

• Unauthorized access.
• Improper use.
• Unauthorized disclosure.
• Loss or destruction.

These safeguards may include:

• Secure electronic systems.
• Password-protected access.
• Role-based access limitations.
• Secure patient record systems.
• HIPAA-compliant third-party technology providers.
• Employee confidentiality obligations.
• Secure communication practices.

Patient health information is stored and managed through secure systems, including Dentrix Ascend, a dental practice management platform used to support patient record management and dental operations.

Although Aura Smiles takes reasonable measures to protect information, no electronic system, website transmission, or storage method can be guaranteed to be completely secure.

CHILDREN’S PRIVACY

Aura Smiles provides dental services to patients of all ages, including children.

We take additional care when handling information related to minors.

Information regarding a minor patient may be accessed or managed by a parent, legal guardian, or authorized representative as permitted by applicable law.

We do not knowingly collect personal information from children through our website for purposes unrelated to providing requested dental services.

If you believe a child has submitted information through our website improperly, please contact Aura Smiles so we can review and address the concern.

WEBSITE THIRD-PARTY LINKS

The Aura Smiles website may contain links to third-party websites, services, or resources.

These third-party websites may have their own privacy policies and practices.

Aura Smiles is not responsible for:

• The privacy practices of third-party websites.
• The security of information submitted to third-party websites.
• The content or functionality of external websites.

We encourage visitors to review the privacy policies of any external websites they visit.

YOUR RIGHT TO FILE A PRIVACY COMPLAINT

If you believe that Aura Smiles has violated your privacy rights or has not followed the privacy practices described in this Notice, you may submit a complaint.

You may submit a complaint directly to Aura Smiles using the contact information below.

You may also file a complaint with the:

U.S. Department of Health and Human Services
Office for Civil Rights

Information regarding filing a complaint with the Office for Civil Rights is available through the U.S. Department of Health and Human Services website.

NO RETALIATION

Aura Smiles will not retaliate against you for:

• Filing a privacy complaint.
• Exercising your privacy rights.
• Requesting access to your health information.
• Requesting restrictions or alternative communications.
• Asking questions regarding our privacy practices.

Your decision to exercise your privacy rights will not affect the quality of care you receive from Aura Smiles.

CHANGES TO THIS NOTICE

Aura Smiles reserves the right to update this Notice of Privacy Practices at any time.

When changes are made:

• The revised Notice will include a new effective date.
• The updated Notice will be available on our website.
• The revised Notice will apply to all protected health information maintained by Aura Smiles after the effective date.

You may request a current copy of this Notice at any time.

ACKNOWLEDGMENT OF RECEIPT

You may be asked to acknowledge that you received Aura Smiles PLLC’s Notice of Privacy Practices.

Your acknowledgment does not mean you are agreeing to any additional uses or disclosures of your health information beyond those described in this Notice.

Your acknowledgment confirms only that you received information describing your privacy rights and Aura Smiles’ responsibilities regarding your protected health information.

Effective Date: August 22, 2026

Contact Information

Aura Smiles PLLC
Website: https://theaurasmiles.com
Email: [email protected]
Phone: (520) 261-8139
Tucson, Arizona