Privacy Policy – Apex Lab Group
Effective Date: January 1, 2026
Last Updated: March 15, 2026
Apex Lab Group (“Apex,” “Company,” “we,” “our,” or “us”) provides dental laboratory and fulfillment services, including the processing of prescriptions (“Rx”) and the manufacture of dental products such as crowns, veneers, and related devices.
This Privacy Policy explains how we collect, use, disclose, and protect personal information across our website (apexlabgroup.com), platforms, and services in both direct-to-consumer (“DTC”) and business-to-business (“B2B”) contexts.
1. IMPORTANT DISTINCTION: HIPAA VS. NON-HIPAA DATA
Apex Lab Group operates primarily as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).
- When we process information on behalf of licensed healthcare providers (e.g., dentists), such information may constitute Protected Health Information (“PHI”) and is governed by HIPAA and applicable Business Associate Agreements (“BAAs”).
- When individuals interact with us directly (e.g., website use, inquiries, DTC interactions), such information may not be subject to HIPAA and is governed by this Privacy Policy and applicable consumer privacy laws.
2. INFORMATION WE COLLECT
We collect the following categories of information:
A. Personal Identifiers
- Name, address, email, phone number
- Account credentials
B. Health-Related Information
- Prescription data (Rx)
- Dental scans, impressions, and case details
- Treatment specifications provided by licensed professionals
C. Commercial Information
- Orders, transactions, and fulfillment records
D. Technical Data
- IP address, browser type, device identifiers
- Usage data and analytics
E. Communications Data
- SMS messages, emails, call records, chat interactions
3. HOW WE USE INFORMATION
We use information to:
- Fulfill dental prescriptions and manufacture products
- Communicate with providers and customers
- Provide order status, support, and operational updates
- Improve services and system performance
- Comply with legal, regulatory, and contractual obligations
- Detect fraud, misuse, or unauthorized activity
4. LEGAL BASES (GDPR)
For individuals in the EEA/UK, we process data based on:
- Performance of a contract
- Legitimate business interests
- Compliance with legal obligations
- Explicit consent (where required)
- Provision of healthcare services (for health-related data)
5. PROCESSING OF HEALTH DATA
Health-related data may constitute “special category data” under GDPR.
We process such data:
- On behalf of healthcare providers
- Pursuant to contractual necessity
- With appropriate safeguards (encryption, access controls, minimization)
6. DISCLOSURE OF INFORMATION
We may disclose information to:
- Licensed healthcare providers (dentists, clinics)
- Dental laboratories and manufacturing partners
- Service providers (hosting, communications, analytics)
- Payment processors
- Legal or regulatory authorities when required
We do not sell PHI.
7. DATA RETENTION
We retain data:
- As required for order fulfillment and operations
- As required by applicable healthcare and business laws
- As necessary for dispute resolution and enforcement
8. YOUR RIGHTS
U.S. Rights (CCPA/CPRA and similar laws)
You may have the right to:
- Access personal data
- Request deletion
- Correct inaccuracies
GDPR Rights
You may:
- Access, correct, or delete your data
- Restrict or object to processing
- Request data portability
- Withdraw consent
Contact: info@apexlabgroup.com
9. COMMUNICATIONS
We may communicate with you via email, phone, or SMS for:
- Order updates
- Service notifications
- Marketing (where permitted)
See our Consent to Communications for details.
10. COOKIES & TRACKING
We use cookies and similar technologies for:
- Site functionality
- Analytics
- Marketing
You may control cookies through browser settings.
11. SECURITY
We implement industry-standard safeguards, including:
- Encryption
- Access controls
- Secure infrastructure
No system is completely secure.
12. INTERNATIONAL TRANSFERS
Your data may be transferred to the United States and other jurisdictions.
Where required, we implement safeguards such as:
- Standard Contractual Clauses (SCCs)
13. HIPAA Compliance and Security
HIPAA rules are set forth by the U.S. Department of Health and Human Services and are documented in the Privacy Rule with specific rules regarding the sharing of information between health care providers. Dental laboratories and Dentists are both considered "Health Care Providers" and as such are permitted to share patient information and treatment activities.
Furthermore, according to the ADA, the Privacy Rule states that there is no requirement for a Business Associate Agreement between the dental laboratory and the dental practice. "Protected Health Information", such as SS #'s, telephone numbers, birth dates, medical records, or information that relates the patient to their name on the work authorization or their relatives is not shared from the dental office to the laboratory. The information shared is only used to identify the materials sent to the laboratory.
The dental office does have the option of using codes rather than names if so desired.
Apex Lab Group maintains a high level of data security on-site and in transit of cases and data between our laboratories and our valued customers.
APEX agrees to amend this Agreement from time to time as is necessary to comply with the requirements of the Privacy Rule and the Health Insurance Portability and Accountability Act, Public Law 104-191, HIPPA and HITECH.
14. NO MEDICAL OR DENTAL ADVICE
Apex Lab Group is not a licensed healthcare provider.
All prescriptions and treatment decisions are made by licensed professionals. We do not provide medical or dental advice.
15. CHANGES
We may update this Privacy Policy at any time.
16. CONTACT
Apex Dental Laboratory Group
5400 Bosque Blvd #201
Waco, TX 76710
254-772-1051
info@apexlabgroup.com