At Smilesdotcom Dental Clinic, we respect your privacy and are committed to protecting the personal information entrusted to us by our patients, prospective patients, website visitors and other individuals who interact with us.

This Privacy Policy explains how Smilesdotcom Dental Clinic collects, uses, stores, protects and, where necessary, shares personal information when you visit our website, contact us, request an appointment, interact with our social media pages, respond to our advertisements, or receive services from us.

This Privacy Policy is intended to comply with applicable Nigerian data protection requirements, including the Nigeria Data Protection Act, 2023 (NDPA).

1. WHO WE ARE

Smilesdotcom Dental Clinic is a dental healthcare provider operating in Lagos, Nigeria.

For the purposes of applicable data protection legislation, Smilesdotcom Dental Clinic is responsible for determining how and why your personal information is processed.

Data Controller: Smilesdotcom Dental Clinic
Website: https://www.smilesdotcom.ng
Email: info@smilesdotcom.ng
Telephone/WhatsApp: +234 901 314 0324
Locations: Lekki and Gbagada, Lagos, Nigeria

Data Protection Contact/DPO: +234 901 314 0324
Privacy Email: info@smilesdotcom.ng

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

2. INFORMATION WE COLLECT

Depending on how you interact with Smilesdotcom, we may collect different types of personal information.

Information you provide to us

This may include:

• Full name
• Telephone number
• WhatsApp number
• Email address
• Residential or contact address
• Date of birth or age
• Appointment details
• Information about your dental concerns
• Information you provide when requesting a consultation
• Information provided during a dental appointment
• Payment and transaction information where applicable
• Information contained in correspondence with us
• Photographs, scans, X-rays or other clinical information where relevant to your treatment
• Information relating to a child where a parent or authorised guardian requests services on the child’s behalf

Information collected through our website

When you use our website, we may collect information such as:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Website interactions
• Approximate location information
• Referral source
• Cookies and similar technologies
• Other technical information necessary for website operation, security and analytics

We collect only information that is reasonably necessary for the purposes for which it is processed.

3. INFORMATION FROM FACEBOOK AND INSTAGRAM ADVERTISEMENTS

Smilesdotcom may use Meta advertising services, including Facebook and Instagram, to advertise our dental services and receive enquiries.

If you submit your information through a Facebook or Instagram lead form, we may receive information that you choose to provide, such as:

• Name
• Telephone number
• Email address
• Location
• Preferred service
• Appointment preferences
• Other information you voluntarily provide through the form

We use this information to respond to your enquiry, provide information about the requested service, arrange consultations or appointments, and follow up on your enquiry where appropriate.

We may also receive information through Meta about interactions with our advertisements, subject to Meta’s own privacy practices and applicable settings.

Meta processes information under its own privacy policies and terms. You should review Meta’s privacy information for details about how Meta processes personal information on its platforms.

Important: Submitting an enquiry through a Smilesdotcom advertisement does not automatically make you a patient of Smilesdotcom. A dental consultation and appropriate clinical assessment are required before treatment recommendations are made.

4. HOW WE USE YOUR INFORMATION

We may process your personal information for purposes including:

Providing dental services

• Registering you as a patient
• Arranging consultations and appointments
• Providing dental treatment
• Maintaining patient records
• Communicating with you about your treatment
• Providing treatment reminders and follow-up
• Processing payments
• Providing appropriate aftercare

Responding to enquiries

If you contact us through our website, WhatsApp, telephone, Facebook, Instagram or another communication channel, we may use the information you provide to:

• Respond to your enquiry
• Answer questions about our services
• Provide appointment information
• Contact you regarding a requested consultation
• Follow up on an enquiry

Marketing and communications

Where permitted by applicable law, we may use personal information to:

• Inform you about relevant Smilesdotcom services
• Send promotional information
• Inform you about campaigns or special offers
• Conduct customer communication and engagement
• Improve our marketing activities

Where consent is required, we will obtain appropriate consent before sending marketing communications.

