Carmel Valley Aligners
Privacy Principles
A privacy-by-design baseline for business leads, patient-facing education, analytics, and sensitive workflows.
Data minimization
Public tools should collect the minimum data necessary for the stated purpose. Generic lead forms should not invite users to submit medical history, diagnoses, images, insurance identifiers, or other sensitive health information.
Sensitive pathways
Workflows that may involve identifiable health information should be architecturally separated from ordinary advertising pixels, session replay, and unrelated marketing analytics.
Vendor review
Before production use, every analytics, CRM, communication, hosting, and tracking vendor should be reviewed for the data it receives, the purpose of processing, contractual terms, and applicable regulatory obligations.
Local legal review
Patient referral, advertising, healthcare privacy, and professional-practice rules vary. Final production flows should receive jurisdiction-specific review before monetization or sensitive-data collection is enabled.
This is a launch baseline. Production legal terms, privacy notices, referral mechanics, and healthcare compliance language must be adapted to the actual data flows and business model before enabling those features.