Privacy Policy

Last Updated and Effective: September 2026

INTRODUCTION

Align Surgical Associates, Inc. and its affiliates (collectively, “Align,” “we,” “us,” or “our”) are committed to protecting your privacy. This Privacy Policy (“the Policy”) explains how we collect, use, and protect your information when you use our website and services (collectively, the “Sites”).

This Policy applies to the information collected on the Sites and does not apply to information that we obtain about you from other sources. Please review this Policy carefully to understand how we collect, use, protect, or otherwise handle your information when visiting or using the Sites.

We reserve the right to change this Policy at any time. If we change our Policy, we will post an updated version; please check back periodically to see if our Policy has been updated. Updates to the Policy will be referenced by the “Last Updated and Effective Date” date shown above. By visiting the Sites, you acknowledge and consent to the privacy practices described in this Policy, including any revisions to this Policy that we post.

By using our Sites, you consent to our collection, use, disclosure, transfer and processing of personal data in accordance with this Privacy Statement.

DEFINITIONS

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household. Personal Information does not include information that is publicly available, de-identified, or aggregated.

“Sensitive Personal Information” means Personal Information that reveals information such as: (a) social security, driver’s license, state identification card, or passport number; (b) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) precise geolocation; (d) racial, ethnic, or national origin, citizenship or immigration status, religious or philosophical beliefs, or union membership; (e) the contents of mail, email, and text messages, unless we are the intended recipient of the communication; (f) genetic data; (g) information about a child; (h) biometric information for the purpose of uniquely identifying an individual; (i) mental health, physical health, and pregnancy; (j) sex life or sexual orientation, including status as a trans or nonbinary individual; (k) status a crime victim; and (l) neural data. Sensitive Personal Information that is publicly available is not considered Sensitive Personal Information or Personal Information. Please note that various jurisdictions may use different terms. For example, some jurisdictions use the terms “personal data” or “sensitive personal data.” Moreover, some jurisdictions do not consider some of the Personal Information listed in the Sensitive Personal Information definition above as Sensitive Personal Information.

INFORMATION WE COLLECT FROM YOU

We collect only the information needed to operate the Sites and deliver our services. When you visit or use the Sites, we may collect different types of Personal Information from you from a variety of sources, as described in the chart below. Please note that the type of Personal Information collected may vary depending on the nature of your interactions with us.

Category of Personal Information and Specific Elements Collected	Categories of Sources from which Personal Information Collected
Identifiers Personal Information that includes real name, alias, postal address, phone number, age, unique personal identifier, online identifier, IP address, Cookies that identify, email address, account name, search terms, what kinds of products you view, type of browser, time zone, or other similar identifiers.	Directly from you when you create an account, when you communicate with us, and other activities where you submit Personal Information to us Automatically through Cookies
Sensitive Personal Information Health information, including disease status, sexual orientation and gender identity, surgical history, or other similar health-related information.	Directly from you
Internet or other electronic network activity information This includes browsing history, search history, and information regarding a consumer’s interaction with an internet website, web beacons, pixel tags, application, or advertisements.	Directly from you Automatically through Cookies
Geolocation Data	Directly from you with your consent

On occasion you may choose to provide us with personal data about other people so that, for example, we can contact them with information about us. You must only share their personal data with us if you have obtained their consent and permission to do so.

We may aggregate and/or de-identify your Personal Information so that it can no longer be linked to you. We may use and share aggregated/de-identified information for any purpose at our sole discretion. We will maintain this data in its de-identified form.

Health Insurance Portability and Accountability Act of 1996 (HIPAA)

Align’s use and disclosure of certain of your information may be subject to the requirements of the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”) and applicable state law. Any information that you submit to us that constitutes “Protected Health Information,” as defined by HIPAA, is subject to HIPAA and applicable state law. The term “Protected Health Information” or “PHI” refers to individually identifiable health information about your past, present or future physical or mental health or condition, the provision of health care to you or the past, present or future payment for such care. Any PHI collected on our Sites will be used and disclosed only in accordance with Align’s Notice of Privacy Practices, which is incorporated by reference herein and may be found [here].

**PURPOSES FOR WHICH WE COLLECT YOUR INFORMATION**

Set forth below are the business or commercial purposes for our collection of your Personal Information. Please note that we may not use your Personal Information for all purposes set forth in this Policy.

