Effective date: October 21, 2026
Who we are
The Endo Fix (https://theendofix.com) is an endodontics education blog published by The ENDO Fix LLC (“we”, “us”, “our”). This policy explains what personal information we collect when you visit the site, how we use it, and the choices you have. If you have questions, email theendofix@gmail.com.
The Endo Fix is the educational blog of Dr. Michael Trudeau’s endodontic practice, Trudeau & Domark Endodontics (https://www.endovirginia.com). This policy covers theendofix.com only. Patient records and appointment information held by the practice are handled separately under the practice’s own policies and applicable health privacy law (such as HIPAA).
The Endo Fix is for professional education only. Please do not send us patient health information or protected health information (PHI) through any form, comment, or email. For appointments or questions about your own care, contact the practice directly at 757-638-4500.
What personal data we collect and why
Contact form
If you use our contact form (powered by WPForms), we collect your name, email address, the subject you choose, and your message. We use this only to reply to you. Form submissions are emailed to theendofix@gmail.com, so a copy is stored in our Google (Gmail) account. Depending on plugin settings, a copy may also be stored in our WordPress database.
Newsletter (Mailchimp)
If you sign up for our newsletter (“Get Your Fix!”), we collect your email address and pass it to Mailchimp (Intuit Inc.), our email service provider, through the Mailchimp for WordPress plugin. Mailchimp stores your address and may record whether you open our emails or click links in them. We use this only to send you the newsletter and to understand which content is useful. Every email has an unsubscribe link. See Mailchimp’s privacy policy at https://www.intuit.com/privacy/statement/.
Pop-up and signup forms (OptinMonster)
We may use OptinMonster to show signup forms or messages. OptinMonster may set cookies or use local storage to remember whether you have already seen or closed a campaign, and it passes any email address you enter to our newsletter provider. See https://optinmonster.com/privacy/.
Comments
Comments are currently open only to logged-in users, and public registration is turned off. Older comments from earlier years remain on the site. When a comment is left, we collect the data shown in the comment form, plus the commenter’s IP address and browser user-agent string to help detect spam.
An anonymized string created from your email address (also called a hash) may be sent to the Gravatar service to check whether you use it. The Gravatar privacy policy is at https://automattic.com/privacy/. Once your comment is approved, your profile picture is visible to the public alongside your comment. Approved comments and the name you provide are public.
Media
If you upload images to the website, avoid uploading images with embedded location data (EXIF GPS). Visitors can download and extract location data from images on the website.
Analytics and site statistics (Jetpack Stats)
We use Jetpack Stats (by Automattic) to understand how many people visit and which posts they read. Jetpack Stats processes information such as your IP address (used briefly and not stored in full), pages viewed, referring site, browser and device type, and approximate location, and it may set cookies. We see only aggregated statistics. See https://jetpack.com/support/privacy/ and https://automattic.com/privacy/. Other Jetpack features we use, such as image carousels, sharing buttons, likes, and image delivery through the WordPress.com CDN, may also process your IP address and browser information.
Caching and performance
We use WP Super Cache and our host’s performance tools to serve pages faster. These store copies of public pages, not personal data about you.
Cookies
We and the services above may use cookies (small files stored in your browser):
- Comment cookies: if you leave a comment, you may choose to save your name, email, and website in cookies so you don’t have to re-enter them. These last one year.
- Login cookies: if you log in, WordPress sets cookies for your login information (two days, or two weeks if you choose “Remember Me”) and screen display choices (one year).
- Analytics cookies: set by Jetpack Stats to measure visits.
- Signup and pop-up cookies: set by OptinMonster to control when forms appear.
- Embedded content cookies: see the next section.
You can block or delete cookies in your browser settings. Some features may not work properly if you do.
Embedded content from other websites
Posts may include embedded content such as YouTube videos, images, or Instagram posts. Embedded content from other websites behaves exactly as if you had visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content. This includes tracking your interaction if you have an account and are logged in to that website.
Who we share your data with
We do not sell your personal information. We do not add blog visitor data, newsletter signups, or contact form messages to the practice’s patient records. We share data only with the service providers that run the site:
- Bluehost (Newfold Digital), our web host. Bluehost stores the website and its database and keeps standard server logs (such as IP addresses and requests) for security and operations.
- Automattic (Jetpack, Gravatar, WordPress.com CDN), for statistics, site features, and spam protection.
- Mailchimp (Intuit), for the newsletter.
- OptinMonster, for signup forms.
- Google (Gmail), where contact form notifications and emails are received.
We may also disclose information if required by law, or to protect our rights or the safety of others.
Planned changes: analytics, advertising, and affiliate links
We may add the following in the future. If we do, we will update this policy, and we will add a cookie consent tool where the law requires it:
- Google analytics tools (Site Kit by Google, Google Analytics 4, and Search Console) to measure traffic. These use cookies and share usage data with Google. See https://policies.google.com/privacy.
- Affiliate links: if you click an affiliate link and make a purchase, we may earn a commission at no extra cost to you. Affiliate partners may use cookies to track the referral. Affiliate links will be disclosed.
- Sponsorships: sponsored content will be clearly labeled.
- Advertising: ad networks may use cookies or similar technologies to show ads, including ads based on your interests. Where required, we will ask for your consent first.
- Courses or memberships: if we offer paid products, we will collect the account and payment information needed to provide them. Payments would be processed by a third-party payment processor, and we would not store full card numbers.
How long we retain your data
- Contact messages: kept for up to 24 months so we can respond and follow up, then deleted.
- Newsletter subscribers: kept until you unsubscribe or ask us to delete your data.
- Comments: comments and their metadata are kept indefinitely, so follow-up comments can be recognized and approved automatically.
- Registered users: we store the personal information users provide in their profile. Users can see, edit, or delete their information at any time (except their username). Site administrators can also see and edit that information.
- Analytics: kept according to the provider’s retention settings (for example, Jetpack Stats keeps aggregated statistics).
- Server logs: kept by Bluehost according to its own retention practices.
Your rights over your data
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy of it (including an exported file, if you have an account or have left comments);
- correct inaccurate data;
- ask us to delete your data (this does not include data we must keep for administrative, legal, or security reasons);
- object to or restrict certain processing, or withdraw consent at any time (for example, by unsubscribing from the newsletter);
- data portability;
- opt out of the “sale” or “sharing” of personal information, or of targeted advertising. We do not sell personal information. If that changes, we will provide an opt-out;
- not be discriminated against for using these rights.
Residents of the EU, UK, and EEA (GDPR) and of California and other US states with privacy laws (such as the CCPA/CPRA) have rights along these lines. To make a request, email theendofix@gmail.com. We may need to verify your identity, and we will respond within the time the law requires. You may also complain to your local data protection authority.
Where GDPR applies, we rely on your consent (newsletter, non-essential cookies), our legitimate interests (running, securing, and improving the site, and replying to messages), and legal obligations as our legal bases.
Where your data is sent
Our service providers may store and process data in the United States and other countries, which may have different data protection laws from yours. Where required, transfers rely on appropriate safeguards offered by those providers. Visitor comments may be checked through an automated spam detection service.
Children’s privacy
The Endo Fix is intended for dental professionals and adults. It is not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect their personal information. If you believe a child has given us personal data, contact us and we will delete it.
Security
We use HTTPS, keep WordPress and plugins updated, and limit access to the site’s administration. No method of transmission or storage is 100% secure, however.
Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new effective date.
Contact us
The ENDO Fix LLC
Email: theendofix@gmail.com