Privacy policy

Dr Jurgita Smiles Ltd, the company through which I practise ("Jurgita"), is the data controller for information submitted through this site. The company registered in England and Wales, practising at 35 Devonshire Place, London W1G 6JP. The ICO registration number is ZB839825 and you can contact me at info@drjurgitasmiles.com.

Contact details you give me: your name, email address and telephone number.

Enquiry content: the treatments you're interested in, what you'd like to change about your smile, your preferred consultation type and anything else you choose to tell me.

Photographs and clinical files you choose to upload, including images of your teeth and, for referrals from colleagues, radiographs and referral letters.

Your marketing preference, and whether you accepted my terms.

Basic technical information needed to serve the site securely and to limit form abuse.

For enquiries, including information you choose to submit through my forms, I rely on your consent under Article 6(1)(a). You may withdraw that consent at any time, although this will not affect processing already carried out lawfully.

Where you become a patient, I process information because it is necessary to perform my contract with you under Article 6(1)(b), and to comply with the legal and professional obligations that apply to dental care under Article 6(1)(c).

I rely on my legitimate interests under Article 6(1)(f) to maintain the security, availability and integrity of this website and to prevent spam and misuse.

Photographs of your teeth, descriptions of dental concerns and clinical files are health data — a special category under UK GDPR. I collect it only because you have chosen to send it to me so that I can assess your enquiry and provide dental care.

I rely on your explicit consent for the enquiry itself, and on Article 9(2)(h) — the provision of health care and treatment — where the information forms part of your care with me.

To respond to your enquiry, referral or consultation request.

To assess, plan and provide dental treatment, and to keep the clinical records I am professionally required to keep.

To send you practice updates, but only where you have ticked to say you'd like them.

To protect the website from spam and misuse.

Submissions are stored in an access-controlled database. Uploaded photographs and files are stored in a private storage area that is not publicly reachable and can only be opened by the practice.

Access is limited to Jurgita Sybaite. I never publish a photograph of a patient without separate, written consent.

Submissions and uploaded photographs are stored within the European Economic Area, in Amazon Web Services' eu-west-1 region in the Republic of Ireland. Data is encrypted at rest and in transit. Ireland is covered by the UK's adequacy regulations, so this transfer needs no additional safeguard.

My processors are Lovable (website hosting and platform), Supabase (managed database and file storage) and Amazon Web Services (underlying infrastructure). Each acts under a written data processing agreement. Where a processor or its sub-processors transfer personal data to a country that is not covered by UK adequacy regulations — for example for support or backup operations — the transfer is protected by an approved safeguard, including the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

Notification emails about enquiries are received in my own Google Workspace mailbox. Photographs are never attached to email; they stay in private storage and are opened through links that expire.

Enquiries that do not become treatment are kept for up to 12 months and then permanently deleted. This is automatic: a scheduled job runs every night and erases the enquiry and its photographs once they reach 12 months old, and each run is logged.

Where you become a patient, your information is retained as part of your dental record for the period required by professional and legal obligations in the UK — generally at least 11 years for adults, or until a child's 25th birthday, whichever is longer. Enquiries that lead to treatment are marked as part of the clinical record and are kept on that basis rather than deleted at 12 months.

Newsletter subscriptions are kept until you unsubscribe.

Course waitlist and resource-request details are kept until you unsubscribe or ask me to remove them, and I review the list at least every two years.

If you request my teaching resources — for example by scanning a QR code at one of my lectures — I collect your name, email address and professional role and, if you choose to give them, your GDC number and country, together with which lecture you came from. I use these details to give you the resources and keep a record of your request.

I rely on your consent under Article 6(1)(a), given by ticking the box on the form.

When you request my teaching resources, you also join my course waitlist and I will email you about new courses and lectures. You can unsubscribe at any time using the link in any course email, at drjurgitasmiles.com/unsubscribe, or by emailing me.

When you join my course waitlist, I collect your name, email address and professional role, together with any country, learning interests or question you choose to provide. I also record the wording of your consent, its date and the source of your submission. I use this information to manage course interest, respond to your question and email you about my new courses and lectures. My lawful basis is your consent under Article 6(1)(a) of the UK GDPR. I only email you about courses and lectures if you have given that consent, in line with the Privacy and Electronic Communications Regulations (PECR). I store your details in my access-controlled teaching contacts system and receive a notification in my Google Workspace mailbox; I do not send an automatic reply. I do not pass course waitlist details to course venues, academies, sponsors or other organisers.

I keep your waitlist contact details while you remain subscribed. I review the course waitlist at least every two years. You can withdraw consent at any time by emailing info@drjurgitasmiles.com, using the unsubscribe link in a course email, or at drjurgitasmiles.com/unsubscribe. When you unsubscribe, your personal contact fields and saved course question are removed from the website contacts system. I retain a minimal suppression record and consent history so that I can honour your choice and demonstrate it. Copies of your original enquiry in my mailbox are managed separately; you may ask me to erase them where no legal obligation requires retention. Withdrawing consent does not affect processing already carried out lawfully.

I do not sell your data. I share it only with service providers who host this website, its database and its file storage on my behalf, under contract and only for that purpose; with laboratories or specialist colleagues where that is part of your treatment and you have been told; and where I am required to by law or by my regulator.

You have the right to ask for a copy of your data, to have it corrected, to have it erased where I am not required to keep it, to restrict or object to how I use it, to receive and transfer data you provided to me where the right to data portability applies, and to withdraw consent at any time.

To exercise any of these, email info@drjurgitasmiles.com. If you're unhappy with my response you can complain to the Information Commissioner's Office at ico.org.uk.

This site does not use advertising cookies. Reviews and Instagram pictures on the home page are fetched by the site, and Instagram pictures load from Instagram's servers, so Instagram may see your IP address when they load.

The hosting platform's built-in visitor analytics collects basic, aggregate information about visits and traffic sources so that we can understand how the site is used. It does not use non-essential cookies, profile you or follow you across other websites.

I do not carry out automated decision-making or profiling using your personal data.

Dr Jurgita Smiles Ltd is not required to appoint a Data Protection Officer. Questions about data protection can be sent to info@drjurgitasmiles.com.