Category of Personal Information	Purposes for Collection / Use
Identifiers	To register or maintain an account or subscribing to marketing emails from us To provide customer support To contact you regarding administrative notices and your use of the Sites To customize, improve, and personalize your experience with us To enable personalization of content that we display To enable you to sign up for our mailing list to receive news, updates, and information about events To ask for ratings, surveys, and reviews of services, or to help you become a member of a fan club To follow up with you after correspondence (live chat, email, or phone inquiries) To verify the accuracy of our records and your identity To gather demographic information about user trends, such as age, gender, and general income levels. To provide our practice with information on prospective patients. To analyze use of our services and products, develop new services and products, and customize our services. To set up and otherwise manage your member account in our Sites. To allow you to use, purchase, book and/or download products and services. To report a problem with our services or transactions with us To ensure our Sites function properly and to track log-ins To perform research To help us develop new products and services and improve our existing products and services For marketing purposes to personalize your experience and to allow us to deliver the type of content and product offerings in which you are most interested When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services For dispute resolution, audit and security, detection, prevention and mitigation of fraudulent or illegal activities and to enforce our other applicable policies To accomplish any other purposes reasonably necessary to provide our services or products
Internet or other electronic network activity information	To provide you with appropriate products, recommendations, and updates To show you relevant ads while you are browsing the internet To improve the Sites, set default options, and provide you with a better shopping experience
Geolocation Data	To display custom content to you based on your location

Our data sources help us get a full picture of our marketing efforts. This data is only for our efforts and we do not share your information with other businesses for them to use for purposes other than their work with us.

**WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?**

We partner with other businesses to assist us in our marketing, communications, sales efforts, and as otherwise necessary to operate and manage the Sites, and we may share information about you with them when you have given us consent to do so or when permitted by law.

The purposes for which we may share your Personal Information include:

• Auditing of Ad Impression: We disclose Personal Information for auditing purposes related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
• Security and Fraud Detection: We disclose Personal Information for our security and fraud detection services, including detecting security incidents; protecting against malicious, deceptive, fraudulent, or illegal activity; and prosecuting those responsible for that activity.
• Functionality & Debugging: We disclose Personal Information to engage in debugging to identify and repair errors that impair existing intended functionality.
• Short-Term / Transient Use: We disclose Personal Information for short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business, provided that the consumer’s Personal Information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business.
• Services on Our Behalf: We disclose Personal Information in order to receive services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf.
• Advertising and Marketing Services: We disclose Personal Information to provide advertising or marketing services on our own behalf.
• Research & Development: We disclose Personal Information for internal research related to technological development and demonstration.
• Quality Control & Improvement of Products and Services: We disclose Personal Information to verify, maintain, and improve our products and services.

All such third parties are subject to contractual confidentiality obligations in order to protect your information to the extent commercially reasonable.

We may also use or disclose your Personal Information to resolve disputes, investigate problems, and enforce our Website Terms of Use or any other agreement with Align. We may investigate and disclose information from or about you if we have a good faith belief that such investigation or disclosure is (a) reasonably necessary to comply with legal process and law enforcement instructions and orders, such as a search warrant, subpoena, statute, judicial proceeding, or other legal process served on us; (b) helpful to prevent, investigate, or identify possible wrongdoing in connection with the Sites; or (c) protect our rights, reputation, property, or that of our users, affiliates, or the public.

In addition, any information we collect, including Personal Information, may be disclosed as part of any merger, acquisition, sale of company assets, or similar transaction, as well as in the event of insolvency, bankruptcy or receivership in which Personal Information could be transferred to third parties as one of our business assets.

Except as stated in this Policy, we do not share, distribute, or release to a third party your Personal Information without notice to you. We will not sell your Personal Information without giving you an opportunity to opt out of such sale; we will not sell your Sensitive Personal Information without your express consent. For more information, see the “Your Rights” section below.

BEHAVIORAL ADVERTISING, COOKIES, AND ONLINE TECHNOLOGIES

Like many websites, we also use analytics software to collect information about your use of our Sites. This software sets “cookies,” which are small files of letters and numbers that are stored on your browser or the hard drive of your computer. We and our service providers and partners use cookies or similar technologies, such as web beacons and tracking pixels, to analyze trends, administer our Sites, personalize content and ads, track users’ movements around our Sites to provide you with the most relevant browsing experience, to gather demographic information about our user base as a whole, and to provide marketing.

