Privacy policy

SS-POL-004
Smile Supply Co., LLC, doing business as Smile Supply
Effective Date: October 1, 2026

1. Scope and Who We Are

This Privacy Policy explains how Smile Supply Co., LLC, doing business as Smile Supply (“Smile Supply,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit or use smilesupplyco.com, create a customer account, purchase or return products, enroll in or manage a subscription, communicate with us, interact with our marketing, submit a review, or otherwise use a consumer service that links to this Privacy Policy (collectively, the “Services”).

Smile Supply is a U.S. retailer and curator of third-party oral-care products. We are not a dentist, healthcare provider, health plan, or HIPAA-covered entity merely because we sell oral-care products or provide general oral-wellness information. Our products and Services do not create a dentist-patient or healthcare-provider relationship.

This Policy applies to Smile Supply’s consumer operations. It does not govern independent third-party websites, manufacturers, business partners, dental practices, or future B2B services that publish their own privacy notices. If another notice is presented when personal information is collected, that notice supplements this Policy and controls to the extent of a direct conflict for that collection.

2. Personal Information We Collect

“Personal information” means information that identifies, relates to, describes, or can reasonably be linked with an individual or household. It does not include information that is lawfully public, aggregated, or deidentified so that it cannot reasonably be linked to an individual. The information we collect depends on how you interact with the Services and the features and applications enabled on our Shopify store.

Identifiers and contact information, such as name, email address, telephone number, billing address, shipping address, account identifier, and IP address.

Order, commercial, and subscription information, such as products viewed or purchased, curated-box selections, cart activity, order history, subscription status, renewal activity, returns, refunds, discounts, product-change choices, and customer-service history.

Account and authentication information, such as login credentials, account settings, saved addresses, preferences, and security or authentication records. Passwords are handled through Shopify or another authentication provider and are not available to us in readable form.

Payment and transaction information. Shopify and payment providers process payment-card and financial-account details. Smile Supply generally receives limited information such as payment status, payment method type, billing details, transaction identifiers, and fraud-screening results, rather than complete payment-card numbers.

Device, network, and usage information, such as browser type, device type, operating system, IP address, cookie or advertising identifiers, pages viewed, links selected, referring URLs, approximate location derived from an IP address, and dates and times of interaction.

Communications and customer-service information, including emails, telephone communications, support requests, survey responses, product-change approvals, complaints, and information you voluntarily provide when seeking assistance.

Marketing and engagement information, such as email or SMS preferences, campaign interactions, advertisement interactions, referral source, and whether you opened or selected a communication.

User content, such as reviews, ratings, photographs, comments, or other material you choose to submit.

Oral-care preferences and other potentially sensitive information that you voluntarily provide, such as product preferences, age range of an intended product user, flavor preferences, allergies, sensitivities, or concerns relevant to fulfilling an order or responding to support. See Section 10, Consumer Health Data Privacy Notice.

Inferences, such as likely product interests or preferences derived from purchases and site activity, where permitted by law. We do not use these inferences to diagnose a condition or make decisions about eligibility for healthcare, employment, credit, housing, insurance, or another legally significant service.

Please do not send Social Security numbers, complete payment-card numbers, medical records, diagnostic test results, or other information we do not request. Product labels and manufacturer materials, not information you provide to Smile Supply, determine whether a product is appropriate for use.

3. Sources of Personal Information

We may obtain personal information:

Directly from you, including through checkout, customer accounts, subscription management, reviews, forms, customer support, email, SMS, telephone, and other communications. Automatically from your browser or device through cookies, pixels, local storage, software development kits, server logs, and similar technologies.

From Shopify; Appstle, which supports subscription enrollment, recurring-order administration, customer subscription management, billing events, and related communications; Klaviyo, which supports email, SMS, forms, customer profiles, analytics, and marketing automation; payment providers; fraud-prevention services; fulfillment providers; shipping carriers; analytics providers; advertising partners; review platforms; and other service providers.

