smilenzo.com

Privacy Policy

Last updated: October 2026

1. Who we are

Smilenzo is the controller of the personal data described in this policy.

Smilenzo is a referral and matching service. We are not a medical provider and we do not diagnose or treat.

Contact for any privacy question or request: contact@smilenzo.com.

2. The data we collect

Account details: your full name, email address, phone or WhatsApp number, and a password (stored only in hashed form).
Your treatment request: the treatment category and specific treatments you are interested in, your preferred timeframe, your budget if you give one, any add-on services you select (for example airport pickup or an interpreter), and anything you write in the notes field.
Messages: what you send us by email, WhatsApp or the chat assistant on the site, and a short record of our contact with you.
Newsletter: your email address, if you subscribe.
Clinic partners: the clinic name, contact person, email, phone, city, website and the treatments and services the clinic offers.
Technical data: a session cookie that keeps you signed in, your cookie choices, and, only if you accept analytics cookies, usage statistics collected by Google Analytics.

We ask you not to send medical records, scans or photographs through the request form. If a clinic needs them, you share them with the clinic directly.

3. Health-related data

Telling us which treatment you are considering is information about your health. We use it only to match you with a suitable clinic and to follow your request. We process it on the basis of your explicit consent, which you give when you submit a request, and you can withdraw that consent at any time by writing to us.

4. Why we use your data, and on what basis

To handle your request and match you with a clinic (steps taken at your request before a contract, and your consent for health-related data).
To run your account so you can track your request (performance of our service to you).
To reply to your messages (our legitimate interest in answering you).
To send the newsletter (your consent; every email has an unsubscribe option).
To measure how the site is used (your consent, through the cookie banner).
To keep records required by law, such as accounting records of commissions (legal obligation).

5. Who receives your data

Partner clinics in Turkey. When your request is matched, the clinic receives your name, contact details and treatment request so it can contact you and prepare a quote. Clinics are independent and are responsible for the data they then hold about you as their patient.
Service providers that work on our behalf: our hosting and database provider (Hostinger), our email delivery provider (Resend), Google (Analytics, only with your consent, and web fonts), and Anthropic, which powers the chat assistant. Messages you type into the chat assistant are sent to Anthropic to generate a reply, so please do not put sensitive details in the chat.
Authorities, where the law requires it.

We do not sell your data.

6. Transfers outside your country

Smilenzo is operated from Morocco, partner clinics are in Turkey, and some service providers are in the United States or the European Union. This means your data is transferred outside the country where you live. If you are in the European Economic Area or the United Kingdom, these countries may not offer the same level of data protection as your own. We send your request to a clinic in Turkey only because you ask us to arrange that contact, and on the basis of your explicit consent.

7. How long we keep it

Account and request data: for as long as your account is open, and up to 24 months after your last activity.
Records of completed referrals and commissions: for the period required by accounting and tax law.
Newsletter subscription: until you unsubscribe.

You can ask us to delete your account and request data earlier at any time.

8. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or send it to you in a portable format. You can withdraw a consent at any time. To use any of these rights, write to contact@smilenzo.com. We reply within one month.

These rights apply under Moroccan Law 09-08 on the protection of personal data and, where it applies to you, under the EU or UK General Data Protection Regulation. You also have the right to complain to a data protection authority: the CNDP in Morocco, or the authority of the country where you live.

9. Security

The site is served over an encrypted connection, passwords are stored hashed, and access to request data is limited to the people who need it to handle your case. No system is perfectly secure, and we will tell you and the relevant authority if a breach puts your data at risk.

10. Children

The service is for adults. We do not knowingly collect data from anyone under 18.

11. Cookies

Details of the cookies we use and how to change your choices are in our Cookie Policy.

12. Changes to this policy

If we change this policy we will update the date at the top of this page. If a change is significant, we will tell account holders by email.