Privacy Policy & Notice of Privacy Practices

Metro Dental & Implant Studio
1 Wallis Court, Suite 3
Lexington, MA 02421
(617) 356-0860

The practice is led by Dr. Alex Fedorenko, DMD, a board-eligible periodontist and Massachusetts’ only licensed 3-on-6™ dental implant provider. Any questions about how your information is handled can be directed to the Privacy Officer at the address above.

We collect two categories of information:

1. Protected Health Information (PHI)

When you become a patient, we create and maintain dental and medical records that include:

• Contact and identification details (name, address, date of birth, phone, email)
• Medical and dental history, current medications, allergies
• Clinical notes, CBCT/3D imaging, X-rays, and intra-oral photos
• Treatment plans, written estimates, and consent documents
• Payment, insurance, and financing information (including CareCredit and Proceed Finance applications submitted through our office)

This information is PHI under HIPAA and is maintained in a secure, access-controlled practice-management system.

2. Website Information

When you visit metroimplantstudio.com, we may automatically collect:

• Technical data — IP address, browser type, device type, referring URL
• Usage data — pages visited, time on page, clicks, form submissions
• Cookies and similar tracking technologies (see Cookies & Tracking below)

If you submit a contact form or consultation request, we also collect the information you provide (name, phone, email, message).

We use your information for the following purposes:

Treatment

To diagnose, plan, and deliver dental care; consult with referring or receiving providers; and coordinate laboratory work for crowns, veneers, bridges, and 3-on-6™ restorations.

Payment

To bill you and submit claims on your behalf to your insurance carrier; to verify eligibility; to collect fees; to process financing applications with our third-party partners (CareCredit, Proceed Finance).

Healthcare Operations

To run our practice — staff training, credentialing, quality improvement, appointment reminders, and compliance with licensing authorities.

Website & Marketing

To respond to inquiries submitted through our website, to remember your preferences, to measure website performance, and to improve our services. We do not sell your personal or health information to third parties.

We share PHI only when permitted or required by HIPAA:

• With your written authorization — for any purpose not covered by treatment, payment, or healthcare operations.
• With other treating providers — specialists, primary-care physicians, dental laboratories, or emergency-room staff coordinating your care.
• With your insurance carrier or financing partner — to process claims, verify eligibility, or complete financing applications you have authorized.
• With business associates — vendors who help run the practice (practice-management software, imaging backup, secure email, appointment reminders). Each is bound by a Business Associate Agreement requiring HIPAA-grade safeguards.
• As required by law — responses to court orders, public-health reporting, suspected abuse reports, workers’ compensation, and law-enforcement requests within the limits of HIPAA.

We do not disclose PHI for marketing purposes without your written authorization, and we never sell PHI.

As a patient, you have the right to:

• Access and obtain a copy of your dental records — typically within 30 days of a written request.
• Request an amendment if you believe information in your record is incorrect.
• Request restrictions on how we use or share your PHI (we will honor reasonable requests where permitted by law).
• Request confidential communication — e.g., that we contact you only at a specific phone number or address.
• Receive an accounting of certain disclosures we have made of your PHI.
• Be notified if a breach of your unsecured PHI occurs.
• Revoke an authorization in writing at any time (except to the extent we have already relied on it).
• File a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services without fear of retaliation.

To exercise any of these rights, contact the Privacy Officer at the address listed at the bottom of this policy.

We maintain administrative, physical, and technical safeguards designed to protect your PHI:

• Role-based access controls in our practice-management system
• Encrypted storage and transmission of clinical records and imaging
• Regular staff HIPAA training and confidentiality agreements
• Secure destruction of paper records and end-of-life digital media
• Written Business Associate Agreements with vendors who handle PHI

Despite these safeguards, no method of electronic storage or transmission is 100% secure. In the event of a breach affecting your unsecured PHI, we will notify you as required by HIPAA.

Our website uses cookies and similar technologies to:

• Remember your preferences and form inputs
• Measure website performance (Google Analytics or equivalent analytics providers, if active)
• Understand how visitors move through the site so we can improve content

You can disable cookies in your browser settings. Some website features (e.g., form submissions) may not work correctly with cookies disabled. We do not use website cookies to track you across unaffiliated third-party sites, and we do not engage in advertising remarketing of identified health conditions.

Our website is not intended for children under 13, and we do not knowingly collect information from anyone under 13 online.

Our website and consultation forms may link to or integrate with services operated by third parties, including:

• Google Maps (office location embeds)
• Google Business Profile (reviews display)
• CareCredit and Proceed Finance (financing applications you initiate)
• Social media platforms (Facebook, Instagram, Yelp) linked from our footer

Each of those services has its own privacy practices. We recommend reviewing their policies before submitting information to them.

Dental records, including PHI, are retained for the minimum period required by Massachusetts law and dental-licensing requirements — generally seven (7) years from the date of last treatment for adult patients, and longer for pediatric records (until the patient’s 26th birthday or seven years after last treatment, whichever is later).

Website form submissions and analytics data are retained only as long as needed to respond to your inquiry and to run our practice, after which they are securely deleted or anonymized.

Metro Dental does not target or market services directly to children under 13. For minor patients, we collect and use PHI only as directed by the minor’s parent or legal guardian, in accordance with HIPAA and Massachusetts law.

We may update this Privacy Policy from time to time. The effective date at the top of the page indicates when the current version took effect. Material changes affecting how we use or share PHI will be communicated through our website and posted in our office.