Privacy policy

Who we are

SmileQuick ("SmileQuick", "we", "us") is the controller of the personal data described in this notice. SmileQuick is a UK directory of independent dental practices. This page explains what personal data we collect, why, and your rights, in line with the UK GDPR and Data Protection Act 2018.

What we collect

• Account data — your name, email address and (if you sign up with a password) a hashed password.
• Booking requests — the name, email, phone number and treatment you submit when you request an appointment through SmileQuick.
• Practice data — if you list a practice: business name, address, phone, email, treatments and prices.
• Technical data — cookies to keep you signed in, device identifiers and IP address, plus basic analytics (page views, referrer). No third-party ad tracking.
• Support messages — feedback and correspondence you send us.

How we use it and why (legal basis)

• Contract performance — to run your account, host your practice listing and subscription, and pass booking requests to the practice you chose.
• Legitimate interests — to secure the service, prevent fraud and abuse, and improve SmileQuick using anonymised analytics.
• Consent — for optional email or SMS notifications about your booking requests, and for non-essential cookies where required.
• Legal obligation — where we must keep or disclose records to comply with the law.

We do not sell your data. Booking request details are shared only with the practice you submitted the request to.

Who we share data with

• Merchant of Record (Paddle) — when you buy a practice subscription, our online reseller Paddle.com processes your payment, billing, tax and invoicing as Merchant of Record. Paddle is a separate controller of the payment data it collects at checkout; we do not see or store your full card details.
• Service providers/subprocessors — hosting, database, transactional email/SMS and analytics providers acting on our instructions.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where disclosure is required by law.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls and least-privilege access to production systems.

Your rights

You can access, correct or delete your personal data at any time from your dashboard, or by emailing privacy@smilequick.co.uk. You also have the rights to restriction, portability, objection and to withdraw consent at any time. We respond to requests within one month. You have the right to complain to the ICO.

Retention

Booking requests are kept for 24 months so both patients and practices have a record. Account data is kept until you delete your account. Data no longer needed is deleted or anonymised.

Cookies

We use essential cookies to keep you signed in and run the service, and optional analytics cookies to understand usage. You can manage non-essential cookies via the cookie banner on this site.

Contact

Questions? Email privacy@smilequick.co.uk.