HIPAA COMPLIANT POLICY

Privacy Policy

Effective Date: February 19, 2026

At Pearls White, we are committed to protecting your personal and health information. This Privacy Policy describes how we collect, use, and share your information when you visit our website, use our at-home kits, or undergo treatment through our partner clinics.

1. Protected Health Information (PHI)

Because Pearls White facilitates orthodontic treatment, much of the data we collect is considered Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).

• Dental Records: Intra-oral scans, dental impressions, and 3D smile simulations.
• Clinical Photos: Photos of your teeth and face used by doctors for diagnosis.
• Medical History: Information regarding past dental work, allergies, or bone density.

2. Personal Data We Collect

Category	Examples
Identifiers	Name, email address, shipping address, and phone number.
Payment Info	Credit card details (processed securely via PCI-compliant partners).
Technical Data	IP address, browser type, and interactions with our website.

3. How We Use Your Information

We use the collected data for the following essential purposes:

• Treatment Planning: Sharing your scans with state-licensed dentists to create your 3D plan.
• Manufacturing: Sending your tooth dimensions to our lab to print your custom aligners.
• Communication: Sending you progress reminders, shipping updates, and clinical check-ins.
• Legal Compliance: Meeting medical record retention requirements mandated by state dental boards.

4. Data Sharing & Third Parties

We do not sell your health data. We only share information with:

• Treating Professionals: Licensed dentists and orthodontists overseeing your case.
• Service Providers: Logistics partners (FedEx/UPS) and secure payment processors (Affirm/Stripe).
• Business Associates: HIPAA-compliant cloud storage and teledentistry software providers.

5. Your Rights (CCPA & HIPAA)

Depending on your state of residence, you may have the following rights:

• Right to Access: Request a digital copy of your 3D smile plan and medical records.
• Right to Deletion: Request the removal of your personal data (subject to medical record retention laws).
• Right to Correction: Correct any inaccuracies in your contact or medical history.

6. Security Measures

We employ industry-standard encryption (AES-256) for data at rest and SSL/TLS for data in transit. Access to clinical data is restricted to authorized medical personnel and support staff on a "need-to-know" basis.