Privacy policy

Who is responsible for the data

Owner of the website and database: the fictional dental clinic "Smile on Jaffa" (a demo clinic); contact person: Dmitry Vilensky (it2business), 120 Jaffa St., 2nd floor, Jerusalem.

Phone: 055-77-49-700. Email for data questions: vilensky.dmitry@gmail.com.

What data is collected

• Data you enter in the site's forms: for booking — name, phone number, service, dentist, date and time, comment and access code; in the callback form — name, phone and a convenient time; in the "My appointments" patient area — phone and access code to view and cancel appointments. The page language and the time of sending are also stored.
• Health-related comments are sensitive data; they are stored only to organise the appointment.
• Data when you contact us via WhatsApp, phone or email: whatever you tell us yourself in the conversation.
• Technical data automatically collected by the hosting provider as anonymous visit statistics: pages, time, device and browser type, country. This data does not identify you.
• The language is determined by the page address. No advertising cookies are used.

Why the data is needed and on what basis

The data is needed to answer your request, book and arrange your appointment and, if you become a patient, to perform the agreement. Legal basis: your consent, given by sending a form or contacting us, and for patients also performance of the agreement and tax law requirements.

You are not obliged to provide the data. Without a name and phone number we cannot contact you or book your appointment.

The data is not used for mailings without separate consent and is not sold.

Where the data is stored and who has access

Requests and appointments are stored in the site's secure database (Lovable Cloud / Supabase) on a cloud provider's servers; the site is hosted by Lovable. The servers may be located outside Israel, in countries with an adequate level of data protection. The clinic owner and staff who need it for their work have access to the data; access is protected by passwords and permissions. The connection to the site is encrypted (https).

Who the data is shared with

The data is not shared with third parties except technical service providers that process it on our behalf and only to run the site: hosting and database (Lovable, Supabase), email, and, when you contact us via WhatsApp, Meta under its own policy. The site developer it2business has technical access to the database only to support the site and does not use the data for other purposes. Data may be disclosed when required by law.

How long the data is kept

Requests that did not lead to an agreement are kept for up to 24 months after the last contact and then deleted. Patient data is kept for the duration of the agreement and a further 7 years to the extent required for accounting and tax records. At your request the data is deleted earlier unless the law requires us to keep it.

Your rights

Under the Protection of Privacy Law you may:

• find out what data about you is stored and get a copy;
• ask us to correct inaccurate data;
• ask us to delete the data or stop using it;
• withdraw your consent to processing and unsubscribe from mailings.

To do so, write to vilensky.dmitry@gmail.com or call 055-77-49-700. We will reply within 30 days. If you believe your rights have been violated, you can contact the Privacy Protection Authority at gov.il.

Security

We use connection encryption, row-level access restrictions on the database, server-side data validation and protection of forms against automated submissions. There is no absolute protection on the internet, but we apply measures accepted for sites of this size and, in the event of a data breach, will notify you and the regulator as required by law.

Children

The site is intended for adults and for parents booking appointments for their children; children's details are entered by the parents. The site does not knowingly collect data of persons under 18 without parental consent.

Changes to this policy

This policy may be updated. Last updated: 10.11.2026. Significant changes are published on this page.