Privacy Policy

Operation Smile, Inc. (“Operation Smile,” “we” or “us” or “our”), understands your concerns about privacy and how your information is used and, and we want to provide you with more information on these topics. This Privacy Policy (the “Privacy Policy”) describes the practices, policies and procedures related to the website located at www.operationsmile.org (the “Website”), including the types of personal information we collect on the Website, how we may use that information, and with whom we share it. Please note that this Privacy Policy applies only to our online information-gathering and dissemination practices via the Website, and does not apply to any of our data collection practices conducted offline.

BY VISITING THE WEBSITE, YOU CONSENT TO OUR USING ANY PERSONALLY IDENTIFIABLE INFORMATION THAT YOU PROVIDE TO US OR THAT WE COLLECT IN ACCORDANCE WITH THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS POLICY, PLEASE DO NOT VISIT OR USE THE WEBSITE. WE MAY UPDATE THIS PRIVACY POLICY FROM TIME TO TIME, SO PLEASE CHECK THIS PRIVACY POLICY PERIODICALLY FOR CHANGES.

SUMMARY

The notifications provided by this Privacy Policy include:

What personally identifiable and non-personal information we collect
How we use the information we collect
With whom the information may be shared
The kind of procedures we employ in an effort to hinder the unauthorized access, use or disclosure of information you provide to us
Information related to third-party websites
Children’s privacy rights
How we use SMS/text messaging
The laws that apply to those accessing the Website
How you can change your communication preferences
Rights related to the New Jersey Data Privacy Act
How you can contact us
How you can learn about changes to the Privacy Policy

INFORMATION WE COLLECT AND USE

Personal Information You Provide and How It Is Used

You are not required to provide any personally identifiable information in order to gain access to the public, non-password protected portion of the Website. You are free to visit the Website to learn more about us and what we do without entering any personally identifiable information. However, to obtain access to the password protected portion of the Website (iSmile) and to use certain features provided by Operation Smile (“Services”), you will be required to register as a user and create a user profile, and other features; other features also require that you provide us with some personally identifying information (such as name, address, email address, telephone number, and/or credit/debit card information) and other information that you voluntarily provide to us, as more particularly described below. Except for the forms we provide to transmit such information, please do not send sensitive, personal or confidential information to us directly through the Website, or by email to any of the contact email addresses listed on the Website. Please note that in all cases we only collect personal information directly from you when you provide it to us.

Examples of instances in which we may collect personal information – and the types – include (but are not limited to):

when registering
making a donation or purchase online
subscribing to our e-newsletter
taking an “action”
submitting a survey
applying for a job
contacting us via any of the online contact forms on the Website, or via email

Non-Personal Information We Collect by Automated Means And How We Use It:

We collect certain information by automated means when you visit the Website. Much of this information is collected through the use of third-party tracking services, which includes Google Analytics. The information collected may include usage information, such as the numbers and frequency of users to the Website, pages visited, web browsing histories, social networking activities and similar data. For example, we automatically gather the number and frequency of visitors to this site. This collective, aggregated data helps us determine how much our visitors use parts of the Website, and do internal research on our users’ demographics, interests, and behavior to better understand and serve you. When gathered, this this data is used in the aggregate, and not in a manner that is intended to identify you personally. This type of aggregate information may be shared with third parties at any time. To learn more about what data Google Analytics collects and options to opt-out visit the Analytics support page: https://support.google.com/analytics/answer/6004245?hl=en

In addition to the third-party tracking services mentioned above, we also collect this information through various other means, including “cookies,” “web beacons”, IP addresses and other means, as further explained below.

Cookies

Like most web sites and digital properties, Operation Smile uses “cookies,” to obtain certain types of non-personally identifiable information to help improve user experience across Operation Smile properties.

A cookie is a small text file containing a string of characters that is sent from a web server to your computer when you visit a website, the cookie helps us recognize you when you come back to our site or digital properties. A cookie cannot read data off of your computer hard disk, nor can it read cookie files created by other websites.

