OvernightSmile® Privacy Policy

Introduction This Privacy Policy illustrates how OvernightSmile®, a business entity under Novotech LLC, collects, and utilizes personal information via our Website, mobile applications, and electronic communications. OvernightSmile® is dedicated to safeguarding your privacy and adheres to this policy.

This policy outlines our handling of your data when you visit www.overnightsmile.com(our “Website”) or use the OvernightSmile® mobile application (our “Application”). It covers our approach to collecting, using, maintaining, and protecting your information.

Scope of Policy This policy applies to information we collect:

• On our Website or Application;
• From your dental, orthodontic, or other healthcare providers;
• In emails, texts, and other electronic messages between you and OvernightSmile®;
• Through printed materials;
• During your interactions with our marketing and applications on third-party platforms, if they include links to this policy.

It does not extend to data collected:

• Offline or through other means, including websites operated by OvernightSmile® or any third party;
• Via third-party websites or applications, including content linking to or from our Website or Application.

Acceptance and Usage By accessing our Website or Application, you acknowledge this policy. If you disagree with our practices, please refrain from using the Website or Application.

Data Controller Responsibility OvernightSmile® is responsible for the personal data collected for conducting business with you. ‘Personal Data’ refers to information about an identifiable person, which could be you, or others engaging with our Website or Application.

Children Under 18 Our products and services are available for children aged 13 and above, with consent and usage by their parents or guardians. The Website and Application are not designed for direct use by those under 18. We do not knowingly amass personal information from children under 18 without parental consent. If we discover the collection of such information, we commit to its prompt deletion. Should you believe we have inadvertently collected information from a child under 18, please contact us at dco@overnightsmile.com.

Data Collection Types and Methods We accumulate various information types from Website and Application users, including:

• Personal identifiers (e.g., name, contact and payment details, medical history);
• Non-identifying information (e.g., website usage patterns);
• Technical data about your internet connection and device.

This data is collected:

• Directly from your inputs;
• Automatically via website navigation and application use, employing cookies and similar technologies;
• From third parties, such as healthcare providers and business partners.

Personal Data Usage and Protection OvernightSmile® uses collected data to improve our services, complete transactions, and for customer communication, while upholding stringent data protection standards. We do not utilize automatically collected data to identify users by name and do not link it to voluntarily provided information.

Information You Provide to Us In interacting with our Website and Application, you may provide us with Personal Data in various ways:

• Responding to surveys for research purposes;
• Filling in forms on our Website or Application;
• Downloading documents;
• Subscribing to newsletters or communications;
• Corresponding with us by phone, email, or otherwise;
• Applying for jobs or internships.

This Personal Data typically includes your name, contact details, payment information, medical history, and other health-related information. This information is vital for contractual purposes, service provision, and for processing inquiries or complaints.

Automatic Data Collection Technologies As you interact with our Website and Application, we may use technologies to collect data about your equipment, browsing actions, and patterns. This includes:

• Details of your visits (e.g., traffic data, location data, logs, and other communication data);
• Information about your computer and internet connection (e.g., IP address, operating system, browser type).

Cookies Policy We employ cookies and similar technologies for various purposes, such as estimating audience size, storing your preferences, and recognizing your return to our Website or Application. For detailed information, please refer to our Cookie Policy.

Use of Personal Data We utilize your Personal Data for various purposes, each grounded in a legal basis such as contractual necessity or legitimate interest. Key uses include:

• Processing transactions and interactions involving our products and services;
• Responding to your inquiries and communications;
• Managing recruitment and employment processes;
• Complying with legal obligations, such as tax and accounting requirements;
• Enhancing the functionality and security of our Website and Application;
• Marketing and promotional efforts, where legally permissible.

Consent and Personal Data Processing You may be asked to consent to certain uses of your Personal Data, such as for marketing communications. Your consent can be withdrawn at any time, impacting neither the lawfulness of processing prior to withdrawal nor the processing based on other legal grounds.

Special Category Personal Data We may process sensitive personal data, especially relating to health. This processing is done under strict legal conditions, ensuring the necessary protections are in place.

Marketing Communications We engage in marketing activities with your explicit consent or under the ‘soft opt-in’ rule for existing customers. You can opt out of marketing communications at any time, which will not affect your access to our services or products.

Disclosure of Your Information We may share your Personal Data with:

• Dental care providers;
• Our affiliates and subsidiaries;
• Third-party service providers supporting our business;
• Legal or regulatory authorities when required.

International Data Transfers Your Personal Data may be transferred internationally. We ensure appropriate safeguards to maintain the level of data protection as required by UK or EU law.

User Rights and Data Management You have several rights regarding your Personal Data, including the right to access, update, or delete your information. OvernightSmile® provides avenues for you to exercise these rights, ensuring your data is accurate and current.

Data Retention Policy We retain Personal Data for as long as necessary to fulfill the purposes for which it was collected, adhere to legal obligations, or as needed for our legitimate business interests.

Data Security Measures OvernightSmile® employs robust security measures to protect your Personal Data from unauthorized access, alteration, and loss. However, no internet-based platform can guarantee absolute security.

Changes to Our Privacy Policy We reserve the right to update this Privacy Policy periodically. Changes will be posted on our Website and Application. For significant modifications, we may also notify you through your provided contact details. You are encouraged to review this policy regularly to stay informed of any changes.

Contacting Us For any questions, concerns, or requests related to this Privacy Policy or your Personal Data, please contact OvernightSmile® at dco@overnightsmile.com. We are committed to addressing your privacy-related inquiries promptly and effectively.