GloSmilz Privacy Policy

Last updated: September 2026

1. Who we are

GloSmilz is operated by Nadine Tonta, a sole trader trading as GloSmilz. Nadine Tonta is the data controller responsible for the personal information processed through this website and in connection with GloSmilz appointments, purchases and services.

We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

To contact GloSmilz, please visit our Contact Us page.

2. The information we collect

We collect and process different types of personal information depending on how you interact with GloSmilz. This may include:

Identity and contact information, such as your name, email address, mobile telephone number and postal address.

Age information, including confirmation that you are aged 18 or over and, where voluntarily provided, your date of birth.

Booking and purchase information, such as appointment details, services or products purchased, order information and transaction records.

Pre-appointment suitability information, including health or dental information that you provide through our Pre-Appointment Suitability Questionnaire. This may include information about pregnancy or breastfeeding, dental pain or problems, sensitivity, recent dental treatment, allergies or adverse reactions and previous teeth-whitening experiences.

Health information is treated as special category personal data and is only collected where it is relevant to pre-appointment suitability screening and where an appropriate lawful basis and special-category condition apply.

Enquiry and communication information, including information you provide when contacting us, making an enquiry, providing feedback or raising a complaint.

Marketing preferences, such as whether you have chosen to receive GloSmilz marketing communications.

Technical and website usage information, such as IP address, browser and device information, website activity and information collected through cookies and similar technologies.

3. How and why we use your information

We only use your personal information where we have a lawful basis to do so under UK data protection law.

To manage bookings and provide our services
We use your contact and booking information to administer appointments, send booking information and updates, and provide the products or services you have requested.
Lawful basis: Performance of a contract.

To carry out pre-appointment suitability screening
We use the information provided in our Pre-Appointment Suitability Questionnaire to identify whether anything needs to be discussed before your appointment or whether the appointment should be postponed or cancelled.
Lawful basis: Performance of a contract.

Where this includes health or dental information, we additionally rely on your explicit consent as our condition for processing special category data.

To maintain appropriate client records and deal with complaints or legal claims
We retain relevant client and service records to maintain appropriate business records, respond to complaints, obtain professional or legal advice, and establish, exercise or defend legal claims where necessary.
Lawful basis: Our legitimate interests in maintaining appropriate records and protecting our legal rights.

Where this involves health or dental information and processing is necessary for the establishment, exercise or defence of legal claims, we rely on the applicable legal claims condition for processing special category data.

To process payments and maintain financial records
We use transaction and purchase information to process payments, issue refunds where applicable, maintain business records and meet our accounting and tax obligations. Payment card details are processed by our payment provider and are not stored directly by GloSmilz.
Lawful bases: Performance of a contract and compliance with a legal obligation.

To respond to enquiries, feedback and complaints
We use contact and communication information to respond to you, resolve queries and manage our relationship with customers and website visitors.
Lawful basis: Our legitimate interests in communicating with customers and operating our business, or performance of a contract where the communication relates directly to a booking or purchase.

To send marketing communications
We may send promotional emails, newsletters or other electronic marketing communications where you have specifically chosen to receive them. You can withdraw your consent at any time.
Lawful basis: Consent.

To operate, protect and improve our website
We may use technical information to maintain website security, prevent misuse, troubleshoot problems and improve the operation of our website.
Lawful basis: Our legitimate interests in operating and protecting our website and business.

Where optional analytics or other non-essential cookies are used, we only activate them in accordance with your cookie choices. Further information is provided in our Cookie Policy.

We do not use the health or dental information provided in your Pre-Appointment Suitability Questionnaire for marketing purposes.

4. Cookies and similar technologies

We use cookies and similar technologies to help our website function securely and effectively and, where you choose to allow them, to understand how visitors use our website and improve its performance and effectiveness.

Some cookies are strictly necessary for the website to function and do not require your consent. Other cookies, such as analytics cookies, are only used in accordance with your cookie choices.

When you visit our website, you can manage your preferences through our cookie consent controls. You can also change or withdraw your choices later where those controls allow.

For more information about the cookies and similar technologies used on our website, their purposes and how long they remain active, please see our Cookie Policy.

5. Who we share your information with

We only share personal information where it is necessary for the purposes described in this Privacy Policy, to provide our services, or where we are required to do so by law.

We may share relevant information with:

Website, hosting and communication providers
We use service providers such as Hostinger to operate and host our website, manage website forms and support our business communications.

Payment providers
Payments are processed securely by third-party payment providers such as Stripe. These providers process payment information in accordance with their own privacy practices and applicable data protection law.

Professional advisers and service providers
Where necessary, we may share limited personal information with accountants, legal advisers, insurers, IT providers or other professional service providers who assist us in operating GloSmilz.

Analytics and marketing providers
Where you have consented to optional analytics or marketing technologies, relevant technical or website usage information may be processed by the providers of those services. More information is available in our Cookie Policy.

Insurers, insurance intermediaries and claims advisers
Where necessary in connection with insurance cover, a complaint, incident or potential claim, we may share relevant personal information with our insurers, insurance brokers or intermediaries, claims handlers, loss adjusters, legal advisers or other parties involved in handling the matter.

Regulators, public authorities or law-enforcement bodies
We may disclose personal information where required by law, regulation, court order or another lawful request.

We require service providers acting on our behalf to handle personal information appropriately and only for the purposes for which it has been provided.

We do not sell your personal information.

6. International transfers

Some of the service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is carried out in accordance with UK data protection law.

Depending on the circumstances, this may include relying on:

• UK adequacy regulations;

• approved contractual safeguards or other appropriate safeguards; or

• another lawful transfer mechanism permitted under UK data protection law.

