Privacy Policy
Last updated: 23 October 2026
Who we are
DentLux Dental Clinic, Leoforos Larnakos 49, Aglantzia, Nicosia 2101, Cyprus, is the controller of the personal data collected through this website. Contact: info@dentluxclinic.com, +357 77 773 003.
What data we collect
Appointment form: name, phone number, requested service, preferred date and any notes you add. Newsletter: your email address. If you contact us by phone, WhatsApp or Viber, we process the details you share with us. Website statistics are collected anonymously, without cookies or personal identifiers.
Why we process it
To arrange and confirm appointments, to reply to your enquiries, to send occasional dental tips and offers if you subscribed (you can unsubscribe with one click in every email), and to understand anonymous website usage so we can improve it.
Legal basis
For the newsletter, your consent. For appointment requests, steps taken at your request before treatment. For health information — the service you are interested in, the notes you add, your medical file — Article 9(2)(h) GDPR, i.e. the provision of health care by health professionals bound by medical confidentiality, and, where we ask for it, your explicit consent. For anonymous statistics, our legitimate interest. All in line with the EU General Data Protection Regulation (GDPR).
Who receives your data
Our partner dentist, Details Dental, when we refer you or when they take over your treatment. They receive only what is needed for that and are also bound by medical confidentiality. In addition, trusted processors that help us operate: Cloudflare (hosting), Google Firebase (secure storage), Resend (email delivery), Stripe (shop payments), WhatsApp Business by Meta (when we talk on WhatsApp), the provider of our AI phone assistant (call transcription — see below) and Microsoft Clarity, only if you accept cookies. They process data on our instructions only. Where data is transferred outside the EU, it is protected by the European Commission’s standard contractual clauses. The Google Maps map loads only after you choose to show it (Google then receives your IP address). If you message us on Viber, that service processes your messages under its own terms. We never sell your personal data.
Medical records
The appointment form may contain health information that you choose to give us — for example, the service you are interested in or notes you add. We use it only to arrange your appointment and contact you; we never use it for advertising or analytics. Clinical records are kept at the clinic under medical confidentiality and applicable healthcare legislation.
Phone assistant
When you call the clinic, your call may be answered by a digital (AI) assistant. It notes your name, phone number and the reason for your call so that we can call you back. The call is recorded. The recording, the transcript and a short summary are kept for 90 days and then deleted automatically. The assistant’s provider may process the call outside the EU, under the European Commission’s standard contractual clauses. If you would rather not speak with the assistant, message us on WhatsApp or at info@dentluxclinic.com.
Smile Preview (AI simulation)
On dentluxclinic.com/smile you can see an AI simulation of your smile with veneers or whitening. Face detection runs only on your device. To create the simulation, only a close-up of the mouth area is sent to Cloudflare Workers AI (Cloudflare, our processor), which returns the image straight away; we do not store the photo or the result, and the simulation stays on your device unless you save or share it yourself. To prevent misuse, your IP address is kept for 24 hours to count the attempts. If you then ask for a free assessment, we receive only your name, phone number, preferred time and the style you tried — not your photo. The simulation is indicative and is not a diagnosis.
Retention
Medical file: for as long as healthcare legislation requires for medical records. Appointment requests that did not lead to a visit: up to 24 months. Phone assistant transcripts and call summaries: 90 days. Newsletter addresses: until you unsubscribe.
Your rights
You may request access, correction, deletion or portability of your data, object to processing and withdraw consent at any time by emailing info@dentluxclinic.com. You may also lodge a complaint with the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy).
Cookies
We use no advertising cookies and we never sell or share data for advertising. Our own statistics stay anonymous, use no cross-site identifiers and honour your browser’s “Do Not Track” setting. Only if you accept the cookie banner do we load two analytics tools that use cookies: Microsoft Clarity, which records how the page is used — mouse movement, clicks and scrolling — so we can find and fix what confuses people, and Google Analytics (Google Ireland), which shows us which pages are visited, with advertising features switched off. Neither runs unless you accept, you can decline at any time, and nothing they collect is linked to your medical file.
Changes
We may update this policy from time to time; the latest version will always be published on this page.