We use several types of cookies and other tracking technologies on our Sites, as described below. The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

• Strictly necessary cookies. These are cookies that are required for the operation of our Sites. They include, for example, cookies that enable you to log into secure areas of our Sites or make use of e-billing services.
• Functionality/preference cookies. These are used to recognize you when you return to our Sites, meaning you don’t have to re-enter this information each time you return to the Sites or browse from one page to another. These cookies enable us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
• Statistical, analytical, or performance cookies. These allow us to recognize and count the number of visitors to our Sites and to see how visitors move around our Sites when they are using it. This helps us to improve the way our Sites works by, for example, ensuring that users are finding what they are looking for easily.
• Marketing/targeting cookies. These cookies record your visit to our Sites, the pages you have visited, and the links you have followed. We use this information to make our Sites and the advertising displayed on it and on third-party websites more relevant to your interests.
• Third-party cookies. These cookies are placed on your device by a website from a domain other than our Sites. These parties may include, for example, advertising networks and providers of external services like web traffic analysis services. These third-party cookies include analytical cookies, performance cookies, and targeting cookies. We use this analytics data to improve our Sites structure and content, and to provide you with personalized content to improve your experience.
  • We use Google Analytics to ensure website functionality and improve our Sites and services. This software may record information such as your IP address, location, age and gender, browser type and language, operating system, access time, duration of visit, pages you view within our website, search terms you enter, and other actions you take while visiting us, including how often you use visit our Sites, aggregated usage and performance data, app errors, and debugging information. Data collected by Google is subject to its privacy policy. To learn how Google uses data related to website analytics, please click here. You may opt out of having your activity on our Sites made available to Google Analytics by installing the Google Analytics browser add-on, available here.
  • We have enabled certain Google Analytics Advertising Features, including Google Display Network Impression Reporting and Remarketing with Google Analytics. The Google Display Network Impression Reporting uses the Google Analytics cookie to track our ad impressions and your interactions with those impressions, including the effectiveness of those ads, which generates reports for us to help us analyze our advertisements. Remarketing with Google Analytics uses the Google Analytics and/or a third-party cookie to serve advertisements to you across the Internet based on your visit to our Sites.
• Web beacons and pixels. In addition, we use web beacons and pixels, which are images that can be placed in web pages and some forms of email. These technologies can be used to deliver cookies and to collect information about your use of the Sites. Finally, we may also collect information through tracking pixels. A tracking pixel is a transparent graphic image (usually 1 pixel x 1 pixel or Javascript tag) that is placed on a web page and, in combination with a cookie, allows us to collect information regarding the use of the page of the site that contains the tracking pixel. We may use tracking pixels to trigger ads on participating websites based on activity tracked from the browser on a device used to visit our Sites. Other entities may have access to some of this information.

Emails that we and our service providers send may include similar technologies that provide us with information related to whether you’ve opened an email or clicked on a link contained in an email. More information on how to unsubscribe from our marketing emails is found below.

If you want to remove existing cookies from your device you can do this using your browser options, most often in the “Tools” or “Preferences” menu. If you want to block future cookies being placed on your device, you can change your browser settings to do this. For more information on how to modify your browser settings or how to block, manage, or filter cookies can be found in your browser’s help file or through such sites as www.allaboutcookies.org. You can also visit the website http\://www\.aboutads.info to change your consumer preferences with respect to certain online ads and to obtain further information about third party ad networks and online behavioral advertising.

Please bear in mind that deleting and blocking cookies may have a negative impact on your user experience, as parts of the site may no longer work. Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. Unless you have adjusted your browser settings to block cookies, our system may issue cookies as soon as you visit our site or click on a link in a targeted email that we have sent you, even if you have previously deleted our cookies.

By using our Sites, you affirmatively agree to the use of online technologies disclosed in this Policy.

Email Communications

The CAN-SPAM Act gives recipients of commercial email the right to have emails stopped from being sent to them. You may unsubscribe from our marketing communications by clicking the “unsubscribe” link found in every commercial email we send, or (if you have an account with us) by sending us a request to unsubscribe at the following email address [email protected]. If you opt out of receiving our marketing email communications, we may still send you email messages related to your account or specific transactions with us. Unsubscribing yourself from our marketing emails will not affect our service to you.

SURVEYS

We may also ask that you participate in anonymous surveys, which allow us to collect additional data to help us improve our Sites. Participation in such surveys is voluntary and is not connected to any of your Personal Information.