From business and marketing partners, referral sources, social platforms, publicly available sources, and third parties when permitted by law. From other people, such as when someone purchases a product for you, provides your delivery information, or manages products for a child in their care.

4. How We Use Personal Information

We may use personal information for the following purposes:

Provide the Services and perform our contract, including operating the website, creating accounts, processing payments, accepting and fulfilling orders, assembling curated assortments, administering subscriptions, processing product changes, arranging delivery, handling returns and refunds, and providing customer support.

Personalize and improve the Services, including remembering preferences, recommending products, analyzing site performance, improving navigation, planning inventory and assortments, and developing customer experiences.

Send transactional communications, including account, order, payment, delivery, subscription, product-change, recall, security, and policy notices. Conduct marketing and advertising, including email, SMS, postal marketing, audience measurement, and interest-based or targeted advertising, subject to consent and opt-out rights required by law.

Maintain safety, quality, and product support, including responding to complaints, investigating damaged or suspected counterfeit products, communicating manufacturer information, administering product notices or recalls, and reporting safety matters when required. Protect the Services, customers, and business, including authentication, fraud prevention, payment security, abuse detection, incident response, and enforcement of our terms and policies.

Comply with law and establish or defend legal claims, including tax, accounting, recordkeeping, consumer-protection, regulatory, subpoena, court-order, and dispute-resolution obligations. Complete a corporate transaction, such as a financing, merger, acquisition, restructuring, bankruptcy, or sale of assets, subject to appropriate confidentiality and applicable law. Carry out another purpose disclosed when information is collected or that you direct or consent to.

5. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the purposes described above:

Shopify, which hosts and supports the store, checkout, accounts, payments, fraud prevention, analytics, personalization, and other commerce functions. Payment processors, banks, card networks, and fraud-prevention providers involved in authorizing and securing transactions. Appstle, which provides subscription-plan administration, recurring-order management, customer subscription portals, billing-event support, payment-retry workflows, subscription analytics, and related services integrated with Shopify.

Klaviyo and other vendors and service providers that support customer service, email, SMS, consent and suppression records, website forms, marketing automation, cloud hosting, analytics, information technology, security, reviews, data management, fulfillment, packaging, shipping, returns, and professional services.

Manufacturers, distributors, carriers, and product-safety partners when reasonably necessary to fulfill an order, answer a product question, investigate quality or safety, validate a warranty, or administer a notice or recall.

Advertising, analytics, and marketing partners, subject to applicable consent and opt-out choices. Certain disclosures through cookies or advertising technology may be considered a “sale,” “sharing,” or targeted advertising under some state laws even when no money is exchanged.

Government authorities, courts, law enforcement, regulators, legal advisers, or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, and security. Parties to an actual or proposed corporate transaction, subject to applicable restrictions. Another recipient at your direction or with your consent, such as a delivery recipient or social-media service you choose to use.

We do not sell personal information for money. We do not knowingly sell consumer health data. We do not disclose complete payment-card numbers because Smile Supply generally does not receive them. We do not authorize service providers to use personal information for purposes outside their services to us except as permitted by their agreement and applicable law.

6. Shopify and Enhanced Services

The Services are hosted by Shopify. Information submitted through the Services is transmitted to and processed by Shopify and its service providers, which may operate in the United States and other countries. Shopify processes information to provide checkout, payments, fraud prevention, customer accounts, infrastructure, analytics, and other platform services.

If Shopify Network Intelligence or another Shopify Enhanced Service is enabled for our store, Shopify may use information about your interactions with Smile Supply together with information from interactions with Shopify and other merchants to improve services, personalize experiences, measure performance, prevent fraud, and support advertising. In some circumstances Shopify acts as an independent controller responsible for its own processing and for requests concerning that processing. Learn more in the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers and the Shopify Privacy Portal at https://privacy.shopify.com/en.

Where Shopify’s customer-privacy tools are enabled, consent choices, a qualifying Global Privacy Control signal, the Your Privacy Choices mechanism, and deletion requests may affect Shopify Network Intelligence and connected advertising services. Features and processing may change if we enable or disable Shopify services; we will update this Policy when required.

