Legal
Privacy Policy & Personal Data Processing
Last updated: July 25, 2026
At Smiluxe Clinic we value and protect the personal information of everyone who contacts us. This policy explains how we collect, use, store and protect your personal data, in accordance with Colombian data-protection law (Ley 1581 of 2012, Decreto 1377 of 2013 and related regulations — Habeas Data).
Data controller
The party responsible for processing your personal data is:
Legal name: Smiluxe Clinic
Tax ID (NIT): 1152448653-6
Address: Tv. 39B #70-53, Laureles - Estadio, Medellín, Colombia
Email: cristian.tyoa@gmail.com
Phone / WhatsApp: +57 302 343 7947
Website: smiluxeclinic.com
Data we collect
We only collect data you provide voluntarily through our forms, WhatsApp, email or social media:
Identification and contact data: name, email and phone / WhatsApp number.
Information you choose to share in your message or evaluation: reason for consultation, preferences and travel availability.
Dental-health information and photos of your smile, only if you choose to send them by WhatsApp for an evaluation. No form on this site asks you for them (see point 04).
Purpose of processing
We use your personal data to:
Respond to your enquiries and stay in touch via WhatsApp, email or call.
Schedule and coordinate your evaluation or video consultation.
Prepare a preliminary treatment plan based on the information you share.
Send you information about our treatments and services when you authorise it.
Comply with legal, accounting and medical-record obligations where applicable.
Sensitive data
Photos and dental-health information are considered sensitive data under the law. No form on this website asks you for them: if you choose to share them, you do so via WhatsApp, whose end-to-end encryption protects the transfer. Providing them is entirely optional and does not affect the care you receive.
Photographs you send for a preliminary evaluation are used for that sole purpose and are not added to any database, medical record or clinic archive: once the evaluation is complete the conversation is deleted, so we keep no archive of patient photographs. If you decide to begin treatment, the handling of your clinical photographs is then governed by the informed consent form you sign in person at the clinic, which sets out their use in detail. No photograph is ever published — in our case gallery or on social media, for example — without that written authorisation.
Data retention
We keep your data for as long as necessary to fulfil the purpose it was collected for and any applicable legal obligations (for example, those relating to medical records). Photographs sent for a preliminary evaluation are not archived: their processing ends with the evaluation and the conversation is deleted. Once the purpose has ended and no legal retention duty applies, we delete or anonymise it.
Processors and transfers
To provide our services we may rely on technology providers acting as data processors (for example, email, appointment-calendar, WhatsApp messaging, hosting and web-analytics services). These providers only process data under our instructions and with appropriate security measures. We do not sell or trade your personal data.
Your rights as data owner
As the owner of the data, at any time you may:
Access, update and correct your personal data.
Request proof of the authorisation granted for its processing.
Be informed about how it has been used.
File complaints with the Superintendence of Industry and Commerce (SIC).
Revoke your authorisation and/or request deletion of your data, where no legal retention duty applies.
Access your personal data free of charge.
How to exercise your rights
To exercise any of these rights, write to us at cristian.tyoa@gmail.com with your full name, your request and a contact method. We will respond within the legal timeframes: enquiries within ten (10) business days and claims within fifteen (15) business days of receipt.
Authorisation & consent
By submitting any of our forms and ticking the authorisation box, you freely, expressly and knowingly agree that Smiluxe Clinic may process your personal data in accordance with this policy. If you do not agree, please do not send your data through these channels.
Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The current version will always be published at https://smiluxeclinic.com/en/privacy/, with its update date.