LINKS TO OTHER WEBSITES

This Privacy Policy applies only to the Sites as provided by Align. The Sites may contain links to other websites, which may be subject to a different privacy policy or are otherwise maintained or provided by a third party. We are not responsible for the privacy practices of any third-party website you access from our Sites. You should review the privacy policy of every website before using such sites or submitting any information to them.

CHILDREN

No part of the Sites, or any services made available through them, are designed for, directed to, or intended to attract children under the age of 13. No Personal Information is knowingly collected from any person under the age of 13.

MARKETING AND DO NOT CONTACT

We may send you information about us from time to time if you have given us your consent (where required).

Align provides you the opportunity to request to stop receiving electronic communications from either us by withdrawing your consent. If you do not want to receive communications from us, please tell us when we collect your information. You may also use the unsubscribe feature included with emails. Please allow us enough time to process your request.

Keep in mind, this withdrawal of consent does not apply to necessary communications, such as responding to an inquiry, and is revoked if you later request information from us, for example, if you sign up to receive news alerts from us.

SOCIAL MEDIA

If you are a user of Facebook, Instagram, X, or other social media platforms with public account settings we will be able to pull your reviews of our practice from these public media platforms and post them on our Sites. This is so that we can share your opinions about our practice with the visitors of our Sites. Before being posted in our Sites, your comments will be reviewed by us.

By posting or otherwise making available any Content on a public social media platform about your experience, you represent and warrant that you are thirteen (13) years of age or older and that you agree to the terms and conditions listed on our page on those websites. If you become aware of user-generated content shared from an individual under the age of 13, please contact us at [email protected].

YOUR RIGHTS

Your Rights if You Are a Resident of California

California residents may exercise certain privacy rights pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and related regulations (CCPA). Your right to submit certain requests as a California resident are described below. Please note that these rights are subject to certain exceptions and certain of these rights are subject to verification mechanisms. You may submit a request by calling us at (415) 530-5335 or emailing us at [email protected].

• Right to Know Personal Information Collected About You. You have the right to know: (1) the categories of Personal Information we have collected about you; (2) the categories of sources from which the Personal Information is collected; (3) the business or commercial purpose for collecting, selling, or sharing Personal Information; (4) the categories of parties to whom we disclose Personal Information; and (5) the specific pieces of Personal Information we have collected about you. You also have the right to know the list of all third parties to whom we have disclosed Personal Information, as defined under California Civil Code Section 1798.83(e) (a/k/a the “Shine the Light Law”), during the preceding year for third-party direct marketing purposes.
• Right to Know Personal Information Disclosed, Sold or Shared and to Whom. You have the right to request that we disclose to you: (1) the categories of Personal Information that we collected about you; (2) the categories of Personal Information that we sold or shared about you and the categories of third parties to whom the Personal Information was sold or shared, by category or categories of Personal Information for each category of third parties to whom the Personal Information was sold or shared; and (3) the categories of Personal Information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
• Right to Request Deletion of Your Personal Information. You have the right to request that we delete your Personal Information. However, there are a number of situations where you do not have the right to delete your Personal Information. For example, you cannot request that we delete your Personal Information if it is reasonably necessary for us to complete the transaction for which the Personal Information is collected or provide the services that you have requested or reasonably anticipated by you within the context of our ongoing business relationship, or to otherwise perform a contract between us. We also will not delete your Personal Information from our backup systems to the extent permitted by the CCPA. Following receipt of a request, we will let you know what, if any, Personal Information we can delete. If we cannot delete all of your Personal Information, we will let you know the reason.
• Right to Correct Inaccurate Information. If you believe that any of the Personal Information we maintain about you is inaccurate, you have the right to submit a request for us to correct that information. Upon receipt of a request, we will use commercially reasonable efforts to correct the information as you direct.
• Right to Opt-Out of the Sale and Sharing of Your Personal Information. You may opt-out of the sale or sharing of your Personal Information, to the extent appliable, by clicking here: Do Not Sell or Share My Personal Information. You can also exercise this right to opt-out by using a browser that supports an opt-out preference signal (also known as a Global Privacy Control (GPC)). If you choose to use this signal, you will need to turn it on for each browser you use.
• Right to Limit the Use of Your Sensitive Personal Information. You have the right to limit the use of Sensitive Personal Information under circumstances. You do not have this right where we collect, use or disclose your Sensitive Personal Information for the following purposes: (i) to that use which is necessary to perform the services or provide the goods reasonably expected by you; (ii) to help to ensure security and integrity; (iii) to perform services on our behalf; (iv) to undertake activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us; and (v) to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us. You also do not have the right to limit the use of Sensitive Personal Information where we only collect or process Sensitive Personal Information without the purpose of inferring characteristics about you as is the case with us. Given the purpose for our collection, use and/or disclosure of your Sensitive Personal Information, this right does not apply to you. You can also exercise this right to opt-out by using a browser that supports an opt-out preference signal (also known as a Global Privacy Control (GPC)). If you choose to use this signal, you will need to turn it on for each browser you use.
• Right to Non-Discrimination for Exercising Your Rights. If you choose to exercise any of your rights, you have the right to not receive discriminatory treatment by us.

