Privacy Policy
Scope
This notice covers personal data EasyAligners processes about partner practice staff (as a data controller) and about patients whose intraoral scans and case details are submitted through the clinic portal (as a data processor acting on the practice’s instructions).
What we collect
Practice and staff contact details for onboarding and account management; patient intraoral scans, prescriptions and case notes submitted for treatment planning and manufacturing; and order, delivery and invoicing records.
Why we process it
To plan and manufacture aligners against a submitted prescription, to fulfil delivery and customs obligations, to operate the clinic portal and account management, and to meet our own regulatory and accounting obligations.
Who else processes it
Our website and the partnership application form are hosted on Cloudflare, and application notifications are delivered by Resend. Both act as processors on our instructions. A full sub-processor list is available to partner practices on request.
Legal basis and international transfers
Processing relies on performance of the partnership contract and, for patient data, the instructions of the practice as controller under UK GDPR and EU GDPR. Where data is transferred outside the UK/EEA, we rely on adequacy decisions or standard contractual clauses.
Retention and your rights
Case data is retained for as long as needed to support the treatment and for the periods required by applicable medical device and accounting regulations. Practices and patients can request access, correction or deletion of personal data by contacting us using the details below.
Contact
Data protection queries can be sent to partnerships@easyaligners.co.