6.1 Appstle Subscription Management

We use Appstle Subscriptions, an application integrated with Shopify, to offer and administer recurring purchases and provide a customer subscription-management portal. Depending on how you use subscription features, Appstle may process identifiers and contact information; Shopify customer, order, and subscription identifiers; subscribed products and quantities; prices, discounts, billing and delivery schedules; subscription status; shipping and account information; portal actions; transaction and payment status; Shopify-controlled payment-method status or references needed to manage a subscription; payment-retry activity; customer-service history; and device or technical information associated with the subscription service. Complete payment-card credentials are handled by Shopify and applicable payment providers rather than being made available to Smile Supply in readable form. Appstle states that its subscription application does not access customer billing information or store shoppers’ payment details. Additional information is available in Appstle’s subscription privacy notice at https://subscription-admin.appstle.com/privacy-policy.

We and Appstle use this information to create, authenticate, administer, modify, pause, skip, resume, and cancel subscriptions; generate recurring orders and billing events; process requested product changes; recover failed payments; send or trigger transactional subscription communications; provide customer support; prevent fraud or abuse; maintain records; and analyze subscription performance. Appstle may use its own service providers and may process information in the United States or other countries, subject to its agreements with us and applicable law.

If we enable the Appstle–Klaviyo integration, Appstle may transmit subscription events, status changes, customer or order identifiers, subscription tags, product and order details, and related activity to Klaviyo so that we can operate subscription-related email or SMS flows, customer segments, and transactional or marketing communications consistent with this Policy and applicable consent requirements. We do not intend to transmit complete payment credentials or voluntarily reported allergy, sensitivity, product-reaction, or other free-form consumer health details to Klaviyo through this integration.

7. Cookies, Analytics, and Advertising

We and our providers use cookies, pixels, local storage, tags, server logs, and similar technologies to operate the Services, remember preferences, secure checkout, measure performance, understand usage, and support marketing and advertising. Some technologies are necessary for the site to function; others are used only where permitted by law or based on your choices. We may derive approximate location such as city or region from your IP address or device and network information, to help operate and secure the services, understand website usage, and support analytics and marketing where permitted by law. 

When enabled, Klaviyo uses cookies, local storage, pixels, and related technologies to associate website activity with a customer or subscriber profile. This may include active-on-site activity, products or collections viewed, searches, items added to a cart, checkout activity, and interactions with email or SMS campaigns. Klaviyo may also record email delivery, opens, clicks, consent, and unsubscribe events. We configure these features and applicable consent controls based on the markets we serve and the choices available through Shopify and Klaviyo.

If you begin a checkout but do not finish it, we may use those technologies to detect that event and if you consented to SMS send a reminder about your cart. You can manage available choices through the cookie banner or preference center and the Your Privacy Choices or data-sharing opt-out link in the website footer. Where required, we recognize qualifying browser-based opt-out preference signals, including Global Privacy Control, for the browser or device sending the signal. Blocking cookies through a browser may affect functionality and may not stop technologies that do not rely on cookies.

Additional details - including categories, purposes, durations, and providers - will appear in SS-POL-008, Cookie & Tracking Technologies Policy, and the live cookie preference center. Those resources supplement this Privacy Policy and should reflect the technologies actually enabled on the website.

8. Marketing Communications

We use Klaviyo to manage email and, when activated, SMS marketing, sign-up forms, customer segments, automated message flows, campaign measurement, consent records, and suppression lists. Depending on your interaction and choices, Klaviyo may receive identifiers, contact information, order and subscription activity, subscription status or event information from Appstle, product interests, website activity, campaign engagement, and marketing preferences from Shopify, Appstle, Smile Supply, or your browser or device.

We send marketing email or SMS only as permitted by law and the consent or other lawful basis applicable to the communication. Purchasing a product does not automatically constitute consent to receive every category of marketing message. You may unsubscribe from promotional emails using the link in each email. You may opt out of marketing text messages as described in SS-POL-009, SMS Terms & Conditions, including by replying STOP where supported. We maintain suppression records to honor opt-outs and prevent accidental re-enrollment.

