Privacy Policy

1. Data controller and contact

Brand: StarSmile

Data controller: [legal company or sole-trader name required]

Registered address: [required]

Company registration or tax number: [required]

Privacy email: censtar.hu@gmail.com

Phone: +36 70 671 39 93

Clinic/contact location: Budapest, Kecskeméti u. 13, 1053, Hungary

2. Personal data we collect

• Identity and contact details, including your name, phone number, email address and preferred contact method.
• Information you enter in website contact, appointment or Meta lead forms, including your consultation request, preferred date and time, and message.
• Photos, dental images, documents and other files you choose to upload for an online consultation.
• Communications and follow-up records when you contact us or we respond by phone, SMS, email or WhatsApp.
• Technical and usage information, such as page views, browser/device information, cookie choices and advertising attribution data, where permitted.

3. Why and how we use personal data

• To answer questions, arrange consultations and appointments, and assess or follow up on clear-aligner and dental treatment inquiries.
• To communicate about the inquiry you submitted and provide information you requested.
• To operate, secure and improve the website and prevent misuse.
• To measure website and advertising performance where you have consented to non-essential cookies or similar technologies.
• To establish, exercise or defend legal claims and comply with applicable legal obligations.

4. Meta/Facebook/Instagram lead forms

If you submit a lead form on Facebook, Instagram or another Meta service, Meta provides the information you entered to StarSmile. We use it to respond to your request, discuss a consultation and provide information about relevant clear-aligner services. Meta also processes information under its own privacy policy.

Depending on the choices shown on the form and applicable law, we may contact you by phone, SMS, email or WhatsApp about your consultation or treatment inquiry. Marketing messages are sent only where legally permitted or where you have given the required consent. You may withdraw consent or ask us to stop at any time.

5. Legal bases for processing

• Steps requested before entering into a contract and performance of a contract: responding to your consultation or treatment request and arranging an appointment.
• Consent: optional marketing messages, non-essential analytics/advertising cookies, and processing information you voluntarily provide where consent is required. Consent may be withdrawn at any time without affecting earlier lawful processing.
• Legitimate interests: handling ordinary inquiries, protecting the website, preventing misuse, maintaining service records, and defending legal claims, balanced against your rights.
• Legal obligation: keeping or disclosing information where Hungarian or EU law requires it.
• Where information reveals health or dental details, we process it only with your explicit consent or another applicable exception under Article 9 GDPR. Please do not upload more health information than is necessary for your inquiry.

6. Retention

• General contact and Meta lead inquiries: up to 12 months after the last meaningful interaction, unless you become a patient or a longer period is needed for a legal claim.
• Unsuccessful appointment requests and related uploaded files: up to 90 days after the request is closed.
• Consent and objection records: for the period needed to demonstrate compliance, generally up to 5 years after the consent is withdrawn or the communication ends.
• Cookie choice: stored in your browser until you change it, clear browser storage, or it is replaced.
• If treatment begins, medical/dental records are retained for the periods required by applicable Hungarian healthcare law; the treating provider will give you the relevant patient privacy information.
• Data may be kept longer where required by law or necessary to establish, exercise or defend legal claims, then securely deleted or anonymised.

7. Service providers and recipients

We disclose personal data only when necessary to operate the service, respond to your inquiry, meet legal duties or protect legal rights. Verified service providers used for this website include Lovable (website hosting, managed storage and transactional email), Cloudflare (content delivery, security and location-based consent checks), Meta Platforms (lead ads and consent-based Pixel measurement), and Google Maps when you choose to open the clinic map.

These providers may process data as processors or independent controllers under their own terms. We may also share relevant information with authorised professional advisers, public authorities or a treating dental provider where legally required or necessary for your requested care. We do not sell your personal data.

8. International data transfers

Some providers, including Meta, may process data outside Hungary or the European Economic Area. Where GDPR requires it, transfers rely on an adequacy decision, Standard Contractual Clauses or another lawful safeguard. You may contact us for information about applicable safeguards.

9. Cookies and analytics

The website uses essential storage for functions such as language and cookie choices. With your consent, the Meta Pixel measures page visits and advertising performance and may use cookies or similar technologies. In consent-required regions, the Pixel is not loaded unless you accept. You can reject it or change your choice at any time using Cookie settings in the footer. Rejecting non-essential cookies does not prevent you from using the website.

10. Your GDPR rights

• Request access to your personal data and a copy of it.
• Request correction of inaccurate or incomplete data.
• Request deletion where the legal conditions are met.
• Request restriction of processing.
• Object to processing based on legitimate interests and object at any time to direct marketing.
• Receive data you provided in a structured, commonly used, machine-readable format where data portability applies.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.
• Lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) at naih.hu, or with another competent supervisory authority.

11. How to exercise your rights

Email censtar.hu@gmail.com with the subject “Privacy request”, or use the contact details above. We may ask for information needed to verify your identity. We normally respond within one month, subject to the extensions permitted by GDPR.

12. Changes to this notice

We may update this notice when our services or legal obligations change. The latest version and update date will remain available at this permanent address.