PRIVACY POLICY 

1. Types of Personal Information Collected

Vasu Smiles collects and processes the following types of personal data in compliance with TCR and industry regulations:

• Personal Identifiers: Name, date of birth, email address, phone number, and mailing address.
• Health & Treatment Data: Medical history, orthodontic treatment records, prescriptions, and insurance details.
• Financial Information: Credit card details, financing application information, and billing records.
• Communication & Consent Data: SMS/MMS opt-in status, timestamps of consent, preferred communication channels, and customer support interactions.
• Online & Behavioral Data: IP addresses, website browsing activity, device identifiers, cookie data, and social media engagement.
• Location Data: If a user enables location tracking for nearby clinic recommendations or targeted marketing.

Vasu Smiles only collects information necessary for business operations, patient care, and compliance and ensures that all data handling follows TCR standards.

2. Utilization of This Information

The personal information collected by Vasu Smiles is used for:

• Providing Orthodontic Services: Securely managing patient records, scheduling appointments, and processing insurance claims.
• Regulatory & Compliance Requirements: Adhering to HIPAA, TCPA, TCR, and other applicable data privacy laws.
• Marketing & Communication (TCR Compliant):
  • Sending SMS/MMS appointment reminders, treatment updates, and promotional offers.
  • Only messaging users who have explicitly opted in, with a clear opt-out option (e.g., “Reply STOP to unsubscribe”).
  • Maintaining proof of consent for all SMS/MMS communications.
• Fraud Prevention & Security: Monitoring accounts for suspicious activity and ensuring compliance with security protocols.

Vasu Smiles does not use collected data for unauthorized third-party marketing or reselling consumer information.

3. Practices for Sharing This Information

Vasu Smiles only shares consumer data in accordance with TCR and applicable privacy regulations, including:

• With Service Providers (TCR-Compliant SMS/MMS Vendors):
  • Trusted third-party vendors that handle SMS/MMS messaging, cloud storage, appointment scheduling, and payment processing.
  • Providers must adhere to TCPA, TCR, and HIPAA requirements.
• With Insurance Providers:
  • Sharing patient treatment details for claims processing, only when legally required and authorized.
• For Marketing Purposes (User-Controlled Opt-In & Opt-Out):
  • Information may be used for targeted marketing only if the user has explicitly consented to receive SMS/MMS messages.
  • Users can revoke consent at any time by replying “STOP” to text messages.
• Legal & Compliance-Required Disclosures:
  • Data may be shared with law enforcement, regulators, or legal advisors when required by law or for fraud prevention.

Opt-Out & Consumer Rights:

• Users have the right to access, correct, or delete their personal data by contacting Vasu Smiles.
• SMS/MMS subscribers can opt out of communications at any time by following the TCR-compliant opt-out process.