Privacy Policy

Personally Identifiable Data:  When you use our Services or enter information on our website we may ask for your name, date of birth or age, gender, medical history, names of your dental or medical providers, provision of dental or health care, email or mailing address, phone number, or other information to provide our Services and improve your user experience.

Sensitive Personal Information and Health Data We may collect and process certain Sensitive Personal Information (as defined under the CCPA/CPRA), including health-related information such as medical history, dental records, information about your dental or medical providers, and details related to the provision of dental or health care services. This information is collected only to the extent necessary to provide our Services, facilitate your treatment by licensed dental/medical professionals, process insurance or financing requests, or fulfill our contractual obligations to you.

We do not use or disclose your Sensitive Personal Information for purposes other than those permitted under applicable law without your explicit consent or as otherwise allowed (for example, to provide the Services you requested or comply with legal obligations). Where required by law, we will obtain your consent before processing Sensitive Personal Information for non-essential purposes. You have the right to limit the use and disclosure of your Sensitive Personal Information for certain purposes—please see the our California Consumer Privacy Act Disclosure for details on how to exercise this right. We implement appropriate safeguards to protect this data, consistent with our Security section below.

Payment Data: Service Providers and Third-Party Vendors We work with carefully selected third-party service providers and vendors to help deliver and improve our Services. These providers may have access to your Personal Information solely to perform services on our behalf and are contractually obligated (via data processing agreements or equivalent safeguards) to maintain the confidentiality and security of your data, use it only for the specified purposes, and not sell or use it for their own marketing purposes.

Categories of third-party providers we use include (but are not limited to):

• Payment and Financing Processors: PayPal, Stripe, and similar providers for processing payments and financing options (see Payment Data above).
• Analytics and Website Services: Tools such as Google Analytics to understand usage patterns and improve our website and Services.
• Communication and Marketing Platforms: Providers that assist with email, text/SMS notifications, customer support, or marketing communications.
• Cloud Hosting and Infrastructure: Providers that host our applications, data storage, and backup systems.
• Professional Services: Legal, accounting, or other consultants when necessary for business operations or legal compliance.

We do not share your Personal Information with third parties for their independent marketing purposes unless you have explicitly consented. For a more detailed list of categories of recipients and disclosures in the preceding 12 months, please review our California Consumer Privacy Act Disclosure.

We do not collect personal information for payment. We use third-party processors for payment processing, financing, email services, etc. to provide our Services. They may collect Personal Information, so you should check their respective Privacy Policies. Our current third-party providers, including but are not limited to, PayPal, Stripe, Calendy, etc.

Usage Data: We may collect data about your use of our Services such as the values of your searches, previous purchases, etc. to improve your experience and our Services.

Automatically Collected Data: We collect some data automatically when you interact with us by using our Services. We may receive and store information such as an IP address, device ID, geographic, demographic and your activities on our websites or blog. We may store this information, or it may be stored in databases owned and maintained by affiliates, agents, or service providers. We may use this data or combine it with other data to track the number of users and referral sources for customers and purchase of our products.

Data from other Services: You may give us permission to collect your information through other services. For example, if you login to our Services through your Google or Facebook account, connect to a third-party service including but not limited to Instagram, Facebook, Twitter, LinkedIn, etc., through an icon or link on the Services or otherwise link your account with a third-party service, we may share the contents of your post and associated information with such third party. Once such information is shared, the use of your information is subject to the third party’s privacy policy, and this Privacy Policy will NOT apply.

Cookies: Cookies are pieces of data that websites and services set on your browser or device to improve your user experience on future visits and speed up functionality. We use cookies and similar technologies to track your computer’s settings such as the account you have logged in with and notification settings. We may expand the use of cookies and saved data as we add new features to our website or new products or services. We may use technologies such as web beacons and single-pixel GIFS to track and log data for marketing purposes like email open rates.

We also may use third-party analytic tools like Google Analytics that employ cookies to collect information about your use of our Services. You can disable cookies at any time by changing your browser or device settings. Further information about how to disable cookies check your Internet browser provider's website via your help screen.

Advertisements: We may advertise our Services on other websites and social media sites. After clicking on one of these advertisements, you become a user of our Services. Various advertising platforms such as Instagram, Facebook, Twitter, etc. may collect information for optimizing advertising campaigns outside of our website. If you do not want to receive personalized ads from third parties, you should exercise opt-out rights directly with those third parties. You can also opt-out through the Network Advertising Initiative (NAI) and Digital Advertising Alliance (DAA). Since there is no established industry compliance standard for “Do Not Track” (“DNT”) we currently do not respond to DNT signals in our Services; we operate as explained in this Privacy Policy.

We are based in the United States. No matter where you are located, by using this website or our Services you consent to processing and transfer of your information in and to the United States and other countries. Please understand that US laws and those of other countries governing data collection and use may differ from those of your location.

