Privacy policy

Last updated: September 25, 2026

This Privacy Policy explains how SmilePlax ("SmilePlax", "we", "us") collects, uses, shares and protects personal information when you visit smileplax.com (the "Site"), buy from us, or contact us. It also explains the choices and rights you have, including rights under U.S. state privacy laws.

1. Who we are

SmilePlax is an online store operated from Paraíso, Cartago 30201, Costa Rica, that sells to customers in the United States. You can reach us at support@smileplax.com.

2. Personal information we collect

We only collect what we need to run the store. In the last 12 months we have collected the following categories of personal information:

  • Identifiers and contact details — name, email address, shipping and billing address, and phone number (if you enter one at checkout). Source: you.
  • Order and commercial information — products you bought, order amounts, order history, returns and refund requests. Source: you and our store platform.
  • Payment information — payments are handled by our payment processors (for example, Shopify's payment services and PayPal). We do not see or store your full card number.
  • Communications — the name, email address and message you send us through our contact form or by email.
  • Device and usage information — IP address, browser and device type, approximate location based on your IP address, pages viewed, referring website, and how you interact with the Site. Source: automatically, through cookies and similar technologies (see our Cookie Policy).
  • Marketing preferences — whether you agreed to receive our marketing emails.

We do not ask for, and do not want to receive, sensitive information such as health or medical information, Social Security numbers or precise geolocation. Please do not send us details about your medical or dental conditions.

3. How we use personal information

  • To process and deliver your orders, send order and shipping updates, and handle returns and refunds.
  • To answer your questions and provide customer support.
  • To operate, secure and improve the Site, including preventing fraud and abuse.
  • To understand how the Site is used (analytics provided by our store platform).
  • To send marketing emails, only if you chose to receive them. You can unsubscribe at any time with the link in every email.
  • To comply with legal, tax and accounting obligations and to enforce our Terms of Service.

4. Who we share personal information with

We share personal information only with service providers that help us run the store, and only for the purposes above:

  • Shopify — our e-commerce platform, which hosts the Site, processes checkout and stores order data. Shopify's own privacy practices are described at shopify.com/legal/privacy/consumers. If you choose to use Shop Pay or the Shop app, Shopify also handles that information under its own terms.
  • Payment processors (for example, Shopify's payment services and PayPal) — to process payments and prevent fraud.
  • Fulfillment partners and suppliers — to pack and ship your order, we share your name, shipping address, phone number (if provided) and the items ordered. Some of these partners are located outside the United States.
  • Shipping carriers — to deliver your package and provide tracking.
  • Email service providers — to send order emails and, if you opted in, marketing emails.
  • Professional advisers and authorities — when required by law, to respond to legal requests, to protect our rights, or in connection with a sale or reorganization of our business.

5. "Sale", "sharing" and targeted advertising

We do not sell personal information for money. At the date of this policy, we do not use third-party advertising pixels (such as Meta, TikTok or Google Ads) on the Site, and we do not use personal information for cross-context behavioral (targeted) advertising.

If we start working with advertising partners, some U.S. state laws may treat that as a "sale" or "sharing" of personal information. Before that happens we will update this policy, and you will be able to opt out at any time on our Your Privacy Choices page.

Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information and of targeted advertising for that browser.

Do Not Track: because there is no common industry standard for "Do Not Track" browser signals, the Site does not respond to them. We do honor GPC as described above.

We do not use personal information for profiling that produces legal or similarly significant effects.

6. Cookies and similar technologies

We use cookies and browser storage that are necessary to run the store (for example, to keep items in your cart and remember your country), and analytics provided by Shopify to understand how the Site is used. Our Cookie Policy explains what we use and how you can control it.

7. Your privacy rights

Depending on the state where you live (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island), you may have the right to:

  • know and access the personal information we hold about you, and get a portable copy;
  • correct inaccurate personal information;
  • delete personal information;
  • opt out of the sale or sharing of personal information and of targeted advertising;
  • not be discriminated against for exercising these rights.

How to make a request: email support@smileplax.com with the subject "Privacy Request" and tell us which right you want to use. To protect you, we will verify your request by matching it to information we already have (for example, your email address and a recent order number). You may use an authorized agent; we may ask the agent for proof of your permission and ask you to confirm your identity. We will respond within 45 days, or tell you if we need more time as the law allows.

Appeals: if we decline your request, you can appeal by replying to our decision email with the subject "Privacy Appeal". We will answer within the time required by your state's law. If you are not satisfied with the result, you may contact your state Attorney General.

Nevada residents: we do not sell covered information as defined by Nevada law. You may still send an opt-out request to the email above.

California "Shine the Light": we do not share personal information with third parties for their own direct marketing purposes.

8. How long we keep personal information

  • Order, payment and tax records: as long as needed to meet tax and accounting obligations, generally up to 7 years.
  • Customer support messages: up to 3 years after our last contact with you.
  • Marketing email preferences: until you unsubscribe, plus a short record of the unsubscribe so we don't email you again.
  • Analytics data: according to the retention periods of our store platform.

When we no longer need personal information, we delete it or make it anonymous.

9. Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not sell or share personal information of consumers we know are under 16. If you believe a child has given us personal information, contact us and we will delete it.

10. Security

We use reasonable administrative, technical and physical safeguards, and our checkout is hosted by Shopify, which is certified PCI DSS Level 1. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. International transfers

We operate from Costa Rica, and our service providers may process information in the United States, Canada, Costa Rica and other countries (for example, where our suppliers are located). We take reasonable steps so that your information stays protected as described in this policy.

12. Changes to this policy

We may update this policy. We will change the "Last updated" date at the top, and if the changes are significant we will give more prominent notice (for example, on the Site or by email).

13. Contact us

SmilePlax
Email: support@smileplax.com
Address: Paraíso, Cartago 30201, Costa Rica