Opting out of marketing does not stop nonmarketing messages necessary for orders, subscriptions, product changes, safety, recalls, accounts, security, or customer service. We do not sell telephone numbers or consent records for unrelated third-party marketing. We will not share SMS opt-in information or consent status with third parties for purposes unrelated to providing our SMS program. We may disclose this information to service providers that help us operate and deliver text messages, such as telecommunication providers and other vendors supporting the SMS program. We do not use allergy, sensitivity, product-reaction, or other consumer health data in Klaviyo for targeted marketing, audience creation, or advertising personalization.

9. Customer Reviews and Public Content

Content submitted to a public or semi-public feature, such as a product review, may be visible to other people. Do not include medical records, private health details, contact information, or another person’s information in a public review. We may use and moderate reviews as described in the Terms of Service, but this Privacy Policy governs our handling of personal information associated with them.

10. Consumer Health Data Privacy Notice

This section is intended to provide additional disclosures for consumer health data protected by laws such as the Washington My Health My Data Act and Nevada’s consumer health data law. It applies to the extent those laws cover a person or particular processing activity. A link from the homepage or Privacy Policy link should allow consumers to reach this section directly.

10.1 Categories and Sources

Depending on your interaction with us, consumer health data may include oral-care products purchased or considered; information that could suggest an oral-care concern; age range of an intended product user; allergies, sensitivities, ingredient restrictions, or product reactions voluntarily reported to us; product-safety or adverse-event communications; and inferences that applicable law treats as consumer health data. Sources may include you, a person acting for you, your transactions and interactions with the Services, and manufacturers or service providers assisting with a request, complaint, safety investigation, warranty, notice, or recall.

10.2 Purposes of Collection and Use

We collect and use consumer health data only as reasonably necessary to provide a product or Service you request; honor a product preference or restriction we agree to manage; respond to a question or complaint; investigate quality or safety; process a return, replacement, warranty, notice, or recall; comply with law; protect safety; or for another purpose disclosed with any consent required by law. Smile Supply does not use consumer health data to diagnose or treat a condition or decide eligibility for healthcare, insurance, employment, credit, housing, or another legally significant service.

10.3 Sharing and Recipients

We may share the minimum consumer health data reasonably necessary with Shopify, Appstle, and service providers supporting requested subscriptions, accounts, customer service, security, fulfillment, and recordkeeping; with a manufacturer, distributor, carrier, warranty provider, safety partner, regulator, or professional adviser when needed to address a product question, complaint, incident, notice, recall, legal requirement, or requested service; and with another recipient at your direction or with your consent. Because product and subscription activity may itself be treated as consumer health data under some laws, Appstle may process the subscribed products and related transaction information needed to administer a requested subscription. We do not intentionally place free-form allergy, sensitivity, product-reaction, or other voluntarily reported health details into Appstle or Klaviyo marketing profiles for targeted marketing, audience creation, or advertising personalization. We do not share consumer health data with advertising partners for targeted advertising and do not sell consumer health data. Smile Supply currently has no corporate affiliates with which it shares consumer health data.

10.4 Consent and Changes

Where applicable law permits collection or sharing as necessary to provide a product or Service you requested, we rely on that permitted purpose. If we seek to collect, use, or share additional categories of consumer health data, use such data for an additional purpose, or disclose it to an additional category of recipient in a manner that requires consent, we will provide the required notice and obtain affirmative consent before doing so. We will not condition a product or Service on authorization to sell consumer health data. We do not use geofencing around healthcare facilities to identify or track consumers, collect consumer health data, or send health-related advertising.

10.5 Consumer Health Data Rights

Subject to applicable law, you may request confirmation of whether we collect, share, or sell consumer health data; access that data and a list of relevant recipients; withdraw consent; or request deletion. Send a request to support@smilesupplyco.com with the subject “Consumer Health Data Request” or use an available privacy-request form. We may verify your identity and authority. If we deny a request, you may appeal by replying with the subject “Privacy Appeal.” We will respond within the period required by applicable law.

