Scope and roles
Smilevolve may act as a business receiving prospect information and, under separate agreements, as a service provider processing customer-controlled data. The specific legal role and instructions depend on the service, data category, and agreement.
Data minimization
Only information reasonably necessary for the relevant business purpose should be collected. Public inquiry forms must not be used to transmit patient records, clinical details, or protected health information.
Access and security
Access to personal and customer information should be limited to authorized personnel and providers with a legitimate business need. Appropriate authentication, permission management, secure transmission, and incident-handling processes should be established and periodically reviewed; implementation details require verification.
Vendor oversight
Providers that handle information should be assessed for their role, contractual commitments, and applicable security and privacy requirements. A data processing agreement or business associate agreement may be necessary depending on the data and service.
Retention, deletion, and portability
Retention, export, correction, and deletion obligations should be specified in customer agreements and internal schedules, subject to legal preservation requirements. Do not assume immediate deletion across backups or third-party systems.
Incident response
Suspected unauthorized access or disclosure should be assessed promptly under an established incident response procedure. Notification obligations and timing depend on the incident, applicable law, and contractual requirements.
Patient information and HIPAA
Healthcare-related customer information may be subject to HIPAA or other health privacy laws. HIPAA applicability and business associate status must be evaluated by actual data flows and contractual roles. Smilevolve does not claim that every feature or integration is HIPAA-compliant by default.
Questions and requests
For data protection questions or to discuss contractual safeguards, contact hello@smilevolve.com.
Questions? hello@smilevolve.com