Privacy Policy


Last Updated: February 26, 2026

Smiles by Candy and Bleach Bright of California (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information collected through our website (“Website”) and related online services.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in compliance with California law, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), as enforced in 2026.

1. Scope

This Policy applies to personal information collected:

  • Through our public website

  • Through appointment request forms

  • Through contact or consultation forms

  • Through newsletter or promotional sign-ups

  • Through cookies and similar tracking technologies

If clinical treatment information qualifies as Protected Health Information (PHI), that data may also be governed by HIPAA and a separate Notice of Privacy Practices.

2. Categories of Personal Information Collected

We may collect the following categories of personal information:

A. Identifiers

  • Name

  • Email address

  • Phone number

  • Mailing address (if voluntarily provided)

  • IP address

  • Device identifiers

B. Internet or Electronic Activity

  • Pages visited

  • Browser type

  • Referring URLs

  • Interaction data

  • Cookie identifiers

C. Commercial Information

  • Appointment requests

  • Service interests

  • Consultation details

D. Health-Related Information

If voluntarily submitted online (e.g., whitening concerns, dental sensitivities, treatment history notes).

E. Sensitive Personal Information (if applicable)

  • Health information

  • Precise geolocation

  • Account login credentials

Sensitive Personal Information is used only as permitted under CPRA and for legitimate business purposes.

3. How We Collect Information

We collect personal information:

  • Directly from you when you submit forms

  • Automatically through cookies and analytics tools

  • From service providers that support website functionality

4. How We Use Personal Information

We use personal information for business purposes including:

  • Scheduling and confirming appointments

  • Responding to inquiries

  • Providing services

  • Improving website performance

  • Sending marketing communications (where permitted by law)

  • Maintaining security and preventing fraud

  • Complying with legal obligations

We do not use personal information for materially different purposes without notice.

5. Sale or Sharing of Personal Information

We do not sell personal information in exchange for monetary compensation.

If we use analytics or advertising tools that qualify as “sharing” under CPRA (cross-context behavioral advertising), California residents have the right to opt out of such sharing.

We honor legally recognized opt-out preference signals, including Global Privacy Control (GPC), where required.

6. Disclosure to Service Providers

We may disclose personal information to contracted service providers for:

  • Website hosting

  • Analytics services

  • Appointment scheduling systems

  • Email communication platforms

  • IT and security services

Service providers are contractually restricted from using personal information beyond performing services on our behalf.

7. Data Retention

We retain personal information only as long as reasonably necessary to:

  • Provide services

  • Fulfill business purposes described in this Policy

  • Comply with legal or regulatory requirements

  • Resolve disputes

Retention periods vary depending on the type of information and applicable law.

8. California Privacy Rights

If you are a California resident, you have the following rights:

Right to Know

Request disclosure of:

  • Categories of personal information collected

  • Sources of collection

  • Business purposes for use

  • Categories of third parties receiving information

Right to Access

Request a copy of specific personal information collected.

Right to Delete

Request deletion of personal information, subject to legal exceptions.

Right to Correct

Request correction of inaccurate personal information.

Right to Limit Use of Sensitive Personal Information

Request limits on certain uses of sensitive data where applicable.

Right to Opt-Out

Opt out of the sale or sharing of personal information.

Right to Non-Discrimination

We will not discriminate against you for exercising privacy rights.

9. Exercising Your Rights

To submit a request:
Mailing Address: 5000 Bechelli Ln, Suite 102, Redding, Ca 96003

We may verify your identity before processing certain requests.

Authorized agents may submit requests on your behalf with appropriate documentation.

10. Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information. However, no system is completely secure, and transmission of information is at your own risk.

11. Children’s Privacy

Our Website is not directed to individuals under 16 years of age. We do not knowingly collect personal information from minors without legally required consent.

12. Updates to This Policy

We may update this Privacy Policy periodically. Updates will be reflected by the revised “Last Updated” date.

13. Contact Information

Smiles by Candy and Bleach Bright of California
5000 Bechelli Ln, Suite 102, Redding, Ca 96003

Legal Sources

  1. California Consumer Privacy Act (Cal. Civ. Code §1798.100 et seq.), as amended by the California Privacy Rights Act (CPRA).

  2. California Privacy Protection Agency (CPPA) Regulations, 11 CCR §7000 et seq.

  3. California Civil Code §1798.140 (Definitions including “Sharing” and “Sensitive Personal Information”).

  4. Global Privacy Control technical standards and CPRA opt-out signal requirements.

  5. Health Insurance Portability and Accountability Act (HIPAA), 45 CFR Parts 160 and 164 (where applicable).