Privacy Policy
Last Updated on November 6, 2024
This Privacy Policy sets out how Overjet Inc., the legal entity operating Overjet.ai, Overjet.com, and Overjet.io collects, uses and discloses your personal information, and the choices you have with respect to the information.
When we refer to “Overjet”, we mean Overjet Inc. and its wholly owned subsidiaries.
Introduction
Overjet (“Overjet” or “we”) respects your privacy and is committed to protecting it. Please read this Privacy Policy carefully to understand how Overjet collects and uses your personal information and data. This Privacy Policy covers all Personal Information that we receive from various sources, as outlined below.
This Privacy Policy sets out how we use, protect and share your personal information by accessing Overjet’s websites, including overjet.ai, overjet.com and overjet.io (the “Website(s)”), in any way, utilizing our services, interacting with us, contacting us or by engaging in transactions with us through any other means.
For the purposes of this Privacy Policy, “Personal Information” may include any information that can be used to identify or locate you, such as your name, address, IP address, mailing address, contact information, email address or phone number and other information you may produce to us. It does not include data where the identity has been removed (anonymous data). Both federal and state law in the United States define Personal Information, as do the laws of other countries and jurisdictions (e.g. the GDPR and the UK GDPR with the definition “Personal Data”). This Privacy Policy is intended to include the most expansive definition that applies to you. Please recognize that your rights related to Personal Information, and how Personal Information is defined, differs somewhat from state to state and country to country.
This Privacy Policy applies to processing undertaken where we (as the “controller” under applicable privacy law) are the organization which determines why and how your Personal Information is processed and is otherwise required under applicable law to provide notice of any processing undertaken.
Changes to Privacy Policy. We review this Privacy Policy regularly and may update it from time to time. We will post any changes on this page and may also provide notice of material changes to our Privacy Policy on our website home page and/or through our Subscription Services. If you object to any changes to this Privacy Policy, you may close your account and discontinue use of our Services.
This Privacy Policy describes the types of Personal Information Overjet may collect from you or that you may provide when you visit the Websites or use any of our Subscription Services and our practices for collecting, using, maintaining, protecting and disclosing that information.
This Privacy Policy applies to Personal Information Overjet collects:
On the Website.
In e-mail, text and other electronic messages between you and the Website or Overjet.
Through mobile and desktop applications you download from the Website, which provide dedicated non-browser-based interaction between you and the Website. Overjet’s online scheduling app provides widgets to customers and patients for their use in scheduling, and Personal Information is collected through these widgets.
Through our platform, products and services (the “Subscription Services” and together with the Website, the “Services”).
In the usual course of business, such as in connection with our events, sales, and marketing activities, newsletters or other subscription services, training, educational programs, webinars or conferences, submit job applications, participate in surveys, or in any other interaction with Overjet.
Please read this Privacy Policy carefully to understand our practices regarding your Personal Information and how Overjet will treat such information. If you are registering an account or using the services on behalf of an individual or entity other than yourself, you represent that you are authorized by such individual or entity to share their Personal Information with Overjet and for the processing purposes outlined in this Privacy Policy.
Personal Information We Collect About You and How We Collect It
Overjet collects, uses, stores and transfer several types of Personal Information from and about users of the Services, including the following Personal Information:
Identity and Contact Information about you including your first name, last name, any previous names, username or similar identifier, title, date of birth, postal address, email address and telephone numbers;
Financial and Transaction Information including your bank account and payment card details (including corporate card accounts), details about payments to and from you and other details of Services you purchase from or through us, such as through the Website and the Subscription Services and of the fulfillment of your requests;
Technical and Usage Information including your search queries and questions and comments posted on the Website or in any Subscription Services, your IP address, your login data, your browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access our websites and information about how you interact with and use our Website and Services;
Services Information including personal information provided in order to receive our Services such as medical records, audio or video recordings, text input, images, third-party reimbursement claims, health information and/or other information uploaded by you or on your behalf into our Services. We process such Personal Information as a Data Processor and so the responsibility for such processing lies with the ultimate Data Controller; and/or
Marketing and Communications Information including your preferences in receiving marketing from us and our third parties and your communication preferences.