We use your Personal Information as explained in this Privacy Policy and our California Consumer Privacy Act Disclosure here. If you provide us with information for a specific reason we use the information for that reason. For example, if you email us a question regarding the Services, we use the information to email you an answer to your question. We may use the information collected to improve the quality of your user experience or provide your licensed dentist, orthodontist or other dental provider with information, services, or products they may request. We may use the information to notify you about, marketing and promote improvements, issues or new Services or products based on your usage and interests. If we do this, any communication will contain instructions on how to "opt-out" of future marketing communications. If you ever want to stop receiving any marketing communication, or you wish to have your name deleted from our mailing lists, please email us at privacy@smile-true.com.

Laws in some jurisdictions require us to explain the legal basis we rely on to use or disclose your Personal Information. To the extent those laws apply, our legal basis includes:

• Consent: We may handle your data based on your implied or express consent to do so. Where legally permitted or required we handle Personal Information based on your implied or express consent.
• Contractual obligations: To meet our contractual obligations to you or respond to your requests in anticipation of entering a contract for purchasing our Services. As an example, we may handle your Personal Information to create a subscription to our Services.
• Legitimate interests: We may handle your Personal Information on the basis that it furthers our legitimate interests in a manner that is not overridden by your fundamental rights and freedoms, such as:
  • Providing you with a safe and enjoyable user experience;
  • Customer service;
  • Marketing, such as email announcing new features of our Services;
  • Protecting you, our users, and our personnel and property;
  • Analyzing and improving our Services by collecting data about how you use our Services so we may improve design and features;
  • Processing job applications; or
  • Manage and respond to legal issues.
• Legal compliance: If required to use or disclose Personal Information to comply with legal, regulatory or government requirements.

To protect your vital interests: To share your data to help resolve an urgent medical or emergency situation.

• We do not sell your information because we consider it a vital part of your relationship with us.
• Consent: If you provide us with consent to transfer your data we may do so.
• There may arise circumstances when we may share your data with third parties, such as in a Business Transfer. If we sell or buy a business or assets or corporation, merger, reorganization, bankruptcy, dissolution or similar business event, the related transfer of assets may include your Personal Information.
• Related Companies: We may share your information with our related companies, if any, consistent with this Privacy Policy.
• Developers: If we utilize contracted developers for our website or Services, they may have access to user data as part of their services. We would require any developers to limit use of Personal Information only to what is necessary to provide their services to us.
• Related Third Parties: In the event we hire agents, consultants or other companies or individuals to perform services for us. For example, use of a third-party payment processor for purchases.
• Legal compliance: We may disclose your Personal Information if required by law or believe in good faith we are required to for compliance with a legal obligation, to protect our rights, property, and intellectual property, defend against legal liability, or protect Users’ or other’s personal safety, including fraud protection and credit risk reduction.
• Aggregated Data: We may share non-personally identifiable data (“Aggregated Data”) with third parties for our business purposes.

To enforce our Terms of Use

You may voluntarily provide us with “Unsolicited Information” such as new product ideas or communicate with us without our request. By sending any Unsolicited Information you agree that it is non-confidential, and we may share, use, reproduce, disclose, and distribute it without limitation or attribution to you. You acknowledge that you bear sole responsibility and release us from all liability related to any Personal Information you willingly provided in any open or public forums to us, other Users, or the public. You also may provide information when you publish or displayed information on any public areas of our website, Services, or our social media accounts or other third parties (“User Contributions”). Your Unsolicited Information and User Contributions are posted and transmitted at your own risk. Even  if we may limit access to certain pages, you acknowledge and understand that security measures are not perfect or impenetrable. We cannot control the actions of other users of our Website or Services with whom you choose to share Unsolicited Information or User Contributions. Therefore, there is NO guarantee that your Unsolicited Information or User Contributions will not be viewed by unauthorized persons.

We only offer our Services to Users over 18 years of age. We do not intentionally or knowingly collect Personal Information from anyone under the age of 13. Of course, the parent or legal guardian of children under 18 may use our website and services on behalf of their children. If you are a parent or guardian of a child under 13 and believe they disclosed Personal Information to us, please contact us immediately at privacy@smile-true.com. If you are a resident of the European Economic Area (“EEA”) which requires consent to processing Personal Information, we will not knowingly process Personal Information for Users under the age of consent established by EEA data protection law. If we discover that we processed any Personal Information covered by these laws, we will cease such processing and take prompt reasonable measures to remove it from our records. If in the future we plan to collect personally identifiable information from children under 13, such collection and use, to the extent applicable be done in compliance with the Children’s Online Privacy Protection Act (“COPPA”) and any other applicable law with appropriate consent sought from the child’s parent or legal guardian where required.