You may withdraw your consent or opt out of marketing communications at any time.

5. HEALTH AND DENTAL INFORMATION

As a dental healthcare provider, we may process information relating to your dental and general health where this is necessary for providing healthcare services.

Examples may include:

• Dental history
• Medical history relevant to dental treatment
• Dental examination findings
• X-rays and scans
• Treatment plans
• Clinical photographs
• Medication information
• Allergies
• Treatment records

We recognise that health information requires a high level of protection.

We only collect and use health information where necessary and in accordance with applicable data protection and healthcare requirements.

We will not use your clinical information for unrelated purposes without an appropriate lawful basis.

6. CHILDREN’S INFORMATION

Smilesdotcom provides dental services to children.

Where information relating to a child is collected, we may obtain and process information from or through a parent, guardian or other person authorised to act on the child’s behalf, as appropriate.

We take additional care when processing children’s personal and health information and use it only for appropriate purposes such as providing healthcare, communicating with parents or guardians, maintaining clinical records and meeting applicable legal obligations.

Parents or authorised guardians may contact us if they have questions about information relating to a child in our care.

7. LAWFUL BASIS FOR PROCESSING PERSONAL INFORMATION

We process personal information only where there is an appropriate lawful basis under applicable data protection law.

Depending on the circumstances, this may include:

• Consent
• Performance of a contract or steps taken at your request before entering into a contract
• Compliance with a legal obligation
• Protection of vital interests
• Public interest, where applicable
• Legitimate interests, where applicable and where your rights and interests do not override those interests

The Nigeria Data Protection Commission identifies these as recognised lawful bases for processing personal data under the Nigerian data protection framework. National Drug Law Enforcement Agency

Where we rely on consent, you may withdraw that consent, subject to any legal or other legitimate reason why we may need to continue processing certain information.

8. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information.

We may share personal information where necessary with:

• Healthcare professionals involved in your care
• Dental laboratories and other treatment providers where necessary
• Payment providers
• IT and website service providers
• CRM and communication platforms
• Appointment and booking systems
• Marketing and advertising service providers
• Professional advisers
• Regulators or government authorities where required by law
• Other third parties where you have provided appropriate consent or where another lawful basis applies

Where third-party service providers process personal information on our behalf, we take reasonable steps to ensure that appropriate data protection and security arrangements are in place.

9. META, SOCIAL MEDIA AND THIRD-PARTY SERVICES

Smilesdotcom may use third-party platforms and services such as:

• Facebook
• Instagram
• WhatsApp
• Google services
• Website analytics services
• Advertising platforms
• Website hosting providers
• Appointment or booking systems
• Email and SMS communication services

These organisations may process personal information in accordance with their own privacy policies and terms.

Where third-party services process information on our behalf, we seek to ensure that appropriate contractual and security safeguards are in place.

10. COOKIES AND WEBSITE TECHNOLOGIES

Our website may use cookies and similar technologies to:

• Keep the website functioning properly
• Remember preferences
• Understand how visitors use our website
• Improve website performance
• Measure marketing effectiveness
• Support advertising and remarketing activities where applicable

Where required, we will provide appropriate cookie controls and allow users to manage their cookie preferences.

The NDPC’s guidance specifically recognises the importance of providing appropriate privacy and cookie notices on websites and giving data subjects appropriate choices concerning cookies. National Drug Law Enforcement Agency

11. DATA SECURITY

We take reasonable technical and organisational measures to protect personal information against:

• Unauthorised access
• Unauthorised disclosure
• Loss
• Destruction
• Alteration
• Accidental damage
• Unlawful processing

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

Where a data security incident occurs, we will respond in accordance with applicable legal and regulatory requirements.

12. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing healthcare services, maintaining appropriate clinical records, complying with legal and regulatory obligations, resolving disputes and enforcing agreements.