If you communicate with Overjet by, for example, e-mail or letter, any information provided in such communication may be collected as Personal Information. You also may provide information to be published or displayed (hereinafter, “posted“) on public areas of the Website, or transmitted to other users of the Website or third parties (collectively, “User Contributions“). Your User Contributions are posted on and transmitted to others at your own risk. Please be aware that no security measures are perfect or impenetrable. Additionally, Overjet cannot control the actions of other users of the Website. Therefore, Overjet cannot and does not guarantee that your User Contributions will not be viewed by unauthorized persons
We also collect, use and share Aggregated Information such as statistical or demographic data for any purpose. Aggregated Information could be derived from your Personal Information but is not considered Personal Information in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Technical and Usage Information to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your Personal Information so that it can directly or indirectly identify you, we treat the combined data as Personal Information which will be used in accordance with this Privacy Policy.
How your Personal Information is Collected
Overjet collects this information:
Directly when you interact with us or provide it to Overjet or on or through the Services. This includes:
information that you voluntarily provide to Overjet when you choose to use some of the Services, such as searching for Providers, searching for available appointments with Providers, reporting technical problems with our apps, services or Websites, and completing medical history forms prior to Provider appointments.
information you provide voluntarily in free-form text boxes on the Website or Subscription Services and through responses to forms, surveys, feedback requests, questionnaires, contests, and the like. Some of the services on the Website or the Subscription Services may ask for your health-related Personal Information.
information that you provide in email, post, chats, telephone conversations or other correspondence with Overjet.
You may elect to use certain Overjet services on or through the Website which require you to download and install software on your computer (“Downloaded Software“). The Downloaded Software may collect and transmit information from your computer system solely relating to the Downloaded Software and for the purpose of providing you with the relevant services.
Automated Technologies and Cookies. Automatically as you navigate through the Website. Information collected automatically may include Technical and Usage Information about your equipment, browsing actions and patterns, web beacons and other tracking technologies. We collect this Personal information by using cookies and other similar technologies. Please see the Usage Details, IP Addresses, Cookies and Other Technologies and Third-party Advertiser Use of Cookies and Other Tracking Technologies below for further details. For further information, please see our Cookie Notice here.
From third parties, for example, our business partners or the ultimate Data Controller.
Children Under the Age of 13. Where we process the Personal Information of minors we require the subscriber or person inputting the Personal Information to be the parent or guardian of the minor or to obtain their consent. Overjet’s Website and our online patient scheduling subscription service are not intended for use by children under 13 years of age. No one under age 13 may provide any information to, or on the Website. Overjet does not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on the Website or on or through any of its features, register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website or provide any information about yourself to Overjet or on the Website, including your name, address, telephone number, e-mail address or any screen name or user name you may use. If Overjet learns that it has collected or received Personal Information from or about a child under 13 without verification of parental consent, Overjet will delete that information. If you believe Overjet might have any information from or about a child under 13, please contact us as set forth in the Contact Information section at the end of this Privacy Policy.
California Consumer Privacy Act Notice: Pursuant to the § 1798.110 of the California Consumer Privacy Act (“CCPA”), the categories of personal information that we have collected about individual consumers in the preceding twelve months are:
Identifiers such as name, email address, address, telephone number, insurance policy number, employment information, medical information, and health insurance information
Commercial information: records of services purchased
Internet activity
Geolocation data
How Overjet Uses Your Information
Data protection laws require us to have a legal basis for everything that we do with your personal information falling under one of the following categories:
Performance of a contract with you: Where we need to perform a contract we are about to enter into or have entered into with you.
Legitimate interests: We may use your personal information where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and/or enable us to give you the best user experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal information for our legitimate interests. We do not use your personal information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Legal obligation: We may use your personal information where it is necessary for compliance with a legal obligation that we are subject to.
Consent: We rely on consent only where we have obtained your active agreement to use your personal information for a specified purpose, in relation to receiving marketing emails from us.
Vital Interests: We may process your personal information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
We use your personal information in a number of different ways and for different reasons – the tables below set out what we do and why:
Identity and Contact Information
Purpose 1
What do we do: Identify you when you visit our Website or you contact us for any reason.
Why do we do it: So we can identify you.
Our Legal Basis: Legitimate interests: necessary for us to be able to communicate with you.
Purpose 2
What do we do: Process any order of our Services that you or your dental and/or medical providers procure on your behalf, and (a) Manage payments, fees and charges (b) Collect and recover money owed to us.
