Types of Personal Data We Process
We collect Personal Data of customers, patients of our customers (including their former, potential and current patients), and Site visitors (together “Data Subjects”, and each – a “Data Subject”) when and if you register an account through the Site. Such information may include your name, address, telephone number, email address, your Internet Protocol (IP) address, details of which version of web browser you used, date of birth or age, gender, income information, credit card and other financial information related to payments for services, dental records, physician information, photographs and other information you choose to provide of you and your patients. In addition, when visiting the Site we may collect sensitive data about patients of our customers such as health information regarding their teeth, including images of their teeth.
On occasions you may choose to provide us with Personal Data about other people so that, for example, we can provide our services to your patients. You must only share their Personal Data with us if (and only if) you have obtained their consent and permission to do so. We assume no liability for unauthorized use of their Personal Data if you fail to comply with this requirement.
Purposes for Which We Process Personal Data
SoftSmile needs to process a certain amount of Personal Data about you and the individuals whose information you provide for a variety of business purposes, including, without limitation:
- managing our business relationship with you, for example: (i) allowing you to use, purchase, and/or download products and services; (ii) manage and maintain your account with us; and (iii) respond to your questions and comments and provide customer support;
- maintenance and statistics, for example: (i) help diagnose problems with our server; (ii) administer the Site, and compile broad statistical data, including through the use of machine learning; and (iii) update and maintain the Site;
- research and product development, for example we may use information about your experience of using our products to help us improve our products.
Legal Ground for Processing the Personal Data
The legal basis for us processing your Personal Data and the Personal Data you provide for the above purposes may include any of the following:
- you have provided your consent or obtained the necessary consent from your patient;
- it is necessary for the performance of a contract with you;
- the processing is necessary for our compliance with a legal obligation; or
- the processing is in our legitimate interests of operating and promoting our business.
To the extent provided by applicable law, you or any individual who you have provided Personal Data for may withdraw any consent previously provided to us, or object at any time on legitimate grounds, to the processing of the applicable Personal Data. In some circumstances, withdrawing consent to SoftSmile’s use or disclosure of the Personal Data will mean that you cannot take advantage of certain SoftSmile products or services.
Disclosure of Information Relating to Data Subjects
- in order for us to comply with our legal obligations, e.g. where we are required to disclose certain information to tax authorities;
- to protect the security or integrity of our business, including our databases and systems;
- to any of our affiliates or outsourced service providers, vendors, suppliers or distributors to facilitate the provision of contracted services or products or to provide expanded services to our customers and Site visitors;
- for the purposes of a joint venture, collaboration, financing, sale, merger, reorganization, change of legal form, dissolution or similar event; and
- to any other third party where you have provided your consent or obtained the necessary consent.
Security Measures Used to Protect the Personal Data
SoftSmile will take appropriate physical, technical and organizational security measures designed to safeguard and secure any information you provide to us. No method of electronic transmission or storage is 100% secure, however. Therefore, we cannot guarantee its absolute security. If you have any questions about security on the Site, you can contact us using the Contact Details.
Consent to Processing Outside Home Country; International Transfer of Personal Data
Retention of Personal Data
Your Personal Data and the Personal Data you provide will be retained for the duration of our business relationship and for a period of time thereafter as required by applicable local law or where we have a legitimate and lawful purpose.
Data Subject’s Rights
Applicable laws provide individuals with numerous rights, including the right to: access, rectify, erase, restrict and object to the processing of, their Personal Data. Individuals may also have the right to lodge a complaint with the local data protection authority if they believe that their Personal Data is not being processed in accordance with applicable data protection law. If you or others whose information you provide would like to exercise any of these rights, please contact us using the Contact Details. To assist us in responding to such requests in a timely fashion, please include the phrase “Privacy Rights Request” in the title of the message.
Data Subjects may, where permitted by applicable law, request copies of their Personal Data. This is known as a subject access request (“SAR”).
If a Data Subject would like to make a SAR, i.e. a request for copies of the Personal Data we hold about them, a Data Subject may do so by writing us using the Contact Details. The request should make clear that a SAR is being made. We may ask the Data Subject to provide evidence of their identity if it is not clear.
Responding to a SAR can be a time consuming exercise. SoftSmile may be able to get the information that the Data Subject requires more quickly if they are as specific as possible in their request (e.g. “I would like a copy of my Personal Data contained in my website member account file”) or if the Data Subject would like a copy of a particular document it would be helpful if the document is described carefully, including the title, creation date, author and likely place of storage. This will help us to respond to the SAR as quickly as possible. The Data Subject may be asked for further details to assist us if insufficient information is provided.
Links to Other Websites
A cookie is a small piece of information which is sent to your browser and stored on your computer's hard drive, mobile phone or other device. You can set your browser to notify you when you receive a cookie. This enables you to decide if you want to accept it or not. However, some of the services and features offered through the Site may not function properly if your cookies are disabled.
The following are examples of cookies that may be used on the Site:
- strictly necessary cookies: these cookies are essential in order to enable you to move around the Site and use its features, such as allowing us to keep track of the images you upload and download. Without these cookies, services you have asked for cannot be provided;
- performance/analytic cookies: these cookies collect data about how visitors use the Site, including the country from which the visitor is accessing the Site. They allow us to recognize and count the number of visitors and to see how visitors move around the Site when they are using it. All data these cookies collect is aggregated and these cookies do not seek to personally identify you;
- functionality cookies: these are used to recognize you when you return to the Site. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
We may use Google Analytics software or software from any other reputable provider to collect information about how you use the Site.
If necessary to comply with applicable law, we will ask for your consent to place cookies on your device. Once your consent has been provided, this message will not appear again when you revisit. If you, or another user of your computer, wish to withdraw your consent at any time, you can do so by altering your browser settings.
When you visit the Site, we may allow some third parties (such as data analytics companies) to collect information about your online activities over time and across different websites. Your browser settings may allow you to automatically transmit a “Do Not Track” signal to websites and online services you visit. However, there is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, the Site currently does not alter their practices when they receive a “Do Not Track” signal from a visitor’s browser.
This Site is intended for use only by persons 18 years of age or older. By using the Site you represent that you are at least 18 years of age. In addition, we do not knowingly solicit or collect Personal Data online from children under the age of 13 without parental or guardian consent. Please let us know using the Contact Details if you believe we may have collected such information without parental or guardian consent.