Privacy Policy

1. Introduction

SmileJump Inc. ("SmileJump", "we", "us", or "our") has created this Privacy Policy to explain how we collect, use, and disclose information through our website located at smilejump.com (the "Website"), our mobile applications, and the services we provide on behalf of our dental practice customers ("Clinics"). This Privacy Policy applies to all products and services offered by SmileJump (collectively, the "Services"), unless a separate privacy policy applies.

The privacy of our users is of great importance to us. By visiting our Website and/or using the Services, you acknowledge that you have read and understood the practices outlined in this Privacy Policy and that your information will be collected, used, and disclosed in accordance with it. If you do not agree with our practices, you should not use the Website or the Services.

2. Scope of This Privacy Policy

This Privacy Policy describes our collection, use, and disclosure of information, including information that can be used to identify an individual ("Personal Information"). Personal Information does not include anonymized or aggregated information that we may create or derive from information you provide.

Personal Information may be collected about Clinic employees, prospective customers, visitors to the Website, and end users of the Services. You can choose not to provide certain Personal Information, but doing so may limit your ability to use certain features of the Services.

We may also collect Personal Information about patients of Clinics on behalf of the Clinic, which we use only as a service provider in order to provide the Clinic with our Services. Clinics are responsible for maintaining their own privacy policies governing the collection, use, and disclosure of Personal Information and for ensuring they have obtained necessary authorizations and consents for any Personal Information made available to us. If you have questions about a particular Clinic's privacy practices, please contact the Clinic directly.

PHIPA

In Canada, SmileJump may act as a service provider, information manager, or electronic service provider under applicable privacy legislation, including Ontario's Personal Health Information Protection Act (PHIPA) and other applicable provincial health privacy legislation.

3. Collection and Use of Personal Information

Types of Information We Collect

The categories of Personal Information we may collect include:

• Identity Data: name, date of birth, and similar identifiers
• Contact Data: home and work address, email address, and telephone numbers including mobile number
• Marketing and Communications Data: your preferences for receiving marketing from us, communication content, and timestamps
• Profile Data: postal code, demographic information, and account preferences
• Financial Information: billing address and payment card details, collected directly from Clinics or through our payment processors
• Employment Information: dental practitioner name, specialty, and professional credentials
• Health Information: dental health concerns, dentist preferences, appointment schedules, insurance details, treatment plans, and patient communications
• Location Data: geographic location based on your IP address or postal code

We may also collect information that does not specifically identify you but may be unique to your device:

• Technical Data: IP address, browser type and version, operating system, device identifiers, cookie data, and mobile or internet service provider information
• Usage Data: pages viewed, access times, time spent on pages, click patterns, referring and exit pages, and the routes by which you access or leave our Services

How We Collect Your Information

SmileJump collects your information in the following ways:

• Information you submit through the Services, such as your name, email address, and other account details
• Information automatically collected when you access the Services, including your IP address, cookies, and browsing data
• Information we collect and process on behalf of our Clinic clients, including patient and billing information provided directly by such Clinics
• Records of communications when you contact us by email, phone, or message

How We Use Your Information

We collect and use your information for the following purposes:

To create and manage your account

When you register for the Services, we collect your name, email address, date of birth, postal code, and if you are a Clinic, your business contact information. We use this information to authenticate access to your account, provide the Services, personalize your experience, send administrative communications such as appointment reminders and service updates, and to investigate and prevent fraudulent activity.

To match you with a dental practice

If you request to find a dental practice, we may collect your postal code and responses to questions about your dental health and preferences in order to suggest Clinics that match your criteria. When you book an appointment through the Services, we use your information to facilitate the booking, confirm the appointment, and communicate with the Clinic on your behalf.

To provide services to Clinics

For Clinics that subscribe to our platform, we collect Personal Information related to the dental practice including business contact details, practitioner names, specialties, and practice management data. We use this information to provide Clinics with appointment scheduling, patient management, analytics, review management, and other services as described in the applicable subscription agreement.

To send communications

With your consent where required, we use your email address or mobile phone number to send communications about our products, services, and promotions. We do not share or disclose patient mobile phone numbers to third parties for marketing purposes, except where legally required or with explicit patient consent.

To solicit reviews

If you have a SmileJump account, we may use your contact information to request reviews about your experience with the Services or a dental practice. Your name and personal information will not be published with the review without your consent. Please exercise caution before sharing any personal information in reviews and refer to our Terms of Use for more about posting reviews.

To improve our products and services

We use demographic and usage information for our own business purposes, including analyzing demand for our products and services, improving our offerings, and creating a more personalized experience. Personal Information is not shared with third parties for these purposes.

To assist you when you contact us

When you contact us with a question, comment, or complaint, we may collect identifying information such as your name, address, and telephone number, along with additional details needed to respond. We may retain this information to improve our customer service.

Aggregate and De-identified Data

We may aggregate or de-identify Personal Information so that it does not personally identify you ("De-identified Data"). We may collect, use, and disclose De-identified Data for our business purposes and any purpose permitted by law. If we combine De-identified Data with Personal Information, the combined information will be treated as Personal Information.

4. Minors

SmileJump does not knowingly solicit or collect information from children nor knowingly market to anyone under the age of majority in their jurisdiction of residence. If you are under the age of 13, you are not authorized to use the Services. If you become aware that your child has provided us with Personal Information without your consent, please contact us at care@smilejump.com. If we become aware that a minor has provided us with Personal Information, we will take reasonable steps to remove such information and terminate the applicable account.

5. Website Information and Tracking Technologies

Log Files

We may automatically gather certain information about Service traffic and store it in log files. This includes device identifiers, browser type, IP address, internet service provider, referring/exit pages, operating system, date/time stamps, and clickstream data. We use this information to analyze trends, administer the Services, and understand how users interact with the platform. This automatically collected data may be linked to Personal Information.

