Privacy
Privacy policy
Written to be read rather than skimmed. If anything here is unclear, email us and we will explain it in plain language.
Last updated 5 September 2026
The short version
We collect what you type into our form or send us on WhatsApp, plus anonymised traffic analytics. We do not sell it, we do not build advertising profiles from it, and we do not want your medical records. If you want it deleted, email andy@colombiamedical.co and it will be deleted.
Who is responsible
FullArchReplacement.com is operated by Scout Theory LLC, a limited liability company registered in Ohio, United States, with operations based in Medellín, Antioquia, Colombia. For any privacy question, contact andy@colombiamedical.co.
What we collect
Information you give us
When you submit the contact or quote form, we receive the fields you completed: your name, email address, optional phone number, the country you are travelling from, which arches you are asking about, where you are in your process, and whatever you write in the message box. When you message our WhatsApp number, we receive your message content and the phone number you sent it from, and that conversation is stored in WhatsApp under Meta’s own terms in addition to ours.
Information collected automatically
We use Google Analytics 4 (property G-KKGRRG3BJS) to understand which pages are read and how people arrive. This sets cookies and processes an anonymised form of your IP address, approximate location at city level, device type, browser, referring source and page interactions. We do not use it to identify you personally.
Health information
You may voluntarily describe your dental situation to us. We treat anything you tell us about your health as confidential and we do not publish it, share it publicly or use it in marketing. Please do not send us x-rays, CBCT scans, or medical or dental records through the web form. The form is not built to receive them and we do not want to be holding them. FullArchReplacement.com is not a covered entity under HIPAA and this site is not a HIPAA-compliant channel.
How we use it
- To answer your question and, if you asked for one, to prepare a clinic shortlist.
- To introduce you to a clinic — but only when you have asked us to, and only with the details needed for that introduction.
- To understand which content is useful so we write more of it.
- To meet legal obligations where they apply.
We do not sell personal information. We do not share it with data brokers or advertising networks. We do not send unsolicited marketing email.
Who else processes your data
- Google — Analytics, and Google Apps Script, which receives and stores the contact form submissions.
- Meta (WhatsApp) — if you choose to message us there.
- Our hosting provider — server logs, retained for a short period for security and diagnostics.
- Clinics — only when you have asked for an introduction, and only the details required for it.
These providers operate under their own privacy policies. Some are based in the United States, so if you are in the EU, UK or Colombia your data may be transferred across borders. Where required, we rely on standard contractual clauses or the provider’s equivalent safeguards.
Affiliate and referral links
Some outbound links on this site are affiliate links, meaning we may earn a commission if you click through and complete a transaction. These are labelled where they appear. Clicking one may allow the destination to set its own cookie identifying us as the referrer. That does not give us access to your account or transaction details with them. We also receive referral fees from clinic partners; this is described on our about page.
How long we keep it
Form and message enquiries are kept for up to 24 months so that we can pick up a conversation if you come back to us, then deleted. Analytics data follows Google’s standard retention period. You can ask for earlier deletion at any time.
Your rights
Wherever you live, you can ask us to show you what we hold, correct it, delete it, or stop using it. Email andy@colombiamedical.co and we will action it within 30 days.
- EU and UK (GDPR): rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your national supervisory authority. Our lawful bases are your consent for analytics and marketing, and legitimate interest or contract performance for responding to your enquiry.
- California (CCPA/CPRA): rights to know, delete, correct and opt out. We do not sell or share personal information as those terms are defined in the statute.
- Colombia (Ley 1581 de 2012): rights of conocer, actualizar, rectificar y suprimir your personal data, and to withdraw consent.
Cookies
We use Google Analytics cookies for measurement and, if you follow an affiliate link, the destination site may set an attribution cookie. We do not use advertising retargeting pixels. You can block or clear cookies in your browser settings; the site will still work.
Security
The site is served over HTTPS and form submissions are transmitted encrypted. No system is perfectly secure, so please use good judgement about what you send through a web form.
Children
This site is intended for adults making decisions about their own dental treatment. We do not knowingly collect information from anyone under 18. If you believe a minor has submitted information, email us and we will delete it.
Changes
If we change this policy we will update the date at the top. Material changes will be flagged on the homepage.