Privacy Policy - National Dental Association

This Privacy Policy explains how the National Dental Association ("NDA," "we," "us" or "our") collects, uses, and protects information through our website (ndaonline.org), member portal, and related digital services.

About the National Dental Association

Founded in 1913, the NDA is the largest professional association of minority dentists in the world. We serve over 3,000 Black dentists and represent more than 30 million Black Americans through our six geographic districts throughout the U.S. and Caribbean.

As a JEDI organization, we're committed to providing high-quality oral healthcare to underserved communities while advancing opportunities for minorities in the dental profession.

Contact Information

National Dental Association

Address: 3517 16th Street, NW, Washington, DC 20010

Email: [email protected]

Privacy Questions: [email protected]

Phone: (202) 885-9492

Website: ndaonline.org

Information We Collect

Information You Provide Directly

Membership & Account Information PORTAL

  • Personal identifiers (name, date of birth, contact information)
  • Professional information (license numbers, specialty areas, practice details)
  • Educational background and credentials
  • Employment history and current practice information
  • Membership tier and history (Free, Paid, Corporate levels)
  • District and chapter affiliation
  • Professional achievements and certifications

Convention & Event Registration

Professional Directory Information

Financial Information

Communication & Engagement Data

Information Collected Automatically

Data Type Purpose Retention
Website Analytics IP addresses, browser info, pages visited, time on site 12 months
Device Information Device type, operating system, mobile identifiers 12 months
Login Activity Portal access logs, session duration, login timestamps 24 months
Cookie Data Session info, preferences, functionality settings Varies by type
Map Interactions District map usage, member directory searches 6 months

Information from Third Parties

How We Use Your Information

Advancing Our Mission

Member Services & Professional Development

Advocacy & Research Initiatives

Professional Directory Services

Communications & Engagement

Community Outreach & Education

Member Portal & Account Data NEW

Our enhanced member portal provides secure access to exclusive resources and personalized services.

Account Management via MemberStack

We use MemberStack for secure account management and tier-based access control. This system manages your login credentials, membership status, and content permissions. MemberStack operates under its own privacy policy and security standards, which comply with industry best practices.

Membership Tiers & Access Levels

What Data Is Stored in Your Member Portal

Data Integration & Workflows

Your member portal data integrates with several systems to provide seamless service:

Database & Backend Infrastructure

We use a secure, enterprise-grade PostgreSQL database system to store and manage member information. This database serves as the central hub for all member data, with automated triggers and functions that ensure real-time synchronization with external systems.

Real-Time Data Synchronization

When you register or update your profile, our system employs automated workflows that instantly sync your information across platforms:

Salesforce CRM Integration

Member data automatically syncs to Salesforce for relationship management through two methods:

Direct Integration (Primary Method): When you register or update your profile, database triggers activate serverless functions that authenticate with Salesforce using OAuth 2.0 and create or update your Contact record. This happens in real-time without any manual intervention.

Zapier Integration (Backup Method): As an alternative or redundant system, we can route data through Zapier's workflow automation platform, which provides visual workflow management and additional data transformation capabilities.

Data Flow Process

  1. Member Action: You register or update your profile through the portal
  2. Database Update: Your information is securely stored in our PostgreSQL database
  3. Trigger Activation: Automated database trigger detects the change
  4. Edge Function: Serverless function authenticates with external service (Salesforce)
  5. API Call: Secure API request sent with your data
  6. External Update: Your Contact record is created or updated in Salesforce
  7. Confirmation: System logs the successful sync

Integration Partners

Data Security in Transit

All integrations employ multiple security layers:

Admin Approval Workflows

Free tier applications require administrative review to verify professional credentials. During this process:

We typically complete reviews within 3-5 business days.

Information Sharing and Disclosure

Within the NDA Network

Affiliated Organizations

We may share information with our affiliated organizations to support our collective mission:

Chapter Organizations (Districts I-VI)

We share member information with your designated district and local chapter to facilitate:

Professional Partners

Continuing Education Providers

When you register for CE courses, we share necessary information to:

Industry Partners & Sponsors

With appropriate safeguards and your consent, we work with dental companies and organizations that support our mission to provide:

Service Providers

Service Type Providers Data Shared
Technology Infrastructure Webflow, MemberStack, Mapbox Account info, usage data, location preferences
Payment Processing Stripe Payment details, transaction history
CRM & Communications Salesforce, Email service providers Contact info, engagement history
Event Management Convention centers, Hotels, PassKey Registration details, travel preferences
Data Collection Typeform Application responses, survey data

Legal and Safety Requirements

Your Rights and Choices

Membership Directory Control

Profile Visibility Options

Access directory settings through your member portal account preferences.

