Legal

Privacy Policy

Effective July 2, 2026

This Privacy Policy describes how Smillin Healthcare Tech ("Smillin," "we," "us") collects, uses, stores, and protects your personal information when you use our website, newsletter, and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following types of information:

Email address — provided when you subscribe to our daily newsletter.
Usage data — pages visited, time spent, click patterns, and device/browser information collected via analytics tools.
Cookies and similar technologies — used for authentication, preferences, and analytics (see Section 5).
Correspondence — messages you send to us via email or contact forms.

We do not knowingly collect personal information from children under 13.

2. How We Use Your Information

We use your information to:

Deliver our daily newsletter and Service updates to your inbox.
Maintain and improve the Service, including diagnosing technical issues.
Analyze readership trends and measure engagement.
Respond to your inquiries and provide customer support.
Prevent abuse, fraud, and unauthorized access.
Comply with legal obligations.

We do not sell your personal information to third parties.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our legal bases are:

Consent — when you voluntarily subscribe to the newsletter.
Legitimate interests — for analytics, security, and Service improvement, balanced against your rights.
Legal obligation — when required to comply with applicable law.

4. Data Sharing & Third Parties

We share information only with:

Email delivery providers — to send newsletters (e.g., our backend email infrastructure).
Analytics providers — to understand Service usage (e.g., privacy-respecting analytics where possible).
Hosting and backend services — to operate and secure the Service.
Legal authorities — when required by law, subpoena, or to protect our rights.

All third-party processors are contractually bound to handle data only on our behalf and in compliance with this policy.

5. Cookies & Tracking Technologies

We use cookies and similar technologies for essential functions (authentication, session management) and analytics. You can control cookies through your browser settings. Disabling essential cookies may limit Service functionality.

6. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

Newsletter subscribers — email addresses are retained until you unsubscribe, after which they are removed from active mailing lists. We may retain a suppression record to prevent accidental re-addition.
Analytics data — typically retained for up to 26 months, then aggregated or deleted.
Correspondence — retained as needed for customer support and legal compliance.

7. Your Rights

Depending on your location, you may have the right to:

Access — request a copy of the personal data we hold about you.
Correction — ask us to correct inaccurate or incomplete data.
Deletion — request erasure of your personal data, subject to legal retention requirements.
Restriction — ask us to limit processing of your data.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests or direct marketing.
Withdraw consent — unsubscribe from the newsletter at any time via the link in any email.

To exercise these rights, contact us at hello@smillin.tech. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS/HTTPS), access controls, and regular security reviews. No online service can guarantee absolute security.

9. International Data Transfers

Smillin is based in the United States. If you access the Service from outside the U.S., your data may be transferred to, stored, and processed in the U.S. or other countries where our service providers operate. We rely on standard contractual clauses and other lawful transfer mechanisms where required.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted by updating the "Effective" date above. Continued use of the Service after changes constitutes acceptance.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
Smillin Healthcare Tech
Email: hello@smillin.tech