The exact retention period may vary depending on:

• The type of information
• The reason it was collected
• Whether you are a patient
• Legal and regulatory requirements
• Clinical record-keeping requirements
• Our legitimate business needs

When personal information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it.

The NDPA’s data protection principles include storage limitation, meaning personal information should not be retained for longer than necessary for the relevant purpose. National Drug Law Enforcement Agency

13. YOUR DATA PROTECTION RIGHTS

Subject to applicable legal conditions and limitations, you may have rights including:

Right to be informed

You have the right to receive clear information about how your personal information is processed.

Right of access

You may request access to personal information we hold about you.

Right to rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to object

You may have the right to object to certain types of processing.

Right to restriction

You may, in certain circumstances, ask us to restrict how we process your personal information.

Right to data portability

Where applicable, you may request your personal information in a structured and commonly used format.

Right to erasure

In certain circumstances, you may ask us to delete your personal information.

This right may be subject to legal, regulatory, clinical or other legitimate requirements that require us to retain certain information.

Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent.

Withdrawal of consent does not affect processing that took place before the withdrawal.

Right to complain

If you believe that your privacy rights have been infringed, you may contact us first so that we can investigate and address your concern.

You may also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

The NDPC recognises rights including access, rectification, objection, restriction, portability, erasure and the right to report concerns to the supervisory authority. National Drug Law Enforcement Agency

14. HOW TO EXERCISE YOUR RIGHTS

To exercise any of your data protection rights or ask a question about how we use your information, contact:

Smilesdotcom Dental Clinic
Email: info@smilesdotcom.ng
Telephone/WhatsApp: +234 901 314 0324

Please provide enough information for us to identify you and understand your request.

We may need to verify your identity before responding to certain requests in order to protect your information from unauthorised disclosure.

The NDPC’s own data-subject-access guidance confirms that individuals can request access to personal information held about them and information about relevant processing and retention. NDPC Forms

15. MARKETING COMMUNICATIONS

If you have agreed to receive marketing communications from us, we may contact you about relevant dental services, promotions, educational information or other Smilesdotcom activities.

You can stop receiving marketing communications at any time by:

• Following the unsubscribe instructions in an email;
• Replying to an applicable SMS or WhatsApp communication;
• Contacting us directly; or
• Using any available preference-management option.

Please note that opting out of marketing communications does not prevent us from sending essential service-related communications, such as appointment confirmations, treatment-related messages or other necessary communications.

16. INTERNATIONAL DATA TRANSFERS

Some of our technology, communication, advertising, hosting or service providers may process information outside Nigeria.

Where personal information is transferred across borders, we will take appropriate steps to ensure that the transfer and processing are carried out in accordance with applicable data protection requirements.

This may include appropriate contractual, organisational or other safeguards where required.

17. THIRD-PARTY LINKS

Our website and social media channels may contain links to third-party websites, services or platforms.

We are not responsible for the privacy practices, security or content of third-party websites.

We encourage you to review the privacy policy of any third-party service before providing your personal information.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes in our services
• Changes in technology
• Changes in how we process personal information
• Changes in applicable laws or regulations
• Changes in our business practices

When we make significant changes, we may update the “Last Updated” date at the top of this page.

We encourage you to review this page periodically.

19. CONTACT US

If you have questions, concerns or requests relating to this Privacy Policy or the way Smilesdotcom handles your personal information, please contact us:

Smilesdotcom Dental Clinic

Website: https://www.smilesdotcom.ng
Email: info@smilesdotcom.ng
Phone/WhatsApp: +234 901 314 0324
Locations: Lekki and Gbagada, Lagos, Nigeria

Your Privacy Matters

At Smilesdotcom Dental Clinic, we believe that good healthcare includes protecting the privacy and dignity of the people we serve.

We are committed to handling personal information responsibly, transparently and securely.

Last Updated: 7 October 2026