Garnet Dentech's Commitment to Data Privacy and Security Policy

1. Information We Collect (Types and Purpose)

We only collect data necessary for providing our services, processing orders, and improving our products. The categories of information collected include:

• Identification Data: Name, professional title, company name, email address, phone number
• Transaction Data: Shipping address, billing address, payment details (only payment processor tokens, not full card data), and purchase history. (Purpose: Order fulfillment and legal compliance)
• Technical and Usage Data: IP address, browser type, device type, browsing history on our website, and duration of visit. (Purpose: Website security, analytics, and service improvement)
• Inquiry Data: Information provided through contact forms, product inquiries, or customer support tickets. (Purpose: Providing customer service and expert technical support)

2. How We Use Your Information (Legal Basis)

We process your personal data based on the following legal grounds (relevant to GDPR):

• Performance of Contract: To fulfill your order for orthodontic products and services.
• Legitimate Interests: To improve our products, prevent fraud, and enhance website security.
• Consent: For sending you marketing communications, where required. You may withdraw consent at any time.
• Legal Obligation: To comply with legal and tax requirements.

3. Disclosure of Personal Information (Sharing with Third Parties)

We do not sell your personal information. We only share your data with trusted third parties necessary to operate our business and fulfill your orders:

• Service Providers: Payment processors (e.g., Stripe, PayPal), shipping carriers (e.g., FedEx, DHL), and IT service providers.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition.
• Legal Compliance: When required by law or to protect our rights and property.

4. Your Rights Under GDPR (For EU Residents)

As a data subject under GDPR, you have the right to:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure ('Right to be Forgotten'): Request the deletion of your personal data under certain conditions.
• Right to Restriction of Processing: Request temporary suspension of data processing.
• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to the processing of your personal data based on legitimate interests.

5. Your Rights Under CCPA/CPRA (For California Residents)

If you are a California resident, you have specific rights concerning your personal information, including:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected and the purposes for which it is used.
• Right to Delete: Request the deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale or Sharing: Garnet Dentech does not sell personal information, but we respect your right to opt-out if our practices change.
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your CCPA rights.

6. Data Security and Retention

We implement robust technical and organizational measures (e.g., SSL encryption, access controls) to protect your data from unauthorized access, disclosure, alteration, or destruction. We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.