Cookies cannot contain viruses nor install spyware or malware on your computer and are generally used to provide information to the website and server that is useful to improve your experience. Cookies help make your visit more useful by allowing the website to remember information about your previous visit, like your preferred language, login information, communication preferences, and other settings. Cookies may also be used by Operation Smile and associated third-party advertisers to deliver advertising and marketing across sites and digital properties.

Operation Smile may also use cookies to aggregate information such as number of visits to our sites or digital properties, average time on site, pages viewed, and other data to improve site experience and performance.

Operation Smile and its digital properties may use pixel tags, web beacons, or small (usually invisible) blocks of code, attached to a web page, email, or other digital properties that allow us, among others, to aggregate statistics to measure and evaluate the success of digital properties and/or campaigns. The collected data is NOT personally identifiable and therefore cannot be tied back to an individual user. Operation Smile uses this aggregated data to determine and monitor usage characteristics and activities of visitors to evaluate and improve a user’s experience and for guiding market decisions.

Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable existing cookies. Please note, however, that without cookies you may not be able to take full advantage of all the features on our Website. Our cookies do not gather personally identifiable information. For more information on cookies and to opt-out visit http://www.allaboutcookies.org/ or http://optout.networkadvertising.org/?c=1#!/. You may also disable the use of cookies by setting your browser to refuse all cookies or to indicate when a cookie is being sent. Be aware, however, some websites may not function properly if you refuse to accept cookies.Re-Targeting: Cookies may also be used for “re-targeting.” Re-targeting is a cookie-based technology that uses specific code to anonymously “follow” or track previous visitors to our Website after they leave, and allows us to target advertisements to those previous visitors as they visit other websites. As such, when you visit our Website we may “activate” an anonymous browser cookie.

Log files, IP Addresses, Java Script, Analytics and other Tracking Information: Adoption of communications standards on the internet and our use of standard analytical tools such as Google Analytics result in or may lead to the automatic receipt and tracking of (i) the URL of the website from which you came and the website to which you are going when you leave the Website; (ii) the internet protocol (“IP”) address of your computer (or the proxy server you use to access the World Wide Web); (iii) your computer operating system and type of web browser you are using; (iv) email patterns; (v) your mobile device (including your UDID) and mobile operating system (if you are accessing the Website using a mobile device), (vi) your ISP or your mobile carrier’s name.

Meta Tags: Our Website uses meta tags to provide metadata about our web pages to browsers, search engines and other third parties, including Meta. Meta tags help improve the user experience by enabling better indexing and display of our content in search results. These tags may include information such as page descriptions, keywords, and instructions for search engine crawlers.

We do not use meta tags to collect personal information directly. However, some Meta tags may reveal technical details about our Website, such as software versions or content management systems, which do not contain personal data but help us optimize site performance and security.

We ensure that meta tags on our site do not contain sensitive or personally identifiable information. Any metadata collected or generated through our Website interactions is handled in accordance with our overall privacy practices described in this Privacy Policy.

Do Not Track Notice

Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate and respond to the Do Not Track signal is not yet uniform. For this reason, like many web websites, the Website does not currently respond to or alter its practices when it receives a Do Not Track signal. Please note that third parties may collect personal information about your online activities over time and across different websites when you visit our Website or other online websites and services. To find out more about “Do Not Track,” you may wish to visit http://www.allaboutdnt.com.

