Draft for review: this text must be confirmed by Brazilian Smile before publication.
Who we are
Brazilian Smile Ltd (“Brazilian Smile”, “we”) runs the private dental practice at 42 Harley Street, London W1G 9PR. We are a company registered in England and Wales, company number 08579298, with our registered office at 21 Carburton Street, Flat 8, London W1W 5AW. We are the data controller for the personal information described in this policy and are registered with the Information Commissioner’s Office (ICO).
Questions about your data: info@braziliansmile.co.uk, WhatsApp 07752 979208 or 020 3730 7726.
What information we collect
- Enquiries: your name, email, phone number, preferred contact method, preferred date and time, treatment of interest and message, when you contact us through the website form, WhatsApp, email or phone.
- WhatsApp clicks: when you tap a WhatsApp button, random reference codes and how you reached our website (see “WhatsApp enquiries and how you found us” below).
- Patient records: if you become a patient, we keep the medical and dental information needed to provide safe care. This is covered by a separate patient privacy notice available at the clinic.
- Technical data: basic server logs (such as IP address, browser type and the pages requested) needed to run and protect this website.
Please do not send detailed medical information through the website form or WhatsApp before your appointment. We will ask for it securely when you become a patient.
How we use it and our lawful basis
- To reply to your enquiry and arrange appointments: steps taken at your request before entering into a contract, and our legitimate interest in responding to people who contact us.
- To understand which channels bring enquiries (WhatsApp attribution): our legitimate interest in measuring and improving how patients find us; the parts that store information on your device rely on your consent.
- To provide dental care and keep clinical records: contract, legal obligation and, for health data, the provision of health care under the supervision of a registered health professional.
- To keep this website secure: legitimate interests.
We do not sell your data and we do not send you marketing without your consent.
WhatsApp enquiries and how you found us
When you tap a WhatsApp button, we record how you reached our website so we can understand which channels bring enquiries: campaign parameters in the link (such as utm_source or an advertising click reference), the referring page, the page you were on and, with your consent, the first page you visited and your browser’s language and type. A random reference code is added invisibly to your WhatsApp message to link the conversation to that visit. This information is not used to identify you on other websites.
Who we share it with
Only with trusted providers who help us run the practice, under contract and only as needed:
- Website hosting and email providers.
- WhatsApp (Meta Platforms) when you choose to message us there, under WhatsApp’s own terms.
- Our automation and database providers (n8n workflow automation, the Evolution API messaging service and Supabase), which record WhatsApp enquiries and their source.
- Google, only if you choose to open the interactive map.
- Tabeo, if you apply for treatment finance, under their own privacy policy.
- Regulators, insurers, professional advisers or authorities when the law requires it.
Some providers may process data outside the UK. When that happens we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Enquiries that do not lead to treatment: up to 12 months.
- WhatsApp attribution data: up to 24 months, in aggregated or pseudonymised form where possible.
- Patient records: for the periods recommended for dental records in the UK.
- Information stored in your browser: until you clear it or withdraw consent.
Cookies and local storage
This website does not use advertising cookies. A strictly necessary session cookie protects the contact form against misuse, and your privacy choice is remembered in your browser. Only if you agree in our cookie banner, your browser’s local storage keeps a random session identifier and the source of your first visit, to support the WhatsApp attribution described above. Without your agreement nothing else is stored on your device and only the page you are on is recorded. You can change your choice at any time using “Cookie settings” at the bottom of every page. The interactive Google map is only loaded if you choose to open it, and is then governed by Google’s own policy.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| PHPSESSID | Cookie, strictly necessary | Protects the contact form (security token) | Until you close the browser |
| bs_consent | Local storage, strictly necessary | Remembers your cookie choice | Until you clear it |
| bm_whatsapp_session_id | Local storage, with consent | Random identifier for WhatsApp attribution | Until you clear it or withdraw consent |
| bm_whatsapp_lead_source | Local storage, with consent | Source of your first visit (campaign, referrer, landing page) | Until you clear it or withdraw consent |
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, to data portability and to withdraw consent at any time. To exercise any of these rights, contact us using the details above; we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).
Children
This website is not directed at children. Enquiries about treatment for anyone under 16 should be made by a parent or guardian.
Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last changed.