11. Your Privacy Rights and Choices

Depending on your state of residence and whether a law applies to Smile Supply or the particular processing, you may have rights to:

Confirm whether we process personal information and access or know the information and related processing details. Correct inaccurate personal information. Delete personal information, subject to lawful exceptions. Obtain a portable copy of certain personal information. Opt out of the sale or sharing of personal information, targeted advertising, or certain profiling. Limit certain uses or disclosures of sensitive personal information where applicable. Withdraw consent for processing based on consent. Appeal our refusal of a privacy request. Receive equal service and not be unlawfully discriminated against for exercising a privacy right.

To exercise a right, use the Your Privacy Choices or data-sharing opt-out link in the website footer, use another privacy-request method displayed on the Services, or email support@smilesupplyco.com with the subject “Privacy Request.” Describe the right you wish to exercise and provide information reasonably necessary to locate your records. Do not send a copy of government identification unless we specifically request it through a secure method.

We may verify your identity and, where permitted, request information proportionate to the sensitivity of the request. An authorized agent may submit a request when allowed by law, but we may require proof of authority and direct confirmation from you. If we deny a request, you may appeal by replying to our response with “Privacy Appeal” in the subject line. We will respond within the time required by applicable law.

We will honor qualifying opt-out preference signals, such as Global Privacy Control, where required. A signal generally applies to the browser or device that sends it unless we can associate it with your account. You may need to repeat your choice on another device or browser.

12. Children’s Privacy

The Services are intended for a general adult audience. Customers must be at least 18 years old and legally capable of contracting to create an account, make a purchase, or manage a subscription. Children’s products must be purchased and managed by an adult. The Services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13.

If we learn that a child under 13 provided personal information without legally valid parental consent, we will take reasonable steps to delete it and stop further collection, subject to legal and safety requirements. A parent or guardian may contact us using Section 18. As of the Effective Date, we do not have actual knowledge that we sell or share for targeted advertising the personal information of individuals under 16.

13. Data Security

We use administrative, technical, contractual, and physical safeguards designed to protect personal information, taking into account the nature of the information and our operations. These may include access controls, authentication, encryption provided by platforms and payment processors, vendor management, monitoring, backups, and incident-response procedures. No system or transmission is completely secure, and we cannot guarantee absolute security. Do not send sensitive information through an unsecured channel.

14. Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including providing accounts and subscriptions, completing transactions, maintaining warranty and recall records, complying with tax and accounting obligations, preventing fraud, resolving disputes, enforcing agreements, and meeting legal requirements. Retention depends on the data category, sensitivity, purpose, legal obligations, and whether an account or transaction remains active. When information is no longer reasonably necessary, we take steps to delete, deidentify, or securely dispose of it, subject to backups and lawful exceptions.

15. Third-Party Websites and Services

The Services may link to or integrate with third-party websites, applications, social platforms, payment methods, manufacturers, or services. Those parties control their own privacy practices. Review their notices before providing information. A link or integration does not mean Smile Supply controls or endorses the third party’s privacy or security practices.

16. International Processing

Although Smile Supply currently sells to customers in the United States, Shopify and other providers may process personal information in the United States and other countries. Privacy protections may differ by location. Where legally required, a responsible party will use an approved transfer mechanism or another lawful basis for an international transfer.

17. Changes to This Privacy Policy

We may update this Policy to reflect changes in law, technology, Shopify settings, applications, providers, or business practices. We will post the updated Policy, revise the Effective Date or last-updated date, and provide additional notice or obtain consent when required. Material changes to consumer health data practices will be handled as described in Section 10 and applicable law.

18. Contact Us

For questions, privacy requests, consumer health data requests, or complaints, contact:

Smile Supply Co., LLC, doing business as Smile Supply
13720 Old St Augustine Rd
Ste 8 - 341
Jacksonville, FL 32258
Telephone: 904-257-6808
Email: support@smilesupplyco.com
Website: smilesupplyco.com