Your Rights If You Are a Resident Other than California

Depending on your state of residency, you may have certain rights related to your Personal Information. California residents should refer to the “Your Rights if You Are a Resident of California” section above and for a description of California specific rights and Nevada residents should refer to the “Nevada Privacy Notice” below.

Please note that not all of these rights may be applicable to you, these rights are subject to certain exceptions and certain of these rights are subject to verification mechanisms. You may submit a request by calling us at (415) 530-5335 or emailing us at [email protected].

• The Right to Know: You have the right to know whether we are processing your Personal Information, and, if you are a resident of Oregon, the categories of your Personal Information we have processed and the specific third parties to which we have disclosed it.
• The Right of Access: You have the right to access your Personal Information, and to obtain a copy of it in a readily usable format, if feasible.
• The Right to Correct Inaccuracies: You may request that inaccuracies in your Personal Information be corrected.
• The Right to Delete: You have the right to request that your Personal Information be deleted, except in cases where retention is required by law or contractual obligation.
• The Right to Data Portability: You have the right to obtain a copy of your Personal Information in a portable and, if feasible, readily usable format.
• The Right to Opt-Out: You may elect to prevent your Personal Information, to the extent applicable, from being:
  • Used in targeted advertising;
  • Sold; or
  • Used for automated decision making or profiling purposes that may produce legal or similarly significant effects.

[To the extent we use profiling, you have the right to (1) question the result of the profiling, (2) be informed of the reason the profiling resulted in the decision, and (3) if feasible, be informed of actions you could have taken to result in a different decision. Additionally, you have the right to review the data used in the profiling, and if such data was inaccurate, correct the data and have the profiling decision reevaluated.]

• The Right to Non-Discrimination for Exercising Your Rights: If you choose to exercise any of your rights, you have the right to not receive discriminatory treatment by us.
• Rights Regarding Sensitive Personal Information: Depending on your state of residency, we will either: (a) not process your Sensitive Personal Information without first presenting you with clear notice and an opportunity to opt out of the processing; or (b) not process your Sensitive Personal Information without obtaining your consent. You have the right to withdraw your previous consent and opt out of further processing of your Sensitive Personal Information.
• Rights Regarding Information We Share with Third Parties: If you are an Oregon or Minnesota resident, you have the right to obtain, at our option, either a list of the specific third parties to whom we have disclosed your Personal Information. If you are a Delaware resident, you have the right to obtain a list of the categories of third parties to whom we have disclosed your Personal Information.

Furthermore, if we have actual knowledge that you are 13 years of age and not older than 18 years of age, we will not without your consent process your Personal Information for the purposes of targeted advertising, profile you in furtherance of decisions that produce legal effects or effects of similar significance, or sell your Personal Information.

Verification of Consumer Requests

When you make a request to know, delete and/or correct, to help protect your privacy and maintain security, we will take steps to verify your identity. Our verification procedure may differ depending on whether you have an account with us or not and the request you are making. The following generally describes the verification processes we use:

• Password Protected Accounts. If you have a password-protected account with us, we may use existing authentication practices to verify your identity but will require re-authentication before disclosing, correcting or deleting data. If we suspect fraudulent or malicious activity relating to your account, we will require further verification (as described below) before complying with a request to know, correct or delete.
• Verification for Non-Accountholders. If you do not have, or cannot access, a password-protected account with us, we will generally verify your identity as follows:
  • For valid requests to know categories of Personal Information, we will verify your identity to a reasonable degree of certainty by matching at least two data points provided by you with reliable data points maintained by us.
  • For valid requests to know specific pieces of Personal Information, right of access and right to data portability, we will verify your identity to a reasonably high degree of certainty by matching at least three data points provided by you with reliable data points maintained by us.
  • For valid requests to correct or delete Personal Information, we will verify your identity to a reasonable degree or a reasonably high degree of certainty depending on the sensitivity of the Personal Information and the risk of harm posed by unauthorized deletion. We will act in good faith when determining the appropriate standard to apply.

