← Back to Merkong

Privacy Policy

Last updated: August 15, 2026 · Effective immediately

1. Scope of this Policy

This Privacy Policy describes how Merkong Dental Design Center ("Merkong", "we", "us", or "our") collects, uses, retains, and shares information when you visit merkong.com or any of its subdomains (including the case submission portal at order.merkong.com), or when you contact us, request a quote, create an account, or use our dental CAD design services.

This Policy applies to information collected through our websites, services, and business communications. It does not apply to any third-party sites, applications, or services that we do not control — please review their policies separately.

2. Information We Collect

We collect only the information needed to provide and improve our services to dental laboratories.

2.1 Information you provide directly

• Account information: full name, email address, password (hashed using Argon2id/bcrypt), phone number, country, the name of your dental laboratory, and your website URL.
• Case files and instructions: intraoral scans, photographs, prescriptions, margin lines, design preferences, and other materials you upload to submit a case.
• Communications: emails, support tickets, feedback, and any correspondence you send us.
• Subscription data: email address you submit through our "Stay Updated" newsletter form (with your consent).

2.2 Information collected automatically

• Device and connection data: IP address, browser type and version, operating system, referring URL, pages viewed, and timestamps.
• Cookies and similar technologies: see the Cookies section below.

2.3 Information from third parties

We do not purchase personal data from data brokers. We may receive limited information from payment processors and our hosting providers, but only as needed to complete a transaction or deliver our service.

3. How We Use Information

We use the information we collect for the following purposes:

• To create and manage your Merkong account.
• To receive, design, deliver, and support dental CAD cases you submit.
• To respond to your inquiries and provide customer support.
• To send you service notifications, security alerts, and administrative messages.
• To send you our newsletter or workflow tips, only if you have opted in (double opt-in where required).
• To detect, prevent, and address fraud, security issues, and abuse.
• To comply with legal obligations and enforce our terms.
• To improve our services through aggregated, non-identifying analytics.

We do not use your information for automated decision-making that produces legal or similarly significant effects about you.

4. Sharing and Disclosure

We do not sell your personal information. We share information only as described below:

• Service providers: trusted vendors who help us operate (hosting, email delivery, file storage, customer support tools). Each provider is bound by a data processing agreement and is prohibited from using your data for any other purpose.
• Payment processors: if you make a payment, the relevant payment provider receives the data needed to process the transaction.
• Legal: where required by valid law, regulation, or court order, or to protect our rights, your safety, or the safety of others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
• With your consent: for any other purpose disclosed at the time of collection.

5. Data Retention

We retain personal information only as long as needed to provide our services and comply with legal obligations. Specifically:

• Account information: kept while your account is active and for up to 24 months after closure, unless a longer period is required by law.
• Case files and design outputs: retained according to your lab's retention instructions, or for a default of 36 months, whichever is shorter.
• Backups and logs: routinely rotated and deleted within 90 days.
• Newsletter data: removed promptly upon your unsubscribe request.

After these periods, data is securely deleted or anonymized.

6. Cookies and Similar Technologies

We use a minimal set of cookies and similar technologies on our website:

• Strictly necessary cookies: required for the site to function (session management, load balancing, CSRF protection). These cannot be disabled.
• Preferences: remember your language and display choices.
• Analytics (optional): aggregated, IP-anonymized analytics to help us understand how visitors use the site. Loaded only after you grant consent, where required by law.

We do not use advertising or cross-site tracking cookies. You can manage your cookie choices through your browser settings at any time.

7. Security

We protect your information with administrative, technical, and physical safeguards designed for the sensitivity of the data, including:

• HTTPS (TLS 1.2+) for all traffic.
• Argon2id (or bcrypt with cost ≥ 12) password hashing.
• Rate limiting and brute-force protection on authentication endpoints.
• Strict access controls and audit logging for production data.
• Encrypted backups stored in geographically separated facilities.
• Regular dependency scanning and timely security patches.

Despite our efforts, no system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

8. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to fix inaccurate or incomplete data.
• Deletion: ask us to delete your data, subject to legal exceptions.
• Portability: receive your data in a structured, machine-readable format.
• Restriction or objection: limit or object to certain processing.
• Withdraw consent: at any time, where processing is based on consent.
• Lodge a complaint: with your local data protection authority.

To exercise any of these rights, contact us at eric@merkong.com. We respond within 30 days.

9. International Transfers

Merkong is based in China and serves laboratories worldwide. By using our services, you understand that your information may be transferred to, stored, and processed in China and other countries where our service providers operate. We use Standard Contractual Clauses or equivalent mechanisms to protect your information when required.

10. Children's Privacy

Our services are intended for dental laboratories and adult professionals. We do not knowingly collect personal information from anyone under the age of 16. If you believe we have collected such information, please contact us and we will promptly delete it.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top. If the changes are material, we will provide a more prominent notice (such as a banner on our homepage or an email to active account holders). Your continued use of our services after the effective date constitutes acceptance of the updated Policy.

12. Contact Us

For data protection inquiries, please mark your email subject line "Privacy Request" so we can route it to the responsible team promptly.