Legal
Privacy Policy
Last updated: 4 October 2026
Smil3 (“we”, “us”, “our”) operates the website at smil3.org and related niche sites, plus the Smil3 Concierge WhatsApp experience. We help travellers explore international dental tourism options and request a consultation. This policy explains what personal data we collect, why we use it, and your rights under UK GDPR and the Data Protection Act 2018.
1. Who we are
Smil3 is a digital dental tourism concierge. We are not a dental clinic and we do not provide medical or clinical advice on this site. Partner surgical centres remain independent; this website is white-label and does not publish clinic names or clinic phone numbers.
Data controller contact: [email protected]
2. Data we collect
We may collect:
- Enquiry details you submit via our lead form or Meta lead ads — for example name, email, phone or WhatsApp number, preferred procedure, travel timing, budget band, and free-text notes.
- Messaging content when you contact us on WhatsApp (including Meta WhatsApp Business / Cloud API), such as messages you send, media you share, and conversation metadata needed to reply and escalate to a human.
- Technical data such as IP address, browser type, device type, approximate location derived from IP, referrer, and pages viewed — collected via hosting logs and similar technologies.
- Cookies and similar technologies used for essential site function, security, and basic analytics where enabled.
Please do not send sensitive clinical records (for example full X-rays or medical histories) unless we expressly ask you to after you start a consultation pathway. If you do send health information, we process it only as needed to route your enquiry.
3. How we use your data
- Respond to enquiries and operate our 24/7 digital concierge (including WhatsApp).
- Assess suitability for a travel consultation and coordinate next steps with you.
- Introduce you to an accredited international surgical centre only when you have shown clear intent — we do not sell your contact details as a marketing list.
- Improve our site, messaging quality, and service reliability.
- Meet legal, security, and fraud-prevention obligations.
4. Legal bases (UK GDPR)
- Legitimate interests — operating a concierge enquiry service, securing our systems, and improving response quality, where your interests do not override ours.
- Contract / steps prior to contract — when you ask us to arrange a consultation pathway.
- Consent — where required for certain cookies, marketing messages, or Meta/WhatsApp features that rely on consent.
- Legal obligation — where we must retain or disclose information to comply with law.
5. Meta, WhatsApp, and advertising
If you interact with Smil3 through Meta products (including Facebook/Instagram lead forms or WhatsApp), Meta Platforms Ireland Limited / Meta Platforms, Inc. may process data as described in Meta’s own policies. We use that channel to receive and reply to your messages and lead submissions. Message content may be processed by our automation stack and reviewed by a human operator when escalation is needed.
You can stop WhatsApp messages by asking us to close the conversation, or by blocking/muting the business number in WhatsApp. Opting out of marketing does not stop transactional replies you still request.
6. Sharing
We share personal data only when needed:
- Service providers that host our website, database, automation, and messaging infrastructure (for example cloud hosting and WhatsApp Business API providers).
- Partner surgical centres — only after you indicate you want to proceed, and limited to information required for a clinical consultation handoff.
- Professional advisers or authorities where required by law or to protect rights and safety.
We do not sell personal data. We do not publish clinic brand names on this site as part of our white-label model.
7. International transfers
Our providers and partner centres may process data outside the UK. Where we transfer personal data internationally, we take steps appropriate under UK GDPR (for example standard contractual clauses or an adequacy decision) so your data remains protected.
8. Retention
We keep enquiry and messaging records for as long as needed to handle your request, manage follow-up, resolve disputes, and meet legal or accounting requirements. Inactive leads are typically reviewed within 24 months; you can ask us to delete sooner where the law allows.
9. Security
We use access controls, encrypted transport (HTTPS), and least-privilege practices for staff tools. No method of transmission or storage is perfectly secure; please avoid sending passwords or unnecessary sensitive documents over chat.
10. Your rights
Depending on your situation, you may have the right to access, rectify, erase, restrict, or object to processing, and to data portability. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.
Contact [email protected] to exercise these rights. For a step-by-step guide to deleting lead, WhatsApp, and conversation data, see our Data deletion instructions. You may also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
11. Children
Our services are aimed at adults arranging elective dental travel. We do not knowingly collect data from children under 16. If you believe a child has provided data, contact us and we will delete it promptly.
12. Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site or messaging channels after an update means you should review the revised policy.
13. Contact
Privacy questions:
[email protected]
Website:
https://smil3.org
Also see our Data deletion instructions and Terms of Use.