1. Purpose and Scope
This Privacy Policy delineates the data processing practices of Correct Smiles Orthodontics ("we," "us," or "our"). It governs the collection, utilization, storage, and disclosure of personal data and Protected Health Information (PHI) obtained from users ("you" or "your") through our website, booking platform, and associated digital services. By accessing our platform, you explicitly consent to the data practices described in this document.
2. Data Collection and Categories of Information
2.1 Personally Identifiable Information (PII): We collect direct identifiers you voluntarily provide, including but not limited to your full name, email address, physical address, and telephone number during account registration or appointment booking.
2.2 Sensitive and Medical Information: To provide accurate orthodontic consultations, we may collect preliminary health notes, dental history, or radiographic imagery submitted through our platform.
2.3 Financial Information: All payment transactions are executed via third-party processors (e.g., Razorpay). Correct Smiles Orthodontics does not capture, process, or store complete credit card numbers, CVVs, or core banking credentials on our infrastructure.
2.4 Automatically Collected Data: We utilize cookies, web beacons, and automated tracking technologies to capture IP addresses, browser specifications, and usage patterns to optimize platform performance and security.
3. Lawful Basis and Utilization of Data
We process your data strictly for legitimate clinical and business purposes, which include: (a) scheduling, modifying, and executing orthodontic appointments; (b) maintaining comprehensive medical records; (c) communicating logistical updates, billing information, and clinical follow-ups; (d) protecting against fraudulent, unauthorized, or illegal activities; and (e) complying with statutory health regulations and medical guidelines.
4. Disclosure and Third-Party Sharing
We absolutely do not sell, rent, or lease your personal data to third-party marketers. Disclosure of your data is strictly limited to: (a) authorized clinical staff and employees who require access to perform their duties; (b) vetted third-party service providers (such as cloud hosting, payment gateways, and communication APIs) under strict confidentiality agreements; and (c) law enforcement or regulatory bodies when mandated by a valid subpoena, court order, or applicable legal obligation.
5. Data Retention and Security Architecture
5.1 Security Measures: We employ industry-standard cryptographic protocols (SSL/TLS), rigorous access controls, and robust firewall configurations to safeguard your data against unauthorized access, alteration, or exfiltration.
5.2 Retention Period: We retain your personal and medical information for as long as necessary to fulfill the clinical purposes outlined herein, or for a duration mandated by relevant medical and tax legislation, whichever is strictly longer.
6. User Rights and Data Control
Subject to clinical and legal constraints, you maintain the right to: (a) request access to your stored personal data; (b) request rectification of inaccurate records; and (c) request deletion of non-clinical marketing data. Note that certain medical records cannot be legally deleted under medical retention laws.
7. Contact for Privacy Inquiries
For any grievances, data requests, or detailed inquiries regarding our privacy infrastructure, you may contact our designated Data Privacy Officer at contact@correctsmiles.com.