Privacy Policy
This Privacy Policy describes how BrightSmile Dental Clinic ("we", "us", "our") collects, uses, shares, and protects your personal information when you visit our website or interact with our services.
1. Information We Collect
1.1 Information You Provide
When you fill out our contact form, request a consultation, or contact us through other means, we collect:
- Name
- Phone number
- Email address (if provided)
- Preferred doctor or treatment (if selected)
- Any other information you choose to share
1.2 Information Collected Automatically
When you visit our website, we automatically collect:
- IP address and approximate location (country / city)
- Device type, browser, and operating system
- Pages visited, time on page, navigation paths
- Referring source (search engine, social link, etc.)
1.3 Cookies and Similar Technologies
We use cookies and similar technologies to enable site functionality and analyze how visitors use our site. See Section 4 for details.
2. How We Use Your Information
- Respond to your consultation requests and inquiries
- Schedule and confirm appointments
- Communicate with you about our services
- Understand and improve how visitors use our site
- Comply with legal obligations
3. How We Share Your Information
We do not sell your personal information. We share information only as described below:
3.1 Service Providers
We use the following third-party services to operate our site. Each has its own privacy policy:
- Google Analytics 4 (Google Ireland Ltd / Google LLC) — site usage analytics. policies.google.com/privacy
- Netlify (Netlify Inc.) — hosting and contact form delivery. netlify.com/privacy
- Cloudinary (Cloudinary Ltd.) — image delivery. cloudinary.com/privacy
- Google Sheets / Apps Script (Google) — backend content management. policies.google.com/privacy
- Calendly / Cal.com — only if you use our doctor booking widgets. calendly.com / cal.com
- WhatsApp (Meta Platforms Inc.) — only when you click a WhatsApp link to contact us. whatsapp.com/legal
- SociableKit — only if our site embeds the Google Reviews widget. sociablekit.com
3.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our legal rights or the safety of others.
4. Cookies and Tracking
We use two categories of cookies:
- Strictly Necessary — required for the site to function (e.g., remembering your cookie preferences). These cannot be disabled.
- Analytics — set by Google Analytics 4 to measure site usage. These are only set with your consent where required by law.
You can change your cookie preferences at any time by clicking "Cookie Settings" in our footer.
5. Your Privacy Rights
5.1 Rights Under GDPR (EEA, UK, Switzerland)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights:
- Right of access — request a copy of the personal information we hold about you
- Right to rectification — request correction of inaccurate information
- Right to erasure ("right to be forgotten") — request deletion of your information
- Right to restrict processing — limit how we use your information
- Right to data portability — receive your information in a portable format
- Right to object — to certain processing, including direct marketing
- Right to withdraw consent — at any time, where processing is based on consent
- Right to lodge a complaint — with your local data protection authority
The legal basis for our processing is your consent (for analytics) and legitimate interest / contractual necessity (for handling consultation requests).
5.2 Rights Under CCPA / CPRA (California Residents)
If you are a California resident, you have the following rights:
- Right to know — what personal information we collect, use, and share
- Right to delete — request deletion of your personal information
- Right to correct — request correction of inaccurate information
- Right to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising
- Right to non-discrimination — we will not discriminate against you for exercising any of these rights
We do not sell personal information as defined by the California Consumer Privacy Act.
5.3 How to Exercise Your Rights
To exercise any of these rights, contact us using the details in Section 11. We will respond within 30 days (GDPR) or 45 days (CCPA). We may need to verify your identity before processing your request.
6. Data Retention
We retain your personal information only as long as necessary for the purposes described in this policy, or as required by law. Contact form submissions are typically retained for up to 2 years from the date of last contact, after which they are deleted or anonymized.
7. Data Security
We use industry-standard security measures to protect your information, including encrypted connections (HTTPS), secure third-party processors, and access controls. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
8. International Data Transfers
The third-party services we use may process your data outside your country of residence (including in the United States and European Union). These transfers are protected by appropriate safeguards including Standard Contractual Clauses and the EU-US Data Privacy Framework, where applicable.
9. Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect personal information from children under 16 without parental consent. If you believe a child has provided us information without consent, please contact us so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates the most recent revision. Material changes will be communicated through our website or, where required, by direct notice.
11. Contact Us
For privacy-related questions, requests, or complaints, please contact us:
- BrightSmile Dental Clinic
- Edappally, Kochi, Kerala
- Phone: 917012388319