Cookies and Similar Technologies

We use cookies throughout the Services to authenticate users and provide a personalized experience. A cookie is a small piece of data sent to your browser and stored on your device. Data collected through cookies may include the addresses of websites you visited before and after visiting our Website, your browser and device type, IP address, your geographic region, and pages visited within the Website. You may configure your browser to refuse cookies, though some features of the Services may not function properly without them.

Analytics

We may use third-party analytics services such as Google Analytics to gather and analyze information about how visitors use our Website, including pages viewed, time spent, search terms, and engagement data. These services may use cookies and other tracking technologies. You can learn more about Google Analytics' data practices at policies.google.com/technologies/partner-sites and opt out by installing the Google Analytics opt-out browser add-on.

Third-Party Links and Social Networking

Our Website may contain links to third-party websites that we do not own or operate, including Clinic websites. These linked websites have their own privacy policies and we have no control over or responsibility for how they collect, use, or disclose personal information. We encourage you to review the privacy policy of every website you visit.

The Services may integrate with social networking platforms. We do not control such services and are not liable for the manner in which they operate. Information you voluntarily share in publicly accessible forums or social networks may be viewed and used by others, and we cannot control such use.

6. Storage Location and Transfer of Information

SmileJump processes and stores data, including Personal Information, on cloud servers located in Canada. We may also transfer data to third-party service providers who may not be based in the same region as you, but we take steps reasonably necessary to ensure that such data is subject to appropriate safeguards, including contractual commitments from our service providers.

Personal Information may be accessible to law enforcement and governmental agencies in Canada and other jurisdictions under lawful access regimes or court order.

7. Disclosure of Information

Dental Clinics

If you book an appointment with a Clinic, we will share your name, email address, contact information, preferred appointment times, and relevant booking details with that Clinic to facilitate your appointment.

Service Providers

We may engage third parties to perform tasks on our behalf, such as hosting services, database management, payment processing, email delivery, analytics, and general improvement of the Services. We do not authorize such third parties to use your Personal Information beyond what is necessary to perform these tasks.

Aggregate Data

We may share aggregated, non-identifiable data to conduct our business, improve the Services, develop analytics, and enable us and our partners to improve and promote products and services.

Business Transfers

If our business is merged with or acquired by another entity, or if we undergo any other change of control, Personal Information may be transferred to the new controlling entity in accordance with applicable law.

With Your Consent

If we need to use or disclose Personal Information in a way not described in this Privacy Policy, we will notify you and/or obtain consent as required under applicable privacy laws.

Legal Compliance

We and our service providers may disclose your Personal Information to third parties without your consent in response to a warrant or other legally valid inquiry or order, for the purposes of investigating a breach of an agreement or contravention of law, detecting or preventing fraud, or as otherwise required or permitted by applicable Canadian or other law. Personal Information may also be disclosed where necessary for the establishment, exercise, or defense of legal claims and to investigate or prevent actual or suspected harm to persons or property.

8. Retention

We will retain your Personal Information for as long as it remains necessary for the identified purpose or as required by law, which may extend beyond the termination of our relationship with you. We may retain certain data as necessary to prevent fraud, for legitimate business purposes such as analysis of aggregated data, account recovery, or to meet our legal or regulatory obligations.

9. Access, Correction, and Accuracy

You have the right to access, correct, and update inaccuracies in the Personal Information we hold about you. Upon receipt of your written request, we will provide you with access to or a copy of your Personal Information, although in certain limited circumstances permitted by law, we may not be able to make all relevant information available. We will endeavor to respond to all requests in a timely manner.

We will make every reasonable effort to keep your Personal Information accurate and up to date, and will provide you with mechanisms to update, correct, delete, or add to your information as appropriate.

If we receive a request from an individual to access or update personal information collected on behalf of a particular Clinic, we will direct that individual to the relevant Clinic. We will assist our Clinic clients wherever possible in responding to individual access requests.

10. Opt-Out Choices

Communications

If you do not wish to receive promotional communications from us, you can unsubscribe at any time by clicking the unsubscribe link in any promotional email or replying STOP to any SMS message. You may also contact us at care@smilejump.com to opt out. Please note that you may continue to receive transactional or account-related communications such as appointment reminders, security alerts, and administrative messages.

Cookies

You can configure your browser to refuse cookies or to alert you when a cookie is being sent. Please note that some features of the Services may not function properly if cookies are disabled.

General Opt-Out

To opt out of any consents previously given to us or to request that your Personal Information not be disclosed to third parties, send an email to care@smilejump.com. Please note that we may continue to use and retain your Personal Information as necessary to provide the Services to you.

11. Security

SmileJump has implemented commercially reasonable technical and organizational measures designed to secure your data, including Personal Information, from accidental loss and from unauthorized access, use, alteration, or disclosure. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately by contacting us as described in the "Contact Us" section below.

12. Canadian Privacy Rights

13. Terms of Use

Please also review our Terms of Use, which establish the use, disclaimers, and limitations of liability governing the use of our Services.

14. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time. If we make changes, we will post the updated Privacy Policy on this page and update the modification date at the top. Such changes shall be effective on the date the revised Privacy Policy is posted and will only be applied prospectively. If we make material changes in the way we use Personal Information, we will notify you by posting an announcement on our Website or sending you an email prior to the change becoming effective. Use of Personal Information we collect is subject to the Privacy Policy in effect at the time such information is collected, used, or disclosed.

15. Contact Us

If you have questions regarding this Privacy Policy, the manner in which we or our service providers treat your personal information, or to request access to our collection of your personal information, please contact us at: care@smilejump.com.

If you have questions regarding the privacy practices of a particular Clinic, please contact the Clinic directly.