Why do we do it: So we can provide you with the Services that are purchased.
Our Legal Basis: (a) Performance of a contract with you and/or relevant dental and/or medical providers; and (b) Legitimate interests: necessary to ensure the financial health of our business and to manage our financial transactions efficiently.
Purpose 3
What do we do: Send you service updates, and updates to this Privacy Policy and/or our MSA, DPA or other contractual documents as required.
Why do we do it: So we can keep you informed of any changes to our terms and conditions and data processing.
Our Legal Basis: (a) Legitimate interests: necessary for the effective provision of our services; and (b) Legal obligation.
Purpose 4
What do we do: Send you information about Overjet.
Why do we do it: So we can let you know about new products and services that we offer that you might be interested in.
Our Legal Basis: (a) Consent; and (b) Legitimate interests: necessary to promote our business.
Purpose 5
What do we do: To send you surveys and to ask for feedback.
Why do we do it: To offer you the opportunity to let us know how we are doing, or to let us know your views on another subject.
Our Legal Basis: Legitimate interests: necessary to ensure we are providing the best service and to identify any areas of potential improvement.
Financial and Transaction Information
Purpose 1
What do we do: Take payments from you and/or relevant dental and/or medical providers.
Why do we do it: To facilitate payment for the Services you or dental/medical providers purchase from us and to issue any refunds where necessary.
Our Legal Basis: (a) Performance of a contract with you and/or relevant dental and/or medical providers; and (b) Legitimate interests: necessary to ensure that the company is compensated for our Services.
Purpose 2
What do we do: Keep a record of our transactions.
Why do we do it: For accounting purposes.
Our Legal Basis: Legal obligation.
Technical and Usage Information
Purpose 1
What do we do: Identify you when you visit our Websites.
Why do we do it: To provide you with the best possible user experience.
Our Legal Basis: Legitimate interests: necessary to provide the best user experience.
Purpose 2
What do we do: Monitor visitors to our website and analyze their use of the Websites and perform tests on our IT systems.
Why do we do it: To protect our Websites and our IT systems from fraud or cyberattacks and to improve our Websites and our Services and our IT security.
Our Legal Basis: (a) Legitimate interests: necessary to ensure our systems are secure and to protect against IT security incidents; and (b) Necessary to comply with a legal obligation.
Purpose 3
What do we do: Administer and protect our business and this website (including troubleshooting, verification, data analysis, testing, system maintenance, support, reporting and hosting of data).
Why do we do it: For running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise).
Our Legal Basis: (a) Legitimate interests: necessary to run our business and to provide effective and secure administration and IT services, network security and to prevent fraud; and (b) Necessary to comply with a legal obligation.
Purpose 4
What do we do: Deliver relevant Website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
Why do we do it: To study how customers use our services, to develop them, to grow our business and to inform our marketing strategy.
Our Legal Basis: Legitimate interests: necessary to optimize our marketing efforts and deliver targeted advertisements.
Purpose 5
What do we do: Use data analytics to improve our Websites, Services, marketing, customer relationships and experiences.
Why do we do it: To define types of customers for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy.
Our Legal Basis: Legitimate interests: necessary to enhance our business strategies and improve customer satisfaction.
Services Information
Purpose 1
What do we do: We use your data to provide the Services and to continually improve and develop the Services. Using the Services will involve you interacting with our AI systems which are used to assist individuals in providing our Services to their end-users.
Why do we do it: So we can make sure our Services continue to be fit for purpose and to develop the commercial offering of the Services.
Our Legal Basis: (a) Legitimate interests: necessary to improve our Services; and (b) for the performance of our contract with the relevant Data Controller who provides our Services to their end-users.
Marketing and Communications Information
Purpose 1
What do we do: We keep a record of your communication preferences (your “opt ins” and “opt outs”).
Why do we do it: So we can make sure that you only receive the communications from us that you would like to receive and so we can update our records if you change your mind.
Our Legal Basis: (a) Legitimate interests: necessary to promote our business; and (b) legal obligation.
All of your Personal Information
Purpose 1
What do we do: We may transfer your personal data in part or whole in connection with any merger, sale, transfer of our assets, investment, acquisition, bankruptcy, or similar event or corporate transaction.
