This Privacy Policy explains how Smila Aligners Ltd ("Smila", "we", "us", "our") collects, uses, stores and protects personal data when you visit smila.uk or interact with us through this website.
We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller responsible for your personal data is:
- Smila Aligners Ltd
- Company number: 16991984 (registered in England & Wales)
- Registered office: 3-4 Norfolk Place, London, W2 1QN, United Kingdom
- Email: info@smila.uk
If you have any questions about this policy or how we handle your data, please contact us at info@smila.uk.
2. What data we collect
We collect the following categories of personal data:
2.1 Information you give us directly
When you submit our contact form, we collect:
- First and last name
- Email address
- Phone number (optional)
- How you heard about us (optional)
When you email us or book a consultation through Calendly, we collect any information you choose to share, including your name, contact details, and any health-related context you provide.
2.2 Information collected automatically
When you visit the site, our hosting provider (Vercel) logs technical data including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time of visit
- Referring URL
This data is used for security, debugging and aggregate analytics. We do not use third-party tracking cookies. See our Cookie Policy for details.
3. How we use your data
We process your personal data for the following purposes:
- To respond to your enquiry and provide the information you've requested
- To send you a confirmation email acknowledging your contact
- To contact you about a free consultation if you've requested one
- To keep internal records of our communications with you
- To improve our website, services and customer experience
- To comply with our legal and regulatory obligations
4. Legal basis for processing
We rely on the following legal bases under UK GDPR Article 6:
- Consent (Art. 6(1)(a)) — when you submit the contact form, you consent to us using your details to reply.
- Legitimate interests (Art. 6(1)(f)) — to operate, secure and improve our website, and to respond to enquiries about our service.
- Legal obligation (Art. 6(1)(c)) — to comply with applicable laws, including responding to lawful requests from authorities.
5. Who we share your data with
We do not sell your personal data. We share it only with trusted service providers who process it on our behalf, under written data processing agreements:
- Vercel Inc. — website hosting and infrastructure. Data may be processed in the United States under appropriate safeguards (Standard Contractual Clauses).
- Google LLC (Google Workspace) — email delivery (info@smila.uk and confirmation emails).
- Elestio GmbH — hosts our form-processing automation (n8n) in Germany (EU).
- Calendly LLC — only if you book a consultation through our Calendly link.
We may also disclose your data when required by law, court order, or to protect our legal rights or the safety of others.
6. International data transfers
Some of our service providers (notably Vercel and Google) may process your data in the United States. Where this happens, we rely on the UK's data adequacy decision for the EU (where applicable) and on Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) as the safeguard mechanism.
7. How long we keep your data
We keep your personal data only as long as necessary for the purposes set out above:
- Contact form submissions: up to 24 months after your last contact with us, unless you become a customer or ask us to delete it sooner.
- Email correspondence: up to 6 years where required for tax and accounting records.
- Server logs: up to 30 days, then anonymised or deleted.
8. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — to ask for a copy of the data we hold about you.
- Right to rectification — to correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") — to ask us to delete your data, subject to legal exceptions.
- Right to restrict processing — to limit how we use your data.
- Right to data portability — to receive your data in a structured, machine-readable format.
- Right to object — to processing based on legitimate interests.
- Right to withdraw consent — at any time, without affecting prior processing.
To exercise any of these rights, email info@smila.uk. We will respond within one month.
9. Your right to complain
If you believe we've handled your data incorrectly, you have the right to complain to the UK supervisory authority:
- Information Commissioner's Office (ICO)
- Website: ico.org.uk
- Phone: 0303 123 1113
We'd appreciate the chance to address your concerns directly first — please contact us at info@smila.uk.
10. Security
We take appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. This includes encrypted connections (HTTPS), access controls on our internal systems, and use of reputable service providers.
No internet transmission is ever 100% secure, but we use industry-standard practices to keep your data safe.
11. Children's data
Smila's clear aligner treatment is intended for adults (18+). We do not knowingly collect personal data from children under 18 through this website. If you become aware that a child has submitted data to us, please contact info@smila.uk and we will delete it.
12. Cookies
We use a small number of essential cookies only. We do not use third-party tracking, advertising, or analytics cookies that identify you personally. See our Cookie Policy for full details.
13. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. For material changes that affect your rights, we will take reasonable steps to notify you (for example, via a notice on this site or by email if we have one for you).
14. Contact
Questions about this policy or your data? Email info@smila.uk.