Our Privacy Policy only applies to our website, blog, and Services. Our website, blog posts, newsletters, social media posts, and emails may contain links to third-party web sites that we do not operate or control. This Privacy Policy does NOT apply to any third-party website. Our link to any third-party websites does not imply endorsement or appropriateness for use of those sites. Use of any third-party site or service is solely at your own risk. We recommend you review the privacy policies of every third-party site before using it.

In the event we retain any Personal Information we only do so for the period of time we believe required based on the purpose identified in our Privacy Policy. When we dispose of your Personal Information we may delete, anonymize, or use other appropriate methods. Based on reasonable business practices and system and data security purposes, Personal Information may continue to exist in system backup files for additional time.

We use our best efforts to protect your Personal Information from loss, unauthorized access, disclosure, alteration, misuse, or destruction. You should understand that no internet or email transmission is fully secure or error free. Since any email you send to us may not be secure, consider carefully what Personal Information you send via email or the internet.

We treat all users equally regardless of location. You may unsubscribe from emails by clicking the “unsubscribe” link or edit your profile setting if applicable. You may cancel any Subscription at any time in accordance with our Terms of Service and applicable subscription agreement. You may opt out from cookie-related processing as explained in the “Cookies” explanation under “Data We Collect” above. If you are in EEA, Canada, Costa Rica, or other non-US jurisdiction, you may have legal rights to obtain confirmation of whether we hold your Personal Information, access your Personal Information (including in portable form), and to correct, update, amend or delete your Personal Information. You may have the right to object to our use or disclosure, request restrictions on processing, or withdraw your consent for us to use your Personal Information. These rights do not apply retroactively and may not affect our ability to continue processing data as those laws allow.

GDPR, California Online Privacy Protection Act, and other specific privacy laws.

While GDPR does not provide specific guidelines for Privacy Policies, this Privacy Policy was drafted to meet the requirements of GDPR. You can learn more about the GDPR here.

CalOPPA also requires websites to post a Privacy Policy. Personally Identifiable Information under CalOPPA corresponds to Personal Information as used in the Privacy Policy. You can learn more about CalOPPA here. As required by CalOPPA, we agree to the following:

• Users can visit our site anonymously.
• Once this Privacy Policy is created, we will add a link to it on our home page or as a minimum, on the first significant page after entering our website.
• Our Privacy Policy link includes the word ‘Privacy’ and can easily be found in the footer of each website page.
• We notify you of any Privacy Policy changes on this Privacy Policy Page
• You can change your personal information by emailing or calling us or logging into your account.

California law also permits minors under 18 to request removal of their User Contributions, subject to statutory exceptions. If you are under 18 years of age and reside in California, please contact us in writing by email at privacy@smile-true.com or SmileTrue, Inc., Attn: Privacy, C/O Robert G. Schrader, Esq. PLLC, 4808 NW 2^nd Ave, #397, Boca Raton, FL 33431, with the subject “California Eraser Law Request”. We may not remove your User Contributions that we must retain under Federal or state law or that was provided by a third party. If you are a minor, we will do our best to remove your information upon your valid request. We cannot guaranty the complete or comprehensive removal of your User Contributions from our website or Services, or any information that has been republished, copied, downloaded, or reposted by any third party, and we cannot guarantee that any such information may not be accessible to users of the Internet in the future. We do not advertise or market any of our services or products identified in California Business and Professionals Code Section 22580(i) to users that we have actual knowledge are under 18 years of age.

California Consumer Privacy Act (CCPA) also provides additional options to remove your data when the collecting company meets certain minimum requirements. If you reside in California, you can see your CCPA policy here.

Fair Information Practices. Should a data breach occur we will notify you via email within 7 business days. We also agree to the Individual Redress Principle which provides that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.

To submit a request to access, correct, update, amend or delete your Personal Information, please email us at privacy@smile-true.com using “Personal Information Request” in the subject line and include an explanation of which Data right you are exercising. On receipt of your request, we verify your identity for your protection prior to initiating any action. Once verified, we begin processing your request and respond within 30 days. You have the right to request us to stop or limit use of your Personal Information if you believe we lack a lawful basis to use or believe it is inaccurate. If you are in the EEA, you have the right to opt-out of all Personal Information processing for direct marketing. To do so, please select “unsubscribe” in any marketing email or your Profile, if applicable. You may also email us at privacy@smile-true.com  with the subject line “Unsubscribe.” Applicable law may limit or provide exceptions to your rights and options related to your Personal Information. You also have the right to file a complaint to the relevant supervisory authority in your location. We hope you will allow us the opportunity to address your concerns about Personal Information first.

We may update or modify this Privacy Policy at any time without notice. We post any changes or modifications on this page. You should review this Privacy Policy before submitting any Personal Information and periodically check for updates. The date listed at the top of this page is when we last updated our Privacy Policy. Your continued use of our website and Services after any update indicates your knowing consent to the terms of this Privacy Policy in effect on the date of your use.