Why do we do it: So we can ensure the continued service and function and to ensure we can protect and grow our business.
Our Legal Basis: Legitimate interests to ensure we can protect and grow our business.
Purpose 2
What do we do: We perform financial accounting functions including tax reporting.
Why do we do it: So we can comply with applicable laws and accounting standards that we adhere to.
Our Legal Basis: Legal obligation.
Purpose 3
What do we do: We process the entirety of your Personal Information.
Why do we do it: So we can protect our rights and those of data subjects.
Our Legal Basis: (a) Legal obligation; and (b) Legitimate interests to act in, and protect, the interests of our business.
In limited circumstances we may process any of your Personal Information we hold to the extent necessary to defend, establish and exercise legal claims or to comply with legal or regulatory obligations.
Where we need to collect Personal Information due to a legal or regulatory obligation, or for performance of a contract, and you do not provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with our products/services). We will notify you of this at the time.
Storage of Personal Information
Overjet stores all Traffic Data and review postings indefinitely, even after “deletion“, and may archive such information elsewhere. We retain Personal Information only as long as necessary, per applicable law. We keep data while you’re a customer or have opted into communications, and for a reasonable time afterward based on legal, regulatory, and audit requirements. Retention periods consider the data’s nature, sensitivity, associated risks, and purposes of processing, along with any relevant legal, tax, or compliance standards.
Disclosure of Your Information
Overjet does not sell or rent any Personal Information to third parties. Overjet may disclose Personal Information that it collects or you provide as described in this Privacy Policy.
We may share your personal information with third parties who provide services to us, for example, our IT, communications, CRM, email and marketing automation and hosting providers. We require all third parties to respect the security of your Personal Information and to treat it in accordance with the law. We do not allow our third-party service providers to use your Personal Information for their own purposes and only permit them to process your Personal Information for specified purposes and in accordance with our instructions.
The categories of data recipients we may disclose your Personal Information to are as follows:
Other entities within Overjet, affiliates and partners. We may share your Personal Information with other members of the Overjet Group, and our subsidiaries, affiliates, resellers, referral partners, and technology partners.
Service Providers and Processors. We engage third party service providers, from time to time, including:
IT & website service providers;
Professional advisors such as tax or legal advisors, auditors (for example, as necessary for the establishment, exercise or defense of legal claims or to protect the rights or safety of the website or us;
Consultants, contractors, insurance companies/claim managers and accountants; and
Agents, suppliers or sub-contractors and other associated organizations where they are engaged by us to help deliver a service that we have instructed them on including to generally support our business.
To providers of the dental, health or other medical related services you receive via whom the Services are contracted with and we process your Personal Information in respect of the Services on behalf of.
Third parties in case of a legal requirement. We also disclose your Personal Information if disclosure is required by law or in the context of an investigation, regulatory requirement, judicial proceeding, court order or legal process (including to law enforcement or competent authorities like the police/tax authorities, such as HMRC in the UK).
Third parties in case of a corporate transaction. Information about our customers and users, including Personal Information, may be disclosed as part of any merger, sale, transfer of our assets, investment, acquisition, bankruptcy, or similar event, including while engaging with our actual or potential investors, buyers, or other successors in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Overjet’s assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding.
Other entities within Overjet, affiliates and partners. We may share your Personal Information with other members of the Overjet Group, and our subsidiaries, affiliates, resellers, referral partners, and technology partners.
Others: To other parties to fulfill the purpose for which you provide your Personal Information, for any other purpose disclosed by Overjet when you provide the information, or otherwise with your consent.
We may provide anonymous information to analytics and search engine providers to help us improve and optimise our Services. We will only share this information in a form that does not directly identify you.
You may choose not to provide Overjet with any Personal Information. In such an event, you can still access and use some of the services on the Website; however you may not be able to access and use certain key features of the Subscription Services and/or the Website that require your Personal Information.
Overjet may also disclose your Personal Information:
To comply with any court order, law or legal process, including to respond to any government or regulatory request.
To enforce or apply our terms of use and other agreements.
If Overjet believes disclosure is necessary or appropriate to protect the rights, property, or safety of Overjet, Overjet’s customers or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
To respond to claims that any posting or other content violates the rights of third-parties.
