This Privacy Policy explains how Surprise Smile Legal processes personal data on surprisesmileleague.click. It applies to visitors, prospective clients, and other individuals who contact us through the website. The policy describes what we collect, how we use it, when we share it, and the choices and rights that may be available under applicable law.
Depending on applicable law, users may have rights to access, correct, delete, restrict, or object to certain processing of their personal data. Some rights may not apply where we must keep information for legal, regulatory, or evidentiary reasons. We assess each request in light of the applicable legal framework and the information involved.
To protect personal data, we may need to verify a request before responding. We will review the request, confirm whether an exception applies, and provide a response within the period required by law or as soon as reasonably practicable. If we cannot act on a request in full, we will explain the reason where permitted.
We retain personal data for the period needed to respond to inquiries, provide requested services, maintain records, meet legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete it or anonymize it where feasible. Retention periods may vary depending on the type of data and the reason it was collected.
We may update this Privacy Policy from time to time. The version posted on the website is the current version. If a change is material, we will take reasonable steps to draw attention to it, such as by posting a notice on the site or otherwise indicating that the policy has been revised. Continued use of the website after an update means the revised policy applies from its effective date.
Where the GDPR applies, we process personal data only on a lawful basis such as consent, contract necessity, legal obligation, or legitimate interests, depending on the context. We apply data minimization, purpose limitation, and storage limitation principles. If special category data is provided in a message or form, it is handled only where a lawful basis exists and additional safeguards are appropriate.
Where the GDPR applies, users may have the right to access their data, correct inaccurate data, request deletion, restrict processing, object to processing based on legitimate interests, and request portability in appropriate cases. If processing is based on consent, consent may be withdrawn for future processing. Users may also lodge a complaint with the competent supervisory authority.
We may collect identification details, contact details, inquiry content, service-related information, technical data, and usage data. In a legal services context for retirees, this may also include information a user chooses to provide about a matter, request, or communication preference. We limit collection to what is reasonably needed for the stated purposes.
We collect personal data when users submit forms, send messages, request information, or otherwise interact with the website. We also receive certain technical data automatically through the operation of the site, such as device and browser information, log data, and cookie-related data. Where a user provides information about a legal matter, we process only the details included in that communication.
We may use session cookies, which expire when the browser is closed, and persistent cookies, which remain for a limited period. Cookies may be necessary for core site functions, help remember user preferences, or support basic measurement of site performance. We do not rely on cookies for purposes that are unrelated to the operation of the website without a lawful basis where required.
Users may block or delete cookies through their browser settings. Some cookies are necessary for the site to function and may not be fully disabled without affecting basic features. Where the site provides a cookie notice or preference tool, users may use it to manage non-essential cookies. Browser settings remain the primary control for most cookie choices.
Use the contact details below for privacy questions or rights requests.
We use personal data to operate the website, respond to inquiries, manage communications, provide requested information or services, maintain security, prevent misuse, analyze basic site performance, comply with legal obligations, and keep records related to our business activities. Where required, we rely on a lawful basis appropriate to the purpose of processing.
We may share personal data with service providers that support website hosting, security, maintenance, analytics, communications, or other operational functions. These parties may process data only on our instructions or as otherwise permitted by law. We may also share information with professional advisers or other counterparties where needed to handle a request or service engagement.
We may disclose personal data when required to comply with law, a court order, a lawful request from a public authority, or to protect rights, safety, or the integrity of the website and services. We may also share information where necessary to establish, exercise, or defend legal claims. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
