GloSmilz Privacy Policy
Effective date: 01/12/2025
1. Who we are
GloSmilz is the data controller responsible for this website and for protecting your personal information.
Entity: Sole Trader trading as GloSmilz
GloSmilz Contact Form And Address: Click Here
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as well as the EU GDPR for visitors from the European Economic Area (EEA).
2. The data we collect
We collect and process different types of personal information depending on how you interact with our website and services. This may include:
Identity and contact information, such as your name, email address, phone number, and postal address.
Booking and payment information, such as appointment details, purchase history, and payment data (processed securely through our payment provider).
Marketing preferences, such as your newsletter subscription and consent status.
Technical and usage information, such as your IP address, device type, browser, time zone, pages visited, and cookie data.
Health information, such as answers to pre-treatment questions (for example, sensitivity or medical conditions), collected only when necessary and always with your explicit consent.
3. How and why we use your data
We process your personal data only when we have a lawful basis for doing so. We use it for the following purposes:
To provide and manage appointments, including booking confirmations, reminders, and updates.
To process payments and maintain accurate tax and accounting records.
To respond to enquiries, feedback, or complaints.
To assess treatment suitability and ensure safe practice (with your explicit consent where health data is involved).
To send marketing emails or newsletters, but only if you have given consent.
To analyse website traffic, improve site performance, and maintain security.
You can refuse non-essential cookies at any time. Essential cookies are required for the site to function properly.
4. Cookies and tracking
We use cookies and similar technologies to improve your browsing experience. These include:
Essential cookies, which are required for security and website functionality.
Performance cookies, which help us analyse site traffic using tools such as Google Analytics 4.
Marketing cookies, used for advertising purposes (for example, the Meta Pixel).
When you visit our website, a cookie banner will appear allowing you to accept or reject optional cookies. You can change your preferences at any time via the “Cookie Settings” link in the website footer. Full details are available in our Cookie Policy.
5. Sharing your data
We only share your data with trusted service providers who process it on our behalf and follow our instructions. These may include:
Website hosting: Hostinger
Payment processing: Stripe or PayPal
Booking system: Hostinger Appointments
Email and marketing tools: Hostinger and or Mail Chimp
Analytics and advertising platforms: Google LLC (Google Analytics 4) and Meta Platforms Inc.
All service providers are bound by data processing agreements that ensure your information is protected and used lawfully.
6. International transfers
Some of our service providers may process or store your data outside the UK or EEA, such as in the United States.
Where this occurs, we use approved safeguards, such as the UK International Data Transfer Addendum (IDTA) or the EU Standard Contractual Clauses (SCCs), to ensure your personal data remains protected.
7. Data retention
We keep your personal information only for as long as necessary for the purposes it was collected, or as required by law.
Enquiry records are kept for up to 12 months after the last contact.
Booking and payment information is retained for seven years for tax and accounting purposes.
Health questionnaires, if collected, are kept for approximately two years after your last treatment.
Marketing data is retained until you withdraw consent or after 24 months of inactivity.
Cookie and analytics data are stored in accordance with the durations outlined in our Cookie Policy.
8. Your rights
Under data protection law, you have several rights regarding your personal data. These include the right to:
Be informed about how your data is used.
Access the personal data we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal data (where lawful).
Restrict or object to how we process your data.
Request transfer of your data to another service (data portability).
Withdraw consent where processing is based on consent.
Not be subject to decisions made solely by automated processing or profiling.
To exercise any of these rights, contact us.
We may need to verify your identity before processing your request.
We will respond within one month.
If you are unhappy with how we handle your data, you can lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or call 0303 123 1113.
We would, however, appreciate the opportunity to resolve your concerns directly first.
9. Marketing communications
We only send marketing or promotional emails with your consent. You can withdraw this consent at any time by clicking “unsubscribe” in our emails or by contacting us directly.
10. Security
We take data security seriously. We use a combination of administrative, technical, and physical measures to protect your personal data from unauthorised access, use, alteration, or disclosure.
While we do everything reasonably possible to safeguard your information, no online system can guarantee absolute security. We regularly review and update our measures to stay compliant and effective.
11. Children
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with their data, please contact us so we can delete it.
12. Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The latest version will always be available on this page and will include an updated effective date.
If you have any questions about this Privacy Policy or how we handle your data, please contact us.