Aggregate Data. Our definition of Personal Information does not include “aggregate” data. Aggregate data is information we collect about a group or category of services or users from which individual user identities have been removed. In other words, no personal information is included in aggregate data. Aggregate data helps us understand trends in our users’ needs so that we can better consider new features or otherwise tailor our services. This Privacy Policy in no way restricts or limits our collection and use of aggregate data, and we may share aggregate data about our users with third parties for various purposes, including to help us better understand our customer needs and improve our services and for advertising and marketing purposes.
Notice to Payers and Providers. Payers, Providers, their employees, and their vendors, their agents should be particularly aware of their obligations of patient confidentiality, including without limitation, their obligations under the Health Insurance Portability and Accountability Act (“HIPAA“), both in communicating with Overjet and in responding to a review of their services posted on the Website. Overjet does not have, and will not accept, any obligations of confidentiality with respect to any communications other than those expressly stated in this Privacy Policy or in the terms of use for the Website.
Public Information. Any information that you may reveal in a review posting or other online discussion or forum is intentionally open to the public and is not in any way private. You should not disclose any Personal Information or personally identifiable information in any public forum.
Retention of Personal Information
Overjet processes Personal Information for a reasonable period of time to fulfill the purposes mentioned above. Personal Information is then archived for time periods as required or necessitated by law or legal considerations. Overjet reserves the right to delete a customer’s data, including Personal Information provided by that customer, from its system after 30 days from the date of termination of its agreement with the applicable customer. Overjet may also delete Personal Information in response to an individual’s request, as set forth in the Your Rights and Choices section below.
Overjet reserves the right to retain usage data relating to our products and services, as well as data that has been anonymized and/or aggregated, to the extent permitted by applicable laws. With respect to any Personal Information collected by us for marketing or for our own internal purposes, we will retain that data for a reasonable time in order to fulfill those purposes.
Your Rights and Choices About How Overjet Uses and Discloses Your Information
Overjet strives to provide you with choices regarding the Personal Information you provide to us. Overjet has created mechanisms to provide you with the following control over your information:
Changing and Correcting Your Personal Information. If your Personal Information changes in any way, we invite you to correct or update your information as soon as possible. You can make updates to your profile information by logging into your account on Overjet at any time. You can also request changes or access to your information by emailing [email protected].
Opting Out of Marketing Communications. Overjet may send you communications or data regarding our Services, including but not limited to (i) notices about your use of our Web sites and services, including any notices concerning violations of use, (ii) updates, and (iii) promotional information and materials regarding our products and services. You may opt out of receiving promotional emails from Overjet by following the opt-out instructions provided in those emails. You may also opt out of receiving promotional emails and other promotional communications from us at any time by contacting us as described in the Contact Information section below, with your specific request. Opt-out requests will not apply to transactional service messages, such as security alerts and notices about your current account and services.
Opting Out of Other Uses of Your Personal Information. If you wish to opt out from any of the other uses of Personal Information that are specified in this Privacy Policy, except in the case of legal proceedings or where your data is required for tax and transactional purposes, please contact us as described in the Contact Information section below. Please note that your subsequent disclosure of Personal Information to us may override prior opt-out requests. Company does not discriminate against those who opt out. However, opting out may prevent us from conveniently and efficiently providing further, product support services and information to you.
Deleting Your Personal Information. Upon your request, Overjet will use commercially reasonable efforts to delete your account and the Personal Information in your profile. However, it may be impossible to remove your account without some residual information being retained by Overjet. If you wish to close your account or have your Personal Information deleted, please contact us as set forth in the Contact Information section below.
Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website. If you disable or refuse cookies, please note that some parts of the Website may then be inaccessible or not function properly. For further information, please see our Cookie Notice here.
Overjet does not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI“) on the NAI’s website.
Your California privacy rights. This section applies to California residents only.
Shine the Light law. Pursuant to Section 1798.83 of the California Civil Code, residents of California have the right to request from a business, with whom the California resident has an established business relationship, certain information with respect to the types of Personal Information the business shares with third parties for direct marketing purposes by such third party and the identities of the third parties with whom the business has shared such information during the immediately preceding calendar year. Overjet does not presently share any information with third parties for direct marketing purposes. However, to submit such a request, you can contact us as set forth in the Contact Information section below.