Where a service provider processes personal information outside the UK, we also consider the safeguards that provider has in place to protect the information.

You can contact us using the details provided in this Privacy Policy if you would like further information about the safeguards used in relation to a particular international transfer.

7. How long we keep your information

We only keep personal information for as long as it is reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, insurance and appropriate record-keeping requirements.

Client, booking and service records
We retain client records relating to appointments and services for at least seven years from the date of the relevant appointment or service, in accordance with our insurance and record-keeping requirements. Records may be retained for longer where this is reasonably necessary to comply with applicable requirements or to establish, exercise or defend legal claims.

Pre-appointment suitability information
Information provided through our Pre-Appointment Suitability Questionnaire, including relevant health or dental information, forms part of the client record and is normally retained for at least seven years from the date of the relevant appointment or service.

Where an appointment does not proceed, relevant questionnaire and booking information will normally also be retained for seven years from the date the appointment was cancelled or the decision was made not to proceed, where this is necessary to meet our insurance and appropriate record-keeping requirements or to establish, exercise or defend legal claims.

Payment and financial records
Financial and transaction records are retained for the period required by applicable tax and accounting law.

Enquiries and correspondence
We retain enquiries and general correspondence only for as long as reasonably necessary to respond to the enquiry and maintain appropriate business records.

Marketing information
We retain marketing preferences while you remain subscribed. If you withdraw your consent or unsubscribe, we may retain limited information necessary to record your preference and ensure that we do not send you further marketing communications.

Where a complaint, incident, dispute, legal claim or regulatory matter arises, relevant information may be retained for longer where reasonably necessary to deal with that matter.

8. Your data protection rights

Under UK data protection law, you may have the following rights in relation to your personal information:

Right of access
You can ask us for a copy of the personal information we hold about you.

Right to rectification
You can ask us to correct personal information that is inaccurate or incomplete.

Right to erasure
You can ask us to delete your personal information in certain circumstances.

Right to restriction of processing
You can ask us to restrict how we use your personal information in certain circumstances.

Right to object
You can object to certain types of processing, including processing based on legitimate interests. You have the right to object at any time to the use of your personal information for direct marketing.

Right to data portability
In certain circumstances, you can ask us to provide personal information you have given us in a structured, commonly used and machine-readable format, or to transfer it to another organisation where technically feasible.

Right to withdraw consent
Where we rely on your consent to process personal information, including explicit consent for certain health or dental information, you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Please note that some rights are not absolute and may not apply in every situation. For example, we may need to retain certain information to meet legal, insurance, accounting or record-keeping obligations, or to establish, exercise or defend legal claims.

To exercise any of these rights, please contact us using the details provided in this Privacy Policy.

We may need to confirm your identity before acting on a request.

9. Complaints

If you have any concerns about how GloSmilz has collected, used, stored or protected your personal information, please contact us first so that we have the opportunity to investigate and respond.

You can contact us using the details provided in this Privacy Policy.

If you remain dissatisfied after we have considered your complaint, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

The ICO can be contacted through its website or by telephone on 0303 123 1113.

10. Marketing communications

We may send you marketing communications about GloSmilz products, services, offers or news where you have specifically chosen to receive them.

Where consent is required, we ask for it separately from other terms, conditions, bookings or service-related information.

You can withdraw your consent at any time by using the unsubscribe option included in our marketing emails or by contacting us directly.

Withdrawing your consent to marketing does not affect your appointments, purchases or access to GloSmilz services.

We may retain limited information about your marketing preferences after you unsubscribe so that we can respect your choice and avoid sending you further marketing communications.

We do not use health or dental information provided through our Pre-Appointment Suitability Questionnaire for marketing purposes.

11. Security

We take the security of your personal information seriously and use appropriate technical and organisational measures to protect it against unauthorised or unlawful access, use, alteration, disclosure, loss or destruction.

The measures we use are proportionate to the nature and sensitivity of the information we process and may include:

• secure access controls and passwords;

• limiting access to personal information to those who need it for legitimate business purposes;

• using reputable service providers with appropriate security measures;

• keeping software, devices and systems appropriately maintained and updated;

• secure storage and backup arrangements for business records; and

• appropriate physical security for information held at GloSmilz premises.

Where personal information is stored on portable or mobile devices, we take appropriate steps to protect that information, including the use of device security and encryption where appropriate.

We regularly review our security arrangements and take reasonable steps to reduce the risk of personal information being accidentally or deliberately compromised.

No method of electronic storage or transmission can be guaranteed to be completely secure. However, we take appropriate steps to protect the information we hold and to respond to security incidents where necessary.

12. Children

GloSmilz services are intended for adults aged 18 and over.

We do not offer teeth-whitening appointments or related services to anyone under the age of 18.

Our Pre-Appointment Suitability Questionnaire includes a required age-confirmation question to help us identify whether a client meets this minimum age requirement.

If we become aware that personal information has been provided by someone under the age of 18 in connection with a booking or suitability questionnaire, we will take appropriate steps to deal with that information in accordance with applicable data protection law.

13. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices, legal requirements or the way we process personal information.

Where we make material changes, we will update this page and, where appropriate, take reasonable steps to bring those changes to your attention.

The date of the most recent update will be shown at the top or bottom of this Privacy Policy.

14. Contact GloSmilz

If you have any questions about this Privacy Policy, how we handle your personal information or your data protection rights, please contact:

GloSmilz
25 Miles Street
Llanelli SA15 3DU

You can also contact us through our Contact Us page.