- Introduction
CSmile Dental Lab (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website csdentlab.com or use our dental laboratory services. We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
- Information We Collect
We collect the following types of information:
Personal Information: Name, email address, phone number, clinic/hospital name, shipping address, and any information you provide through our contact forms, quote request forms, or when placing an order.
Case Information: Patient dental records, impressions, digital scans (STL files), and prescription details submitted for dental fabrication services. Patient-identifying information is handled in accordance with HIPAA guidelines.
Technical Data: IP address, browser type, device information, pages visited, and usage statistics collected automatically through cookies and analytics tools.
Payment Information: Billing address and transaction details processed through secure third-party payment processors. We do not store full credit card numbers.
- How We Use Your Information
We use your information for the following purposes:
To process and fulfill dental laboratory orders, including manufacturing and shipping dental products
To respond to your inquiries, quote requests, and customer service needs
To send order confirmations, shipping notifications, and service updates
To improve our website, products, and services through analytics and feedback
To comply with legal obligations and protect against fraudulent activity
To send marketing communications (only with your explicit consent; you may opt out at any time)
- Legal Basis for Processing (GDPR)
Under the GDPR, we process your personal data based on the following legal bases:
Contract Performance: Processing necessary to fulfill dental laboratory service orders and contracts
Legal Obligation: Compliance with FDA, ISO 13485, and other regulatory requirements
Legitimate Interest: Improving services, ensuring quality control, and preventing fraud
Consent: When you explicitly agree to receive marketing communications or share patient data
- Cookies and Tracking Technologies
Our website uses cookies to enhance your browsing experience and analyze website traffic. We use the following categories of cookies:
Essential Cookies: Required for the website to function properly (e.g., WooCommerce cart functionality)
Analytics Cookies: Google Analytics to understand how visitors use our site
Preference Cookies: Remember your settings and preferences
You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.
- Data Sharing and Third Parties
We do not sell your personal information. We may share your data with the following trusted third parties:
Shipping Partners: FedEx and other carriers for order delivery
Payment Processors: Secure payment gateways for transaction processing
Analytics Providers: Google Analytics for website usage statistics
Regulatory Authorities: When required by law or regulatory compliance (FDA, ISO audits)
All third parties are bound by confidentiality agreements and data protection obligations.
- Data Security
We implement industry-standard security measures to protect your data, including SSL/TLS encryption for all data transmissions, secure server infrastructure, access controls, and regular security assessments. Our facility maintains ISO 13485 certification, which includes data protection protocols. However, no method of transmission over the internet is 100% secure.
- Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Dental case records are retained in accordance with FDA and state regulatory requirements. You may request deletion of your personal data at any time, subject to legal retention obligations.
- Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate or incomplete data
Erasure: Request deletion of your personal data (“right to be forgotten”)
Restriction: Request that we limit processing of your data
Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent for marketing communications at any time
To exercise these rights, contact us at info@csdentlab.com. We will respond within 30 days.
- International Data Transfers
As we serve dental clinics worldwide, your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers from the EEA, and we only transfer data to countries with adequate data protection levels.
- Children’s Privacy
Our website and services are intended for dental professionals and B2B clients. We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have collected data from a minor, please contact us immediately.
- Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on this page and updating the “Last Updated” date. We encourage you to review this policy periodically.
- Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: info@csdentlab.com
Website: csdentlab.com/contact