California Consumer Privacy Act (CCPA). Beginning January 1, 2020, pursuant to the CCPA (Section 1798.100 et seq. of the California Civil Code), residents of California have the following rights:
Right of access to your personal information, up to twice a year at no charge, including:
The categories of personal information Overjet collects about the consumer,
The categories of sources of the consumer’s personal information,
The business or commercial purpose for collecting or selling the consumer’s personal information,
The categories of any third parties with whom the business shares the consumer’s personal information, and
The specific pieces of personal information collected about the consumer.
Right to request deletion of data, subject to certain exceptions, such as where the information is needed to provide services to the consumer, or for security or legal reasons.
Right to not be discriminated against for exercising your rights under the CCPA, such as denial of services or higher pricing.
Right to opt out of having your personal information sold.
You can exercise your rights under the CCPA by contacting us using the information found in the Contact Information section below.
International Users and Transfers
Overjet may transfer your personal information to countries other than your country of residence. In particular, we may transfer your personal information to the United States and other countries where our affiliates, business partners and services providers are located. These countries may have different data protection laws to the country where you reside.
Your Canadian privacy rights. This section applies to Canada residents only.
Your Personal Information may be transferred outside of Canada for processing and storage. Company and its service providers may store Personal Information on servers located in other jurisdictions, including the United States. Please note that privacy laws in such jurisdictions differ from Canadian privacy laws (e.g., PIPEDA) and that in some jurisdictions your Personal Information may be accessed by law enforcement authorities or the courts in such jurisdictions. If you wish to:
obtain information or have any questions about our Privacy Policy and practices relating to handling of your Personal Information outside of Canada,
find out if we have your Personal Information and how we have used it,
access your Personal Information that is in our possession,
request that your Personal Information be corrected or deleted from our database, or
obtain a list of any other organizations to which your Personal Information has been disclosed,
you may contact our privacy officer at the Contact Information set forth below. We will respond to your request relating to your Personal Information within 30 days. We may be unable to remove information to the extent that it is permitted or required to be retained by applicable law or document retention and data backup policies, or if removal is not practicable due to technological reasons. Please note that removal of your Personal Information may prevent or hinder us from providing further services and information to you.
Company may require you to provide sufficient information to permit us to provide an account of the existence, use, and disclosure of Personal Information. The information provided shall only be used for this purpose.
EEA, UK, and Switzerland If you are located in the European Economic Area, the United Kingdom or Switzerland ("Europe"), we may transfer your Personal Information to recipients in countries outside of Europe, including to the United States. We apply appropriate protections when we transfer your Personal Information to such countries, including:
Transferring Personal Information to countries which have been found to provide adequate protection by the competent authorities, as appropriate (e.g., see the list of countries subject to an adequacy decision by the European Commission here);
Using contractual protections (i.e., Standard Contractual Clauses) for the transfer of Personal Information; or
Obtaining your express consent.
Overjet also offers our customers the ability to enter into a Data Processing Agreement (DPA) that contains Standard Contractual Clauses, for transfers between us and our customers. We also make use of supplementary measures to ensure your information is adequately protected.
Overjet commits to resolve complaints about our collection or use of Personal Information. EU, UK, and Swiss individuals with inquiries or complaints regarding our Privacy Policy should first contact Overjet at [email protected].
Your UK and EU privacy rights. This section applies to UK and EU residents only.
You have a number of rights under data protection laws in relation to your personal information.
You have the right to:
Request access to your Personal Information (commonly known as a "subject access request"). This enables you to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.
Request correction of the Personal Information that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your Personal Information in certain circumstances. This enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Information where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Information to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your Personal Information where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.
You also have the absolute right to object any time to the processing of your Personal Information for direct marketing purposes.
Request the transfer of your Personal Information to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your Personal Information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
Request restriction of processing of your Personal Information. This enables you to ask us to suspend the processing of your Personal Information in one of the following scenarios:
If you want us to establish the data's accuracy;
Where our use of the data is unlawful but you do not want us to erase it;
Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
You also have the right to make a complaint at any time to the relevant data protection regulator. We would, however, appreciate the chance to deal with your concerns before you approach any regulator, so in the first instance please Contact us.
If you wish to exercise any of the rights set out above, please contact us at [email protected].
