Privacy Policy

Overview

Second Opinion ("we", "our", "us") is committed to protecting your privacy and the confidentiality of your medical information. This Privacy Policy explains how we collect, use, store, and protect your personal and medical information when you use our website and radiographic evaluation services.

This service is HIPAA-compliant. Your medical imaging and personal health information is handled under the protections afforded by the Health Insurance Portability and Accountability Act (HIPAA) of 1996.

Information We Collect

Information You Provide

Full name, email address, phone number, and country
Clinical description of your case and specific questions
Medical imaging files (DICOM, CBCT, X-rays, PSG reports)
Previous radiology reports or clinical records you choose to share

Information Collected Automatically

IP address and approximate geographic location
Browser type, operating system, and device type
Pages visited and time spent on our website (via cookies)

How We Use Your Information

To provide the radiographic evaluation service you requested
To communicate with you about your case and deliver your report
To assign the appropriate specialist to review your imaging
To issue invoices and process payments
To improve our website and service quality (anonymised data only)
To comply with legal and regulatory obligations

We do not use your information for advertising, marketing to third parties, or any purpose unrelated to your consultation.

We do not sell, rent, or trade your personal or medical information to any third party. Your information may be shared only in the following limited circumstances:

Reviewing specialists: Your imaging is shared with the board-certified radiologist assigned to your case — under strict confidentiality obligations.
Essential service providers: Encrypted cloud storage providers and secure upload platform providers, bound by data processing agreements.
Legal requirement: Where disclosure is required by law, court order, or regulatory authority.

HIPAA Compliance

Second Opinion operates as a HIPAA-covered entity and complies with all applicable HIPAA Privacy Rule and Security Rule requirements. Specifically:

All staff with access to Protected Health Information (PHI) are trained in HIPAA requirements
Business Associate Agreements (BAA) are in place with all third-party service providers who handle PHI
Access to PHI is restricted on a need-to-know basis
All PHI disclosures are logged and auditable

To request a Business Associate Agreement, please contact us at contact@dentistopinion.com.

Data Security

All data is stored on AES-256 encrypted servers
All data is transmitted over TLS 1.3 encrypted connections
Secure, time-limited upload links are generated per case (never email attachments)
Access to case files is restricted to the assigned specialist and essential admin staff
Regular security audits and penetration testing are conducted

In the event of a data breach that affects your PHI, we will notify you in accordance with HIPAA Breach Notification Rule requirements (within 60 days of discovery).

Data Retention

Your imaging files and associated reports are retained for 90 days from the date of report delivery. You will receive an automated notification 14 days before your files are due for deletion. After 90 days, all files are permanently and irreversibly deleted from our servers.

If you require extended retention for legal or clinical reasons, please contact us in writing before the 90-day period expires.

Your Rights

You have the right to:

Access a copy of the personal information we hold about you
Request correction of inaccurate personal information
Request deletion of your personal information (subject to legal retention requirements)
Request restriction of processing of your personal information
Withdraw consent at any time (where processing is based on consent)
Lodge a complaint with your national data protection authority

To exercise any of these rights, email contact@dentistopinion.com with the subject line "Privacy Request".

Cookies

Our website uses essential cookies only — for session management and security. We do not use advertising cookies, tracking pixels, or third-party analytics that share data with advertisers. You may disable cookies in your browser settings, though some website functionality may be affected.

Contact

For any privacy-related questions, requests, or concerns, please contact our Privacy Officer at:

Second Opinion
Email: contact@dentistopinion.com
Phone: +1 (800) 000-0000

We will respond to all privacy requests within 30 days.