Privacy policy

The controller of your data is the website publisher, identified in the legal notice.

Account information is used to identify you, secure access and give you access to your orders, courses and certificates. Order and shipping data is used to prepare, ship and invoice your purchases, and to handle returns and complaints.

If you sign in with a third-party account, we only receive the information needed to sign you in: To verify:Third-party sign-in providers offered.

When you write to us, we use your contact details, message and any attachments to handle your request and keep a record of it. Please do not include health information or bank details.

For Academy courses, we record your enrolments, completed lessons, quiz answers and scores, and the certificates issued to you. This data is used to track your progress, validate the course and verify that a certificate is genuine.

Reviews, photos and posts you publish are visible to other visitors or members, with the display name you chose. You can ask for them to be removed at any time.

We only send you promotional emails if you have agreed, or To verify:Emails to existing customers about similar products, if chosen and permitted. Every email contains an unsubscribe link.

Non-essential cookies are only set with your consent. Details are in the cookie policy, where you can also change your choices.

Payments are processed by Stripe. Your card details are entered with Stripe and are not passed to us; we receive the payment status and, where applicable, limited information: To verify:Payment data actually received. Stripe also processes some data for fraud prevention and its own legal obligations, under its own privacy policy.

Your data is accessible only to the people at Global Toothgems who need it, to our providers within the limits of their task, and to authorities where the law requires. We do not sell your data.

Some providers may process data outside the European Economic Area. In that case, the transfer is covered by a safeguard recognised by the GDPR (such as an adequacy decision or standard contractual clauses): To verify:Actual transfers and safeguards used.

The GDPR gives you the following rights. You can exercise them free of charge; we reply within one month, which may be extended in some cases.

• Access

  Find out what data we hold about you and get a copy.

• Rectification

  Correct inaccurate or incomplete data — most of it directly from your profile.

• Erasure

  Ask us to delete your data, except what the law requires us to keep.

• Restriction

  Freeze the use of your data, for example while a dispute is being checked.

• Objection

  Object to processing based on our legitimate interest, and to marketing at any time.

• Portability

  Receive your data in a structured format — see the export in Security & privacy.

• Withdraw consent

  Withdraw any consent at any time (emails, cookies), without affecting past processing.

• Complaint

  Lodge a complaint with the data protection authority of your country: To verify:Competent supervisory authority.

We use appropriate technical and organisational measures: encrypted connections, hashed passwords, access to data limited to authorised people, protected training content. As no system is infallible, we will inform you if a data breach presenting a high risk affects you. To verify:Security measures to confirm against the final implementation

We do not make decisions with legal effects on you based solely on automated processing. To verify:Confirm there is no profiling, or describe any in place (e.g. anti-fraud)

The site is not intended for children. Minimum age to create an account or order: To verify:Minimum age. If you think a minor has given us their data, please contact us.

We may update this policy. The last-updated date is shown at the top of the page; for significant changes, we will let you know by email or on the site.

For any question about your data: contact form, “Privacy request” category, or Business info required:Privacy email.