If there is no reasonable method by which we can verify your identity, we will state so in response, including an explanation of why we have no reasonable method to verify your identity.

We may also require a declaration, signed under penalty of perjury, that the person requesting the information is the person whose information is the subject of the request or that person’s authorized representative.

If you use an authorized agent to submit a request to know, delete or correct, we may require the authorized agent to provide proof that you gave the agent signed permission to submit the request. We may also require you to do either of the following: (a) verify your own identity directly with us; or (b) directly confirm with us that you provided the authorized agent permission to submit the request.

There may be situations where we cannot grant your request. For example, if you ask us to delete Personal Information that we are obligated to keep to comply with applicable law we may not be able to fulfill some or all of your request. We may also decline to grant your request where our use of your Personal Information serves a legitimate purpose such as for security purposes. Your request may also be denied if it compromises the privacy of others, is overly repetitive or extremely burdensome to fulfill.

We will respond to valid requests to know, requests to delete and / or delete no later than 45 calendar days. If we cannot verify your request within 45 days, we may deny your request. If necessary, we may take up to an additional 45 days to respond to your request but in such an event will provide you a notice and an explanation of the reason that we will take more than 45 days to respond to your request.

Valid requests under “Right of Access” and “Right to Data Portability” will be transmitted securely. If we cannot fulfill your request, we will notify you of that decision and the reasons why within 45 days. At that point if you believe our decision was in error, you may have the right to submit an appeal using the method(s) above. If the result is the same, you can also seek assistance and/or redress from your state attorney general.

NEVADA PRIVACY NOTICE

Nevada law provides that Nevada residents may opt-out of the “sale” of “covered information” to third parties, including but not limited to name, address, social security number, and online service activity. Our uses of your Personal Information are not sales under Nevada law, so no opt-out right applies.

Retention Period

In general, we will retain all information collected through the Sites for the length of time permitted by law. However, we will delete any personally identifiable information in our database upon your request or as otherwise required by law.

We maintain backup files as a protection against natural disasters, equipment failures, or other disruptions. Backup files protect you and us because they lower the risk of losing valuable data. Backup files may contain records with your Personal Information. Removing a record from our active files and databases does not remove that record from any backup systems. Such backup data will eventually be passively deleted as backup records are erased through the normal recycling of backup files. In the meantime, as long as backup records exist, they receive the same security protections as our other records.

SECURITY

Communications between your browser and portions of the Sites containing personally identifiable information are protected with Secure Socket Layer (SSL) encryption. This encryption is to help protect your information while it is being transmitted. Once we receive your information, we strive to maintain the physical and electronic security of your Personal Information using commercially reasonable efforts.

NO DATA TRANSMISSION OVER THE INTERNET OR ANY WIRELESS NETWORK CAN BE GUARANTEED TO BE PERFECTLY SECURED. AS A RESULT, WHILE WE STRIVE TO PROTECT YOUR PERSONAL INFORMATION USING COMMERCIALLY AVAILABLE AND INDUSTRY STANDARD ENCRYPTION TECHNOLOGY, WE CANNOT ENSURE OR GUARANTEE THE SECURITY OF ANY INFORMATION YOU TRANSMIT TO US, AND YOU DO SO AT YOUR OWN RISK.

If we determine that your Personal Information has or may reasonably have been disclosed due to a security breach of our systems, we will notify you in accordance with and to the extent required by applicable state and federal law using the information that we have on file.

CHANGES TO OUR POLICY

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. We will indicate the last date of changes at the top of our Privacy Policy.

CONTACT INFORMATION

If you have any questions or concerns about this Privacy Policy, Align’s privacy practices, or access to your Personal Information, please contact us at the following:

Privacy Official: Megan Alvarez

Email: [email protected]

Phone: (415) 530-5335

Mailing Address: 2299 Post St Ste 207, San Francisco, CA 94115