Privacy Policy
A short policy, because this site collects very little. Where it does collect something, this page says what, why, and how to get it removed.
Our enquiry form deliberately does not ask for prescriptions, measurements, medical history or symptoms, and you should not send them to us by email either. A clinic arranging your assessment will collect what it clinically needs, under its own privacy obligations as a licensed healthcare provider in the UAE.
What we collect
Information you give us
If you submit the enquiry form, we receive the fields it asks for: your name, email address, optional phone or WhatsApp number, your location, what you are researching, and your preferred contact method. Nothing else, because nothing else is collected.
That information is used to pass your enquiry to a participating clinic so they can contact you. It is not sold, and it is not used for any purpose other than handling your enquiry and understanding which pages generate enquiries.
Information collected automatically
By default, none. This site ships no analytics script, no advertising pixel and no third-party tracking. That includes the enquiry form: submitting it records what you typed and the date, and deliberately not your IP address, your browser or device details, or where you came from. The enquiry log has no column for any of those, which is easier to hold to than a promise not to look at them. If analytics is enabled in future, this policy will be updated before it is turned on, and it will not be activated without a consent mechanism in place.
Cookies and local storage
This site sets no advertising or tracking cookies, and there is no cookie banner because there is nothing to consent to.
The interactive checklists use your browser's localStorage to remember which items
you have ticked, so that you can come back to a checklist later. This data stays in your browser:
it is never transmitted to us, and clearing your browser data removes it. The checklist tool says
so on the page as well.
Third-party content
Some pages contain video embeds. These are lazy-loaded: no connection to YouTube is made until you
press play, and the embed uses the youtube-nocookie.com domain to limit tracking
before playback. Once you start a video, YouTube's own privacy policy applies to that interaction.
Our pages link to external sources: regulators, journals, professional bodies. Following those links takes you to sites governed by their own policies, which we do not control.
Who we share information with
- Participating clinics. The clinic relevant to your enquiry receives the details you submitted, so that it can contact you. That is the purpose of the form.
- Service providers. Any provider used to deliver or host this site processes data on our behalf. That is Cloudflare, which hosts the site and holds the enquiry log, and the email provider that carries enquiries to our inbox. Neither is given anything beyond the enquiry itself, and neither is permitted to use it for anything else.
- Nobody else. We do not sell, rent or trade personal information, and we do not share it for advertising.
How long we keep it, and where
Two copies of your enquiry exist. One is the email, which arrives in our inbox and, once it has been answered, stays in the mailbox we work from. The other is a record in an enquiry log, kept separately from the mail system so that an enquiry is not lost to a spam filter, a forwarding rule or a mail provider having a bad day. That log holds what you typed, the date it arrived, and whether the email was delivered.
An enquiry record is deleted 12 months after it arrives. We keep it that long because enquiries are seasonal and people write back months later about the same decision; you can ask us to delete yours sooner and we will. Deleting the record does not reach into the clinic's own records if your enquiry was passed on, because those are the clinic's, held under its obligations as a licensed healthcare provider in the UAE.
The enquiry log is hosted by Cloudflare, which may process it outside the UAE. Nothing in it is used for advertising, profiling or analytics, and it is not joined to anything else.
Your rights
You can ask us to show you what we hold about you, correct it, or delete it. Email hello@smilepro.ae and we will respond. If you are in the UAE, you also have rights under applicable federal and emirate-level data protection law; if you are in the European Economic Area or the United Kingdom, you have rights under the GDPR or UK GDPR respectively. We will apply the same standards to any request regardless of where you are writing from.
Children
This site is intended for adults considering refractive surgery. We do not knowingly collect information from children. Refractive surgery is generally considered only for adults, and enquiries relating to a minor should be made by a parent or guardian directly to a clinic.
Security and the limits of email
We take reasonable measures to protect information we hold. Email is not a secure channel, however, which is another reason not to send medical details or documents through it.
Changes to this policy
If this policy changes materially: for example if analytics is enabled, or a new form processor is used: the change will be reflected here and the review date at the top will be updated.
Contact
Questions about this policy, or a request relating to your information: hello@smilepro.ae.