Communications Preferences

Email Subscriptions

Control which types of communications you receive:

How to Update: Use the preference center link in any email, contact our office, or update settings in your member portal. Note that certain membership-related communications (payment confirmations, convention registrations) cannot be opted out of while maintaining active membership.

Data Access and Control

Your Data Rights

Important Notes on Data Deletion

While we honor data deletion requests, some information must be retained for:

We will clearly explain what can and cannot be deleted when processing your request.

How to Exercise Your Rights

Submit data rights requests by:

We will verify your identity and respond within 30 days. Complex requests may require additional time.

Account Management

Data Security and Protection

Protecting your personal and professional information is a top priority for the NDA.

Technical Safeguards

Infrastructure Security

Organizational Safeguards

Access Controls

Staff Training & Policies

Vendor Management

Incident Response

In the unlikely event of a data security incident:

Your Role in Security

Best Practices for Members

Cookies and Tracking Technologies

Types of Cookies We Use

Cookie Type Purpose Duration
Essential Cookies Required for website functionality and member login systems Session / Persistent
Analytics Cookies Understanding website usage and improving user experience 12 months
Preference Cookies Remembering your settings and customization choices 12 months
Functionality Cookies Enhanced features like map interactions and directory searches Session / 6 months

Third-Party Analytics

Google Analytics

We use Google Analytics with privacy-focused settings to understand:

IP anonymization is enabled, and we do not combine Analytics data with personally identifiable information.

Mapbox Analytics

Our interactive district map uses Mapbox, which collects usage data to:

Your Cookie Choices

Managing Cookies

Note: Disabling cookies may limit your ability to use certain features of our website and member portal, particularly login functionality and personalized content.

Payment Processing & Financial Data

Stripe Payment Integration

All payment processing for memberships, event registrations, and donations is handled securely through Stripe, a PCI-DSS compliant payment processor.

How Payment Data Is Handled

What Financial Information We Retain

For membership administration and tax compliance, we maintain:

Financial Data Retention

Financial records are retained for a minimum of 7 years to comply with:

Refund and Cancellation Policies

Refund eligibility varies by purchase type:

Contact [email protected] for refund requests with transaction details.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We are committed to transparency in how we notify members of changes.

How We Notify You

Update Notification Process

What Constitutes a "Significant" Change

We will provide advance notice and, where appropriate, seek consent for changes that:

Your Acceptance of Changes

By continuing to use our services after changes take effect, you accept the updated Privacy Policy. If you disagree with changes, you may:

Review and Audit Schedule

The NDA conducts regular privacy practice reviews:

Version Information

Current Version: 2.0

Effective Date: December 10, 2025

Last Revised: December 10, 2025

Previous Version: Dated September 11, 2025

Major Changes in This Version:

Questions, Concerns, and Complaints

How to Contact Us

Privacy Inquiries

Email: [email protected]
Subject: Privacy Question

Phone: (202) 885-9492
Ask for the Privacy Officer

Mail:
National Dental Association
Attn: Privacy Officer
3517 16th Street, NW
Washington, DC 20010

Resolution Process

When you contact us with a privacy concern:

  1. Acknowledgment: We will acknowledge receipt within 2 business days
  2. Investigation: We will thoroughly investigate your concern
  3. Response: You will receive a detailed response within 30 days
  4. Resolution: We will work with you to address your concerns satisfactorily
  5. Escalation: If unsatisfied, you may request review by NDA leadership

Regulatory Complaints

While we hope to resolve any concerns directly, you have the right to file complaints with relevant regulatory authorities:

Documentation

When contacting us about privacy issues, please provide:

Professional Ethics and Confidentiality

As a professional organization serving healthcare providers, we understand the critical importance of confidentiality and ethical data handling. Our privacy practices align with:

Acknowledgment and Acceptance

By Using Our Services

By accessing the NDA website, member portal, and related services, you acknowledge that you have read and understood this Privacy Policy. For NDA members, this policy supplements but does not replace the privacy provisions in your membership agreement.

Our Commitment to You

The National Dental Association is committed to protecting your privacy while advancing oral health equity and supporting the professional development of minority dental professionals. For over 112 years, we have served our community with integrity and excellence, and this commitment extends to how we protect and use your