Privacy Policy

Who we are

Smile & Springs ("we") arranges dental treatment packages in Dombóvár, Hungary for international patients. For questions about this policy or your data, contact hello@smileandsprings.com.

What we collect and why

At this pre-launch stage we collect only what you give us:

Your email address — to send you the emails you asked for: your welcome email with the treatment-abroad checklist, about one "postcard from Dombóvár" a month, and one email when bookings open.
Your departure country (if provided) — so our launch email is relevant to where you fly from.
Your consent and its timestamp — to prove we only email people who opted in.
Your dental X-ray or CT scan (only if you choose to upload one) — solely to prepare your written treatment quote. This is health data, so we ask for your explicit consent at the moment of upload.

The legal basis for emails is your consent (UK GDPR / EU GDPR Article 6(1)(a); express consent under Canada's PIPEDA and CASL). For dental images it is your explicit consent (UK GDPR / EU GDPR Article 9(2)(a)). Please don't send health information any other way than the upload form or an email you choose to write to us.

Where your data lives

Sign-ups are stored in an encrypted database, and uploaded dental images in a private, encrypted storage bucket, both on Amazon Web Services in the EU (Ireland). Emails are sent through Amazon Simple Email Service from the same EU region. Access is restricted to the minimum systems and people needed to run the launch list and prepare quotes. We do not sell, rent or share your email address with anyone; dental images are shared only with the treating clinic preparing your quote, and only when you ask us for one.

How long we keep it

Your email: until we launch and you either become a customer, stay subscribed, or unsubscribe. Every email we send includes an unsubscribe link; unsubscribing removes you from the mailing list immediately. Uploaded dental images are deleted automatically 90 days after upload — if you want one deleted sooner, email us and it's gone within days.

Your rights

You can ask us at any time to show you the data we hold about you, correct it, delete it, or export it. Email hello@smileandsprings.com and we'll act within 30 days. UK residents may complain to the ICO, EU residents to their national supervisory authority, and Canadian residents to the Office of the Privacy Commissioner of Canada.