01Overview
Lumina Dental Labs ("Lumina", "we", "us") is a digital dental laboratory that produces clear aligners and related orthodontic appliances for dental clinics and their patients. This policy explains what information we collect, why we collect it, who we share it with, and the choices you have.
It applies to our website, our mobile application, and the case-submission tools we provide to partner clinics. Where a clinic instructs us to manufacture a case, that clinic is the controller of the patient's clinical record and Lumina acts as its service provider; we process that data only to fulfil the case and as described here.
02Information we collect
Information you give us
Contact and account details such as your name, practice or clinic name, email address, phone number, postal address and the content of any message you send us through a form, by email, or in the app.
Clinical and case information
To manufacture an appliance we receive case material submitted by the treating clinician: intraoral scans and STL files, clinical photographs, radiographs, prescriptions, treatment notes and the patient identifier used by the clinic. This is health-related information and we treat it as such — access is restricted to the staff who need it to plan, produce and inspect the case.
Information collected automatically
When you use our website or app we record technical data such as IP address, browser or device type, operating system version, language, referring page, pages viewed and the dates and times of access. We use this to keep the service secure and to understand how it is used.
03How we use information
- To plan, manufacture, inspect and deliver the appliances a clinic orders.
- To communicate about a case — approvals, revisions, shipping and follow-up.
- To create and manage clinic accounts and app logins.
- To provide technical and clinical support when you contact us.
- To improve the quality, accuracy and reliability of our workflow and software.
- To detect, prevent and investigate fraud, abuse and security incidents.
- To meet legal, medical-device, tax and record-keeping obligations.
We do not sell personal information, and we do not use clinical case data for advertising.
04Mobile application privacy
This section describes practices specific to the Lumina Dental Labs mobile application for iOS and Android. It supplements — and does not replace — the rest of this policy.
Data the app collects
| Data type | What it includes |
|---|---|
| Account data | The name, email address and clinic your login belongs to. |
| Case content | Photographs, scans and notes you upload or capture for a case. |
| Device and diagnostics | Device model, OS version, app version, crash reports and performance logs. |
| Usage data | Which screens are opened and which actions are taken in the app. |
Device permissions
The app asks for a permission only at the moment the related feature is used, and it continues to work without the optional ones:
| Permission | Why we ask |
|---|---|
| Camera | To capture clinical photographs and to scan case QR codes. |
| Photos and files | To attach existing images or scan files to a case. |
| Notifications | To alert you when a plan needs approval or a case status changes. |
| Storage | To cache case material so it can be viewed with a poor connection. |
You can withdraw any of these permissions at any time in your device settings. The app does not collect precise location, contacts, call history, SMS or health data held by the operating system.
Push notifications
Notifications are delivered through Apple Push Notification service and Firebase Cloud Messaging. Notification content is limited to case status and never includes clinical detail. Turning notifications off in your device settings stops them entirely.
Analytics and crash reporting
We use analytics and crash-reporting tools to find defects and improve stability. These tools receive device and usage data associated with a random app instance identifier — not with device advertising identifiers. We do not use third-party advertising SDKs, we do not track you across other companies' apps or websites, and we do not sell or share app data for cross-context behavioural advertising.
Storage on your device
Credentials are held in the platform keychain or keystore. Cached case material is stored in the app's private container, encrypted at rest by the operating system, and removed when you sign out or uninstall the app.
Deleting your account and data
You can request deletion of your app account and its associated data from within the app, under Settings → Account → Delete account, or by emailing privacy@luminadentallabs.com. We action deletion requests within 30 days. Clinical records that we are required to retain as a manufacturer of a medical device are kept for the statutory period described in section 7, and are then deleted.
App store disclosures
The privacy labels shown on the App Store and the data-safety section shown on Google Play reflect this policy. If a discrepancy ever arises between a store label and this page, this page is the authoritative statement of our practices and we will correct the label.
05Legal bases for processing
Where data protection law such as the GDPR applies, we rely on the following bases: the performance of a contract with a clinic or user; our legitimate interests in operating, securing and improving the service; compliance with a legal obligation; and, for health-related data, the provision of health care and the management of health-care services, or explicit consent where that is required.
07Data retention
We keep information for as long as it is needed for the purpose it was collected. Case and manufacturing records are retained for the period required of a device manufacturer under applicable law; account and contact data is kept while the account is active and for a limited period afterwards; technical logs are kept for a short rolling window. When a retention period ends, data is deleted or irreversibly anonymised.
08Security
Data is encrypted in transit with TLS and encrypted at rest. Access is restricted by role, protected by individual accounts, and logged. Our staff are trained on the confidentiality of clinical material. No system is perfectly secure, so we also maintain an incident response process and will notify affected clinics and authorities where the law requires it.
09International transfers
We and our service providers may process information in countries other than your own. Where information is transferred out of a region with data-transfer restrictions, we rely on an adequacy decision or on standard contractual clauses together with appropriate technical safeguards.
10Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to object to or restrict certain processing, to receive a portable copy, and to withdraw consent you previously gave.
Write to privacy@luminadentallabs.com to exercise a right. If your data was submitted to us by a clinic, we will forward your request to that clinic, which holds the clinical record. You also have the right to complain to your local data protection authority.
12Children's privacy
Our website and app are intended for dental professionals and adult patients, and are not directed to children. Where a minor is treated, their case is submitted and managed by the treating clinic with the consent of a parent or guardian. We do not knowingly create app accounts for children.
13Changes to this policy
We may update this policy as our services change. The date at the top of the page always reflects the current version, and we will give notice of material changes by email or in-app before they take effect.
14Contact us
For any question about this policy or about how we handle your information, get in touch with our privacy team.