Data Deletion Policy

THE WOBBLY TOOTH DENTAL PRACTICE

DATA DELETION POLICY

Effective Date: March 25, 2026 | Last Reviewed: March 25, 2026

Applies to: www.thewobblytooth.com

Compliant with: Meta Developer Data Use Policy • Meta Platform Terms • HIPAA • CCPA/CPRA • Maryland PIPA • GDPR

1. Purpose and Scope

This Data Deletion Policy ("Policy") governs how The Wobbly Tooth Dental Practice ("we," "us," or "our") processes and fulfills requests to delete personal data collected through our website (www.thewobblytooth.com), digital marketing tools, and associated third-party services, including Meta Platforms (Facebook/Instagram).

This Policy is published in compliance with:

Meta Developer Data Use Policy (Section 6.2–6.3) and Meta Platform Terms Section 3(d)(i) – which mandate that publishers provide users with an accessible, clearly marked mechanism to request data deletion
Meta's November 2024 enhanced data deletion requirements for all publishers and developers using Meta Business Tools
Meta's Data Deletion Instructions URL requirement for the Meta App Dashboard
HIPAA (Health Insurance Portability and Accountability Act) – for any health-related data
CCPA/CPRA (California Consumer Privacy Act) – Right to Deletion
Maryland Personal Information Protection Act (MPIPA)
General Data Protection Regulation (GDPR) – Right to Erasure (Article 17)

⚠️ Meta Compliance Note

Meta requires every publisher using Meta Business Tools (including the Meta Pixel and Custom Audiences) to provide a publicly accessible Data Deletion Instructions URL. This page fulfills that requirement. The URL for this policy must be registered in the Meta App Dashboard under Settings → Basic → Data Deletion Instructions URL.

2. Categories of Personal Data We Hold

Before submitting a deletion request, it is helpful to understand what categories of data we may hold about you, and their origin:

2a. Website & Marketing Data (Deletable on Request)

Contact information submitted via our website forms (name, email, phone number)
Appointment request data submitted through our online scheduling tool
Website interaction data collected via the Meta Pixel (pages visited, button clicks, form submissions, IP address, browser type, device identifiers)
Meta Custom Audience data – hashed contact information (email or phone) uploaded to Meta for ad targeting purposes
Analytics and cookie data collected by Google Analytics and similar tools
Email marketing engagement data (opens, clicks, unsubscribes)

2b. Protected Health Information / Clinical Records (HIPAA-Governed)

♥ Important: HIPAA-Protected Records

Clinical dental records, treatment notes, X-rays, medical histories, and insurance information are protected health information (PHI) governed by HIPAA. These records have separate retention and deletion requirements and are NOT deleted through this web-based process.

To request PHI deletion/record amendment: Contact our office directly at (301) 663-4012 or visit us in person.

3. How to Request Data Deletion

3.1 Online Data Deletion Request (Website & Marketing Data)

To request deletion of your website and marketing data, please:

Email us at: hello@thewobblytooth.com
Subject line: "DATA DELETION REQUEST"
Include in your request:
- Your full name
- Email address associated with your data
- Phone number (if applicable)
- Specific categories of data you want deleted (e.g., "all website data," "Meta Pixel data," "email marketing data")
- Confirmation that you are the data subject or authorized representative

3.2 Meta-Specific Data Deletion

For data shared with Meta Platforms through the Meta Pixel:

Option 1: Submit the request to us as described above, and we will process it within our systems and coordinate with Meta where applicable
Option 2: Use Meta's own data deletion tools:
- Facebook: Account Settings → Your Facebook Information → Deactivation and Deletion
- Instagram: Settings → Security → Data and History → Request Download
- Meta Ad Preferences: www.facebook.com/ad/preferences

4. Processing Time and Verification

Response Time: We will acknowledge your deletion request within 5 business days
Verification: We may need to verify your identity before processing the request
Completion: We will complete the deletion within 30 days of verification
Confirmation: We will send you a confirmation email when deletion is complete

5. Data We Cannot Delete

We may not be able to delete certain types of data, including:

Anonymized/Aggregated Data: Data that has been anonymized and cannot be reasonably linked to you
Legal Requirements: Data we must retain to comply with legal obligations (e.g., tax records, regulatory compliance)
Business Records: Data necessary for ongoing business operations (e.g., active appointment scheduling)
Public Information: Information that is already publicly available

6. Third-Party Data Deletion

When we delete your data, we will also:

Meta Platforms: Request deletion of your data from Meta's systems where technically feasible
Service Providers: Notify our third-party service providers to delete your data from their systems
Analytics Providers: Request deletion from Google Analytics and other analytics platforms

7. Data Retention Periods

Before deletion, we retain data for the following periods:

Website Contact Forms: 2 years from last interaction, unless deletion is requested
Marketing Data: 3 years from last interaction, unless deletion is requested
Analytics Data: 26 months (Google Analytics default), unless deletion is requested
Meta Pixel Data: Varies by Meta's policies, typically up to 180 days for user-level data

8. Download Original Document

You can download the original Data Deletion Policy document here:

Download Data Deletion Policy (DOCX)

9. Contact Information

The Wobbly Tooth Dental Practice
176 Thomas Johnson Drive, Suite 200
Frederick, MD 21702
Email: hello@thewobblytooth.com
Phone: (301) 264-7094 (New Patients) / (301) 663-4012 (Existing Patients)