Use of Your Personal Information

We collect, retain and use personally identifiable information or other information you provide to us via the Website for business purposes only, including without limitation in the following ways: (a) to qualify you as a registered user with access to the password-protected portion of the Website; (b) to provide Services to registered users and to otherwise operate the Website; (c) to respond to an inquiry from you or address a request submitted by you (including contacting you directly to request additional information to process your inquiry or request; (d) to contact you and provide you with information regarding Operation Smile; (e) to notify you about your accounts or transactions with us and to otherwise contact you with information we believe is of interest to you; (f) to correspond with you about our features or services or special offers related thereto; (g) to facilitate the payment of any fees necessary to access the Services; (h) to enhance or develop the Website, and the features and services; (i) to monitor the usage of the Website and any services and features offered; (j) to provide third parties with aggregate anonymous non-personal information about our user base and usage patterns; (k) to personalize the features and services and, if relevant, to provide advertising that you and others see based on your characteristics or preferences; (l) to comply with applicable laws, regulations and rules, and requests of relevant regulatory and law enforcement and/or other governmental agencies; (m) to enforce our TOU; and/or (n) to protect the rights, property, or safety of Operation Smile, our personnel, users, and others.

We may use the email address you provide to us to send you notifications, updates, newsletters or information regarding our Website and any features or services.

Sharing of Personal Information by Operation Smile

Except as otherwise stated herein, we do not sell or rent your personally identifiable information to third parties. We may share your personally identifiable information only with our third-party service providers to provide you with the features and services on the Website, and this includes (but is not limited to) marketing firms, print, shipping and/or fulfillment vendors, technology providers and payment processors which may use, disclose, and/or aggregate the information solely to perform services on our behalf or to comply with the law. (Please note, Operation Smile may share de-identified, aggregated, or other technical information, without limitation).

External Links

This Website may contain links to other sites. Unless we expressly state otherwise, Operation Smile makes no representations whatsoever concerning the content of those sites. The fact Operation Smile has provided a link to a site is not an endorsement, authorization, sponsorship, or affiliation with respect to such site, its owners, or its providers. There are risks associated with using any information, software, or products found on the Internet; and, Operation Smile cautions you to make sure you understand these risks before retrieving, using, relying upon, or purchasing anything via the Internet. In addition, we encourage our users to be aware when they leave our site to read the privacy statements of each and every website that collects personally identifiable information. These other sites may collect or solicit personal data or send their own cookies to your computer. Please be aware Operation Smile is not responsible for the information collection, use, disclosure, or security practices (including the data security practices) of other organizations, such as Facebook, Apple, Google, Microsoft, RIM, or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer that you may interact with outside of Operation Smile digital properties.

SMS Communications

We may use SMS (text messaging) to communicate with you regarding your account, transactions, customer support, promotional offers, or other service-related updates. By providing your mobile phone number and opting in to receive text messages, you consent to receive such messages from us. Please note we may also share phone numbers provided with other third party partners, including certain “data co-ops” with whom we have a reciprocal relationship with. Message frequency may vary, You can opt out of receiving SMS messages at any time by replying “STOP” or following the instructions provided in our text messages. Please note that opting out of SMS messages may limit your ability to receive certain important account notifications or service updates. Text messaging originator opt-in data and consent will not be shared with any third parties unless required by law.

CHILDREN’S PRIVACY

Operation Smile is concerned about the protection of online privacy for all our Website users. We are particularly respectful of the privacy of our young users. Operation Smile does not knowingly gather and/or use any personally identifiable information from children under the age of 13.  You must be 13 years of age or older to access the site.  Operation Smile has no interest in collecting information from children under the age of 13. We encourage parents to monitor their children’s use of the Internet and to help us protect their privacy by instructing them never to provide personal information on this site or any other without permission. We will never attempt to extract unnecessary information from our users, regardless of age. Upon request, the parent or guardian of a child under 18 may review and request the deletion of such child’s personally identifiable information, as well as refuse to permit the further collection or use of such information.

QUESTIONS OR SUGGESTIONS

At Operation Smile we respect the opinions and feedback of our visitors and supporters. If you, or other parties have any questions, concerns, or complaints about this policy, or would like to learn more about our organization, please contact us on our Website (https://www.operationsmile.org/contact-us) or call 1-888-OPSMILE (1- 888-677-6453).

CONTROLLING YOUR PERSONAL INFORMATION

Personal information is information that can identify a person, such as name, address, telephone number, and email address.