Data Security
Overjet has implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Any medical or health care information will be encrypted in transit and at rest. Payment card information, such as account numbers, is processed via a third-party vendor that specializes in payment processing and has committed to PCI DSS compliance. All Overjet employees are contractually obligated to maintain the confidentiality of Personal Information accessible through their employment.
Overjet follows accepted industry standards to protect the Personal Information submitted, both during transmission and once Overjet receives the Personal Information. However, you should understand that there is no such thing as complete security, and Overjet does not guarantee that there will be no unintended disclosures of your Personal Information. If Overjet becomes aware that your Personal Information has been disclosed in a manner not in accordance with this Privacy Policy, Overjet will use reasonable efforts to notify you of the nature and extent of the disclosure (to the extent Overjet knows that information) as soon as reasonably possible.
The safety and security of your information also depends on you. Where Overjet has given you (or where you have chosen) a password for access to certain parts of the Website, you are responsible for keeping this password confidential. Overjet asks you not to share your password with anyone. You must promptly notify Overjet if your contact data is lost, stolen, or used without your permission. In such an event, we will remove that contact data from your account and update our records accordingly.
Overjet further urges you to be careful about giving out information in public areas of the Website like message boards. The information you share in public areas may be viewed by any user of the Website.
Unfortunately, the transmission of information via the internet is not completely secure. Although Overjet uses commercially reasonable efforts to protect your Personal Information, Overjet cannot guarantee the security of your Personal Information transmitted to the Website. Any transmission of Personal Information is at your own risk. Overjet is not responsible for circumvention of any privacy settings or security measures contained on the Website.
Storage of Personal Information
We store Personal Information that we have collected (through the means described above) on our premises and in our information system at our facilities, in third party data centers that provide our hosting services, in the systems of third party service providers, and in cloud storage solutions. Overjet is located in the United States. If Overjet transfers Personal Information from one country to another, we will ensure that the information is transferred in accordance with this Agreement and the Privacy Policy, and as permitted by applicable data protection laws.
Overjet stores all information in state of the art physical storage facilities and cloud storage. In doing so, Overjet uses appropriate physical, organizational and technological measures to protect the Personal Information you provide to us against loss or theft, and unauthorized access, disclosure, copying, use, or modification. This includes limiting access on a “need-to-know” basis. Where third parties (such as AWS) are used to host our products, we use third parties who meet required privacy and security standards.
However, no electronic data transmission can be guaranteed to be secure from access by unintended recipients and Overjet will not be responsible for any breach of security unless this breach is due to its negligence. Although we are committed to employing reasonable technology in order to protect the security of our website, even with the best technology, no website is 100% secure. In transacting business with us through our website, you assume the risk inherent in transacting business online.
To offer our website, products and services to you, Overjet relies on plugins and services from third parties such as internet service providers, email service providers and plugins, calendar plugins, Customer Relationship Management (CRM) systems, credit card processors, and third party data storage. To the extent these providers have access to your Personal Information, we will require that they are legally or contractually committed to comply with applicable privacy laws, In the case of credit card processors, we require that they be PCI DSS-compliant. However, we cannot guarantee with certainty that the computer systems and storage systems whereon these services are offered will not be accessed by unauthorized parties. This is a risk inherent in providing any information or, or conducting any business, online. In transacting business with us through our website, you assume the risk inherent in transacting business online.
Links to Other Websites
The Website may contain links to third party websites to which Overjet has no affiliation. Overjet does not share your Personal Information with those websites and is not responsible for their privacy policies or practices. Please be aware that you may be on a different site and that this Privacy Policy only contains the policies for the Website. A link to a third party website does not constitute or imply endorsement by Overjet. Additionally, Overjet cannot guarantee the quality or accuracy of any information contained on any third party website. If you decide to visit any third party website, you should read that website’s privacy policy.
Contact Information
If you have any comments or inquiries about this Privacy Policy, if you would like to update information we have about you or to exercise your rights, you may contact us by sending an email to [email protected] or by sending regular mail to the following address:
Overjet, Inc. 2093 Philadelphia Pike #9194Claymont, DE 19703United StatesAttn: Legal
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority in the country in which you live via their website.
Last Updated November 6, 2024. For earlier versions, please send a request to [email protected] (with “Previous Privacy Policy” in the subject line).