CONSENT TO PERSONAL DATA PROCESSING

Last updated: August 29, 2026

This is a working draft. The wording, legal basis, retention periods, and legal details must be reviewed by a legal professional or data protection officer before publication.

1. Meaning of Consent

By selecting the checkbox and submitting a request, the user confirms that they have read this document and consent to the processing of the specified personal data by Private Medical Unitary Enterprise "Smile Factory" for the purpose of responding to their request.

2. Personal Data Processed

The following personal data may be processed to handle a request:

• Name
• Phone number
• Email address
• Preferred messaging application
• Selected doctor or service
• Message content
• Technical request data and consent records

3. Purpose of Processing

Personal data is processed to handle requests, contact users, clarify relevant details, and arrange follow-up consultations.

Personal data will not be used for unrelated purposes without a separate legal basis or the user's consent.

4. AI Chat

Before using the AI Chat, users confirm that they understand that the text they enter is transmitted through OpenRouter to an external AI provider.

Users should not enter personal or medical information into the AI Chat. Conversation history is not stored in the project's database.

5. Telegram Notifications

After a request is saved in the database, authorized Clinic staff may receive a notification in a private work-related Telegram chat.

The notification contains only the user's name and a link to the corresponding request in the administrative panel.

Contact details, message content, and attached files are not transmitted through Telegram.

6. Medical Scans and Files

Public forms do not accept patient scans, medical images, or other patient-related files.

Server-side and administrative file storage functionality remains available separately and is not accessible through public forms.

7. Withdrawal of Consent

Users may withdraw their consent at any time by contacting book_visit@perfectsmile.by.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal was received. Certain personal data may continue to be processed where required by the Data Controller's legal obligations.