We strive for accurate, respectful and relevant communications with our constituents. We occasionally exchange mailing addresses with select non-profit groups. We will not sell, rent or share your email address or telephone number. If you would like to correct or update your personal information, modify your mailing preferences, or if you do not wish to participate in mailing address exchange activities, please call 1-888-OPSMILE (1-888-677-6453) or email [email protected].

Please also understand marketing campaigns are scheduled in advance so while we will remove you from the mailing list in a timely manner, you may still receive materials from campaigns which were in process prior to your request to be removed for up to 90 days.

We respect your time and attention by controlling the frequency of our emails. However, you may modify your email preferences at any time. Each email sent contains an easy, automated way for you to change your expressed interests, or to cease receiving email from us altogether. If you would like to modify your preferences, simply follow the instructions at the end of any email you receive from us, contact us directly or visit your online account page http://ww2.operationsmile.org/account/.

You have the right to request us to update your personal information in the event it is incorrect or out dated. You can do this by contacting [email protected] or calling 1-888-OPSMILE (1- 888-677-6453).

IS MY INFORMATION SECURE?

We maintain – and ask that any third-party partners who may store information on our behalf to maintain – administrative, technical and physical safeguards for the Website designed to protect your personal information against theft, loss, misuse or unauthorized access, disclosure, alteration or destruction of the personal information that we collect from you. However, no website, application or transmission can guarantee security. Thus, while we have established and maintain what we believe to be reasonable procedures to protect the confidentiality, security, and integrity of personally identifying information obtained through the Website and we strive to protect your personal information, we cannot ensure or warrant the security of any information you transmit to us.

CREDIT CARD INFORMATION SECURITY

At Operation Smile, we sincerely care about the safety and security of your transaction. We use high grade encryption and the HTTPS security protocol to communicate with your browser software. This method is the industry standard security protocol, which makes it extremely difficult for anyone else to intercept the credit card information you send to us. Companies we work with to process credit card transactions also use high grade encryption and security protocols. Contributions may also be made by calling 1-888-OPSMILE (1- 888-677-6453).

Storage Personal Information.

Operation Smile sites and affiliated digital properties are based and operated in the United States. If you are located outside of the United States, you should be aware that we will collect, process, and maintain your information in the United States. By using or accessing or providing any information to Operation Smile owned properties (see information collected), you are consenting to the transfer of your information to the United States and accepting that the processing and maintenance of this information which will be done in accordance with this Privacy Policy; further, you are specifically acknowledging we may not offer the same level of privacy protection as your home country would provide.

SPECIAL NOTICE AND RIGHTS FOR NEW JERSEY RESIDENTS

This notice describes how we collect, use, and share your personal data in our capacity as a “Controller” under New Jersey Data Privacy Act (NJDPA) and the rights that you have with respect to your personal data, including sensitive personal data. For purposes of this section, “personal data” and “sensitive data” have the meaning given in the NJDPA and do not include information excluded from the NJDPA’s scope. The personal data we collect about you will depend upon how you interact with our Website and the information you voluntarily provide us. Accordingly, we may not collect all of the below information about you. To the extent that we collect personal data subject to the NJDPA, that information, our practices, and your rights are described below.

What Personal Data Do We Collect, Process, And Share?

The data we collect is as described above, including the “Information We Collect” and “How We Use Information” sections of Privacy Policy.

Personal Data We Collect

Personal data means any information that is linked or reasonably linkable to an identified or identifiable individual. Personal data does not include de-identified data or publicly available information. We collect the personal data as further described in this Privacy Policy.

Purpose for Processing Personal Data

To fulfill or meet the reason for which the information was provided to us, and as further specified in the “How We may Share Your Information” section above. This may include email alerts, and other notices concerning our services or events or news that may be of interest to you.

Third Parties with Which We Share Personal Data

Service providers such as payment processors and other third-party vendors, as further elaborated above.

Profiling Information We Collect

Profiling Information means any form of automated processing performed on personal data to evaluate, analyze, or predict personal aspects related to an identified or identifiable individual’s economic situation, health, personal preferences, interests, reliability, behavior, location, or movements. We do not profile as defined by NJDPA.

