Privacy Policy

1. Who We Are

Smile Again Foundation is a 501(c)(3) nonprofit organization (EIN: 33-4244037) headquartered at 920 Reserve Dr, Suite #160, Roseville, CA 95678. We connect patients needing full arch dental restoration with generous donors. This Privacy Policy describes how we collect, use, and protect your personal information when you visit smileagainmission.org or interact with our services.

2. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, mailing address, and payment information when you make a donation.
• Patient Information: Health-related information provided voluntarily through patient application forms, including dental history, photos, and video URLs. All patient data is handled in compliance with HIPAA guidelines.
• Account Information: Authentication data when you log in through our secure authentication system.
• Usage Data: Browser type, IP address, pages visited, and time spent on the site, collected automatically through standard web technologies.

3. How We Use Your Information

• Processing donations and issuing tax-deductible receipts
• Reviewing and managing patient applications
• Communicating with donors and patients about our programs
• Improving our website and services
• Complying with legal obligations, including IRS reporting for 501(c)(3) organizations
• Sending updates about our mission and impact (with your consent)

4. HIPAA Compliance

Patient health information submitted through our application process is treated as protected health information (PHI). We implement appropriate administrative, technical, and physical safeguards to protect this data. Patient stories are published only with explicit written consent and media release authorization. Patients may withdraw consent at any time by contacting us.

5. Payment Security

All donations are processed through Stripe, a PCI DSS Level 1 certified payment processor. We do not store credit card numbers or full payment details on our servers. Stripe's privacy policy governs the handling of payment data.

6. Data Sharing

We do not sell, trade, or rent your personal information. We may share data with:

• Service Providers: Payment processors (Stripe), email services, and hosting providers necessary to operate our platform.
• Dental Partners: Patient information shared with our clinical partners only with patient consent and for the purpose of providing dental care.
• Legal Requirements: When required by law, court order, or governmental regulation.

7. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand how visitors interact with our site. You can control cookie preferences through your browser settings.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy. Donation records are retained as required by IRS regulations for 501(c)(3) organizations. Patient data is retained in accordance with HIPAA requirements. You may request deletion of your personal data by contacting us.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data (subject to legal retention requirements)
• Opt out of marketing communications at any time
• Withdraw consent for patient story publication

California residents have additional rights under the California Consumer Privacy Act (CCPA). Contact us for details.

10. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If a parent or guardian becomes aware that their child has provided us with personal information, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: