Privacy notice
What we collect, why we use it, who receives it, and how to contact us about your information.
Policy version: November 2, 2026 · Offer-specific terms are preserved with each qualifying booking.1. Information we collect
Account details include your email and authentication information. Booking records include your chosen clinic, service, contact details, payment preference, appointment time, status and accepted offer terms. Clinic representatives provide practice details and verification information.
If you make a qualifying claim, we collect necessary receipt evidence and review information. Contact enquiries include the information you choose to provide and your contact/marketing consent choices. Reviews include the display name, rating and text you explicitly consent to publish.
2. How information is used
We use relevant information to administer accounts, review clinic applications, arrange requested appointments, assess eligible claims, fulfill approved rewards manually, investigate misuse and answer support requests. Marketing consent is separate from a necessary response to your enquiry.
We do not make clinical decisions or adjudicate insurance benefits. Please do not provide government ID, full insurer membership numbers, payment-card details, unrelated medical records or gift card redemption codes.
3. Sharing with clinics and service providers
We share relevant booking contact details and preferences with the clinic you choose. Receipt evidence is private to you and authorized platform reviewers and is not displayed in the directory or shared with clinics through the reward system.
Authentication, hosting, storage, email and gift card suppliers may process the information needed to provide their service. Manual gift fulfillment may require sharing your name and email with the selected supplier. A referrer does not receive another patient’s appointment, insurance, receipt or treatment details.
4. Hosting and access controls
The application database is hosted in Canada. Hosting, delivery, logs or other external processing can occur outside Canada; Canadian database hosting alone does not make every provider or process Canadian. We restrict account records by ownership and require authenticator verification for clinic operations and administrator access.
Receipts use private storage. An authorized reviewer may generate a short-lived access link to examine evidence; such links must not be shared. No system can promise zero risk. Contact us promptly about suspected unauthorized access.
5. Consent and public reviews
An enquiry requires permission to respond using the supplied details. Optional marketing updates require a separate opt-in; you may withdraw that opt-in by contacting support. Withdrawing marketing consent does not cancel a booking or otherwise valid claim.
A submitted review requires explicit publication consent. Your account email and booking identifier are not published with a review. Choose a display name you are comfortable making public.
6. Retention and deletion requests
We retain information only while needed to administer the service, resolve a claim or dispute, prevent abuse, or satisfy applicable record obligations. Ask support about deletion or correction of your information. Some financial, consent or dispute records may need to be retained despite an account-closure request; we will explain any relevant limitation.
Do not send additional sensitive evidence until support identifies what is necessary and how to provide it.
7. Cookies and local storage
Necessary authentication cookies maintain account sessions and protect sign-in flows. A referral code may be present in a link you choose to share or submit. We do not claim that third-party tools never use cookies; any optional analytics or advertising tools should be disclosed before deployment.
8. Children and guardians
A promotion’s age requirement and a clinic’s consent requirements are separate. A guardian must not misrepresent a child’s identity to obtain a reward. Contact our team before submitting information on behalf of someone who cannot provide the required authority or consent.
9. Access, correction and concerns
Contact info@goodteeth.ca for access, correction, consent withdrawal, deletion or a privacy concern. Explain the request without attaching identity documents or medical records. We may need a proportionate check of account control before disclosing or changing private records.