Sensitive Data We Collect

Sensitive data means personal data that includes data revealing (A) racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life, sexual orientation or citizenship or immigration status, (B) genetic or biometric data for the purpose of uniquely identifying an individual, or (C) personal data from a known child. We do not collect sensitive data – please do not send us sensitive data.

WHAT ARE MY RIGHTS?

Right to Access Information/Correct Inaccurate Personal Data

You have the right to request access to personal data collected about you and information regarding the purposes for which we collect it and the third parties and service providers with which we share it. Additionally, you have the right to correct inaccurate or incomplete Personal Data. You may submit such a request as described below.

Right to Obtain a Copy of Personal Data

You have the right to request a copy of the personal data you previously provided to us as controller in a portable format no more than two times per calendar year. Our collection, use, disclosure, and sale of personal data is described in this Privacy Policy.

Right to Deletion of Personal Data

You have the right to request in certain circumstances that we delete any personal data that we have collected directly from you or from a third party. You may submit such a request as described below. We may have a reason under the law why we do not have to comply with your request or why we may comply in a more limited way than you anticipated. If we do, we will explain that to you in our response.

Right to Opt Out

You have the right to opt out of processing personal data for the purposes of and as defined by the NJDPA: (A) Targeted Advertising based on your Personal Data obtained from your activities over time and across websites or applications; or (B) The Sale of Personal Data to third parties. We do not use targeted advertising, nor do we sell your Personal Data, as defined by the NJDPA.

Right to Appeal

If we decline to take action on any request that you submit in connection with the rights described in the above sections, you may ask that we reconsider our response by sending an email to [email protected]. You must ask us to reconsider our decision within 45 days after we send you our decision. You may contact the Attorney General if you have concerns about the appeal.

Additional Rights:

The right to designate an authorized agent to exercise your opt-out rights on your behalf.
The right to receive notice of material changes to this privacy policy provision.

HOW DO I EXERCISE MY RIGHTS?

You may submit a request to exercise your rights above by emailing us at [email protected]. When you email, please help us locate your data by including information you provided to us. We will respond to your request to exercise your rights within 45 days, and may extend this deadline for an additional 45 days if reasonably necessary, informing you of the reason for any delay. If we deny your request, you have the right to appeal as noted above.

AUTHENTICATION PROCESS

To protect consumers’ personal data and to comply with the NJDPA, we will use an authentication process to confirm your identity before we act on your request. You or your authorized agent may make an authenticated consumer request related to your personal data. If you use an authorized agent to submit a request on your behalf, we may require that you (1) provide the authorized agent’s written permission to do so and (2) provide a copy of the authorization or a copy of a power of attorney. In authenticating requests, we employ reasonable measures to detect fraudulent requests and prevent unauthorized access to your personal information. To meet our obligations, we are required to authenticate your identity and the identity of your authorized agent, if the request is submitted via an agent, by associating the information provided in your request to personal data previously collected by us. If we suspect fraudulent or malicious activity on or from the password-protected account, we may decline a request or request that you provide further authenticating information. Making an authenticated consumer request does not require you to create an account with us. We will only use personal data provided in an authenticated consumer request to authenticate your identity or authority to make the request.

Questions and Contact Information

If you have any questions about our Privacy Policy, or you are concerned information we have related to your personal information is inaccurate or out dated, you can contact us at:

3641 Faculty Boulevard
Virginia Beach, VA 23453 USA
Tel: 888-677-6453

Email: [email protected]

Privacy Policy Revisions

We reserve the right to revise this Privacy Policy at any time by updating this posting. Please check back regularly and to see if there have been any changes to this policy, which you can determine by reviewing the Effective Date listed below. By continuing to use the Website after those changes become effective, you agree to be bound by the revised Privacy Policy.

PRIVACY POLICY EFFECTIVE DATE

This Privacy Policy is effective as of November 3, 2025.