Privacy policy

Who we are

ishSmile is operated by XRP Health Limited. XRP Health Limited is the business contact responsible for the use of personal information described in this notice. For privacy questions or requests, email info@ishsmile.com or call 0207 173 5298. Our London business addresses are:

Brick Lane: 4 Brick Lane, London E1 6RF.

Belsize Road: Unit 2, 131-143 Belsize Road, London NW6 4BR.

Information you share and information used by the website

When you contact us, we receive the contact details and information you choose to provide, such as your name, email address, phone number, and enquiry. Please avoid sending sensitive health information in a general website enquiry.

When you load the online booking form, your browser connects to XRP Clinical Platform at xrp-clinical-platform-web.vercel.app. Information you enter in that form is sent to the booking service, rather than stored in this website's page. Read the information and notices shown in the booking service before submitting details.

Interactive location maps connect to Google Maps only when you select Show interactive map. Google receives technical information such as your IP address and browser details, and controls information and storage within its map. You can use the written address or directions link instead.

Our hosting and booking services receive technical information needed to deliver and protect their services, such as IP addresses, browser information, request times, and requested pages. Cookie choices are described separately in our cookie policy.

The default website FAQ assistant keeps messages in the current page's memory. It does not send questions to an AI service or save a conversation history. Please do not enter personal or health information. If a connected assistant is offered later, its data use will be explained before you open it.

Why information is used

We use enquiry and appointment information to respond to you, take steps you request before booking, arrange an appointment, and manage the service you have booked. The relevant basis is taking steps before, or performing, a contract. For general enquiries and service security, we rely on legitimate interests in responding to people and operating a reliable website. Where records must be kept to meet a legal obligation, that obligation is the basis.

Permission to publish a review or photograph is separate from booking. We use consent for content you agree to share publicly; you can contact us to withdraw that permission. Optional analytics and advertising tracking will require your choice before activation. They are not currently enabled on this website.

This website does not make a clinical assessment or an automated decision about your eligibility for treatment. Any health information required by a treatment provider needs appropriate privacy information and a separate lawful basis for sensitive data at the point of collection.

Services that receive information

Information may be accessible to the people handling your enquiry or appointment, the relevant service location, and service providers supporting hosting, booking, communications, or payment where those services are used. We do not publish booking details as reviews or send FAQ questions to an advertising service.

An embedded form or an external link connects you to another service. Providers may process information in countries outside the UK. Contact us for details of the providers, processing locations, and safeguards relevant to your information. Do not assume that a London appointment venue means every online service stores data in the UK.

How long information is kept

We keep information for the purpose it was collected, including handling an enquiry, managing an appointment, resolving a complaint, and meeting applicable record-keeping obligations. Retention depends on the type of record, whether an issue remains open, and any legal requirement to keep it. Ask us for the retention period applying to your record. Records held by the booking or treatment service may have a different retention schedule.

Website FAQ messages are held only in the current page's memory. Your cookie preference is stored in your browser for up to six months. A published review remains visible while permission continues and the review is relevant; contact us if you want it removed.

Your choices and rights

Depending on the information and circumstances, you can ask to access it, correct it, erase it, restrict its use, object to processing, or receive a portable copy. You can withdraw consent where consent is the basis; doing so does not change the lawfulness of earlier use. These rights have conditions and are not absolute.

Send requests to info@ishsmile.com. We may need proportionate information to confirm your identity before sharing a record. If you are unhappy with how your information is handled, contact us first if you wish. You can also complain to the UK Information Commissioner's Office.

Keeping this notice current

We will update this notice when the website's services or use of information changes. The date below identifies this version. Contact us if you would like more detail about an enquiry, booking, or the treatment provider's privacy information.