Privacy Policy for Zora

Effective Date: November 10, 2025

Zora (“we,” “us,” or “our”) is a marketing service provider for dental clients, and we are committed to protecting your privacy. This Privacy Policy explains what personal information we collect through our website forms, how we use that information (particularly in relation to SMS/text messaging services), how we secure it, and your rights regarding your data. This policy is designed to comply with applicable regulations and A2P 10DLC guidelines for messaging campaigns.

Information We Collect

We only collect personal information that you voluntarily provide to us, typically when you fill out forms on our website to opt in for communications or services. This may include:

• Name – Your first and last name.

• Email Address – Your email, used for communication and account-related purposes.

• Phone Number – Your mobile telephone number, collected when you opt in to receive text messages.

We do not collect any sensitive personal data beyond what you provide in these forms. All information is collected with your consent at the time of submission.

How We Use Your Information

We use the personal information you provide for the purposes described at the time of collection. Primarily, this means we will use your contact information to send you the communications that you have explicitly opted in to receive. These communications may include:

• Service-Related Updates: Internal communications such as appointment reminders, confirmations, or other service/account updates related to our dental marketing services (e.g. notifications about schedule changes or new features).

• Promotional Messages: Marketing or promotional messages about new services, special offers, or other updates that may be of interest to you. We may occasionally send promotions or newsletters, but only if you have given us permission to do so by opting in.

All messages we send will only be sent with your prior consent. These messages may be delivered by our team or through automated systems, but in all cases they will be related to our services and your relationship with Zora. We will not bombard you with unwanted messages, and message frequency may vary based on your interactions or the specific campaign (for example, appointment reminders might be sent as needed, whereas promotional updates might be periodic). Standard message and data rates may apply to any SMS communications, as imposed by your mobile carrier.

Consent and Opt-In

We obtain your consent before sending any marketing or service text messages. Consent is acquired through our website forms, where you must actively agree (for example, by checking an opt-in box or similar mechanism) to receive communications from us. By submitting your phone number and opting in, you are providing express written consent for Zora to send you text messages and notifications. We document and honor this consent as part of our compliance process. We will not send you SMS messages unless you have explicitly opted in to receive them.

Example of Opt-In Consent: When you fill out a form on our site, you might see a statement such as: “By providing your phone number and submitting this form, you consent to receive SMS/text messages from Zora. Message and data rates may apply. Reply STOP to unsubscribe.” By agreeing to such a statement (e.g., checking the box and submitting the form), you acknowledge and accept that you will receive messages from us under the terms described.

Opt-Out and Unsubscribing

You have the right to opt out of receiving communications from us at any time. If you no longer wish to receive our text messages, simply reply to any of our SMS messages with an opt-out keyword such as “STOP.” Upon receiving a STOP (or “QUIT,” “UNSUBSCRIBE,” “CANCEL,” or any other standard opt-out request), we will immediately remove your number from our texting list and you will no longer receive SMS communications. We honor these opt-out requests automatically as required; once you opt out, you will not receive further texts unless you re-subscribe and provide consent again.

For email communications, you may unsubscribe at any time by clicking the “Unsubscribe” link provided in the footer of our emails or by contacting us directly. Opting out of SMS messages or emails will not affect other services we provide to you; it only means you will stop receiving those specific communications.

Please note that if you opt out of marketing or promotional messages, we may still send you essential service or transactional communications (for example, an appointment reminder or billing notification) if they are necessary for our services, but these too will respect applicable consent requirements and will cease if you revoke consent or end your relationship with Zora.

Data Storage and Security

We take the security of your personal information very seriously. Your data (such as the details collected above) is stored securely in our internal Customer Relationship Management system, which is the platform we use to manage client communications and information. Our CRM (we utilize GoHighLevel for this purpose) is a secure, cloud-based system that is designed to be HIPAA compliant for handling any sensitive health-related information and GDPR compliant for protecting personal data in line with European privacy regulations.

We implement industry-standard security measures to safeguard your data. These measures include encryption of data in transit and at rest, access controls to ensure only authorized personnel can view your information, and regular monitoring of our systems to prevent unauthorized access. We also have administrative safeguards and protocols in place to maintain the confidentiality and integrity of your information. In the event of any data breach or security issue, we will follow all applicable legal requirements to inform affected users and mitigate any harm, in accordance with HIPAA, GDPR, and other relevant laws.

No Third-Party Sharing of Personal Information

Zora does not sell, rent, or share your personal information with third parties for their own marketing or promotional purposes. We respect your privacy and the trust you place in us, and as such, any information you provide will be used solely for the purposes of delivering our services to you and communicating with you as described in this policy.

We may share your data with trusted service providers or partners only to the extent necessary to operate our business or provide our services to you – for example, using a secure SMS gateway to send text messages or storing data on our secure CRM cloud provider. In all such cases, those service providers are bound by confidentiality obligations and are not permitted to use your information for any purpose other than providing services to Zora. Moreover, any such sharing is done in compliance with applicable privacy laws and regulations.

Aside from service providers acting on our behalf, the only other circumstances in which we would disclose personal information are if required by law (for instance, responding to a lawful subpoena or regulation) or with your explicit consent. In short, your personal information remains private and is not shared with any third-party organizations for outside marketing or unrelated purposes.

(In compliance with A2P 10DLC requirements, we reiterate: consumer information collected by Zora is not shared with third parties for marketing or promotional purposes.)

Your Rights Regarding Your Data

You have important rights concerning your personal data, and we are committed to honoring them. In particular, you have the right to access, correct, and delete the personal information we have about you. This means:

• Access – You can request a copy of the personal data we hold about you. We will provide you with a summary of the information in our records, subject to verifying your identity.

• Correction – If any of your personal details are inaccurate or outdated, you have the right to request a correction. We encourage you to keep your information up to date and will promptly rectify any errors once you inform us.

• Deletion – You can request that we delete your personal information from our records (also known as the “right to be forgotten,” applicable under GDPR and similar laws). If you withdraw your consent or simply no longer want us to have your information, you may ask us to remove it. Provided we do not have a legal obligation or other legitimate interest to retain it (such as completing a service transaction or for legal compliance), we will delete your data upon request.

To exercise any of these rights, or if you have questions about your data, please contact us at [email protected]. You may also use this contact to request that we stop processing your data or to object to certain uses, and we will address your concerns in line with applicable laws. We will respond to any rights requests as soon as possible, and in any event within any timeframe required by law. There is no charge for making such requests, though in rare cases we may charge a legally permissible fee if a request is manifestly unfounded or excessive.

Please note that deleting or restricting your data may affect our ability to provide you with some services (for example, if you ask us to delete your phone number, we will no longer be able to send you appointment reminders via text).

Updates to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes to the policy, we will update the Effective Date at the top of this page to notify you of the change. If there are significant or material changes in how we handle your personal information or your privacy rights, we will provide a more prominent notice (such as by posting a notice on our website homepage or contacting you via email or text message, if appropriate). We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services or website after any changes to this Privacy Policy will constitute your acknowledgment of the changes and agreement to abide by the updated policy.

Contact Us

If you have any questions, concerns, or comments about this Privacy Policy or how Zora collects and uses your information, please do not hesitate to contact us. You can reach our support and privacy team by email at [email protected]. We will be happy to assist you and address any issues or inquiries you might have regarding your privacy.

By using our website or services and by providing your personal information (including opting in to receive SMS communications), you acknowledge that you have read and understood this Privacy Policy. We appreciate your trust in Zora and are dedicated to keeping that trust by safeguarding your personal data and communicating with you in a respectful, lawful manner.

Your privacy is important to us, and we thank you for choosing Zora.