Privacy policy

Data we collect

As part of using the platform, ORALIGN may collect the following categories of data

• the practitioner’s identification and contact details
• professional information and user account data
• information related to quotations, orders, payments and invoices
• the data required to manage patient cases
• clinical photographs
• digital impressions and STL files
• radiographs and CBCT or DICOM files
• the practitioner’s observations, prescriptions and instructions
• treatment plans and proposals
• exchanges with the support team
• technical data on connection to and use of the platform

Origin of patient data

Patient data is mainly collected and transmitted to ORALIGN by the healthcare professional responsible for their treatment.

Before transmitting a patient case, the practitioner must ensure that they have the necessary authorizations and consents and that they have informed the patient about the use of their data for the study, planning and manufacturing of the orthodontic treatment.

Purposes of processing

The data collected is used solely for purposes related to ORALIGN’s services, in particular to

• create and manage user accounts
• verify practitioners’ professional information
• create, analyze and track patient cases
• prepare and modify treatment proposals
• allow the practitioner to validate the treatment plan
• offer the packs suited to the patient case
• process payments, including installment payments
• design and manufacture the aligners
• organize and track deliveries
• provide support through the chat built into the application
• handle complaints and refund requests
• ensure the security and proper operation of the platform
• comply with applicable legal, administrative, accounting and regulatory obligations

Health-related data is not used for advertising purposes.

Data sharing

ORALIGN does not sell personal, clinical or medical data to third parties.

Data may be shared only with authorized persons within ORALIGN and with the providers necessary for the operation of the service, in particular for

• hosting and secure storage of data
• maintenance of the platform
• payment processing
• sending notifications and emails
• delivery of orders
• system backup and security

These providers can access only the information necessary to perform their tasks and are bound by confidentiality and security obligations.

Data may also be disclosed to the competent authorities where such disclosure is required by law.

Secure payment

Online payments are processed through a secure payment solution.

When banking details are entered directly on the payment provider’s interface, ORALIGN does not receive or retain the user’s full banking information.

ORALIGN may, however, retain the information required to track the transaction, in particular the amount, date, payment status and transaction reference.

Data retention

Data is retained for as long as necessary to fulfill the purposes for which it was collected.

Some information may be retained longer when a specific period is required for invoicing, device traceability, complaint handling, compliance with legal obligations or the defense of the parties’ rights.

Once the applicable period expires, the data is deleted, anonymized or securely archived.

Security and confidentiality

ORALIGN implements appropriate technical and organizational measures to protect data against

• unauthorized access
• accidental loss or destruction
• unauthorized modification
• disclosure or misuse
• incidents affecting the availability or confidentiality of the files

Access to patient cases is limited to authorized users and team members who need it to perform their tasks.

The user is responsible for the confidentiality of their credentials and must immediately report any unauthorized use of their account.

Rights of users and patients

In accordance with applicable law, any data subject may request

• access to the personal data concerning them
• the correction or updating of inaccurate data
• the deletion of data where this is legally possible
• objection to certain processing on legitimate grounds
• the withdrawal of their consent where the processing is based on it

Requests relating to a patient case may be handled in coordination with the healthcare professional who created or transmitted the case.

Any request can be sent to ORALIGN using the contact email address shown on the platform.

Changes to this policy

ORALIGN may update this Privacy Policy to take into account changes in the platform, its services, its procedures or the applicable regulations.

The date of the last update is shown on the page.

Last updated on 13 July 2026.