Legal

Privacy Policy

Last updated: 8 July 2026

1. Controller

The data controller for personal data processed via this site is Smiles & Miles Ltd, company number 13711626, registered office 276 Chase Road, Suite 7-0523 Lonsto House, London, England, N14 6HA. Contact: info@smilesandmiles.co.uk.

2. What we collect

  • Contact details you provide (name, email address, phone if given).
  • Purchase details (products bought, order value, VAT status).
  • Enquiry content (messages you send us, consultation notes).
  • Payment metadata from Stripe (last 4 digits, card brand, country) — we never receive or store full card numbers.
  • Basic technical data (IP, browser, device) and cookie data — see section 7.

3. Lawful bases (UK GDPR)

  • Contract — to deliver Guides and Services you have purchased.
  • Legal obligation — to keep tax, VAT and accounting records (6 years).
  • Legitimate interests — to secure the site, prevent fraud, and reply to enquiries you send us.
  • Consent — for optional analytics cookies and marketing emails.

4. Who we share it with

We use trusted processors acting on our instructions: Stripe Payments Europe, Ltd. (payments), our email delivery provider, our hosting provider, and our accountant. We do not sell your data and we do not pass individual patient enquiry details to clinics. Some processors may transfer data outside the UK; where they do, we rely on UK IDTA / Standard Contractual Clauses.

5. How long we keep it

Order and invoice records: 6 years (HMRC). Enquiry correspondence: up to 24 months after last contact. Marketing lists: until you unsubscribe.

6. Your rights

You have the right to access, correct, erase, restrict or port your personal data, to object to processing, and to withdraw consent at any time. Email info@smilesandmiles.co.uk to exercise any of these. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

7. Cookies

We use strictly-necessary cookies to make the site work and, only with your consent, optional analytics cookies to understand how the site is used. Stripe sets its own cookies during checkout for fraud prevention; these are essential to processing your payment.

8. Changes

We will post any material changes to this policy on this page and update the "last updated" date above.

← Back to home