Legal
How The Smile Grid collects, processes, and protects personal data including India DPDP Act considerations.
Last Updated: 30 April 2026
This Privacy Policy explains how The Smile Grid (“SmileGrid,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal data when you visit our website, submit an inquiry, create or use an account, or otherwise interact with our services.
This Privacy Policy is intended to describe our data handling practices for:
This Privacy Policy should be read together with our Terms of Use and any applicable commercial agreement or data processing agreement.
This Privacy Policy applies to:
thesmilegrid.comWhere customer organizations use SmileGrid to upload or manage clinic and patient-related data, SmileGrid may process such data on behalf of those organizations in accordance with applicable agreements and instructions.
We may collect:
We may collect:
We may collect:
Customer organizations may submit or manage operational and clinic-related information through SmileGrid, which may include data about staff, appointments, visits, workflows, and patient administration or clinical records.
Where SmileGrid processes such data on behalf of a customer organization, that organization remains responsible for ensuring it has the required legal basis and notices for such processing.
We may use personal data for the following purposes:
SmileGrid may process clinic-submitted data, including information entered by customer organizations relating to patient administration or clinical operations.
In relation to such data:
SmileGrid does not claim ownership over customer-submitted clinic or patient records.
SmileGrid may use cookies, session tokens, local storage, and similar technologies for:
You may be able to control some cookie settings through your browser. Disabling some cookies may affect functionality.
If we use non-essential cookies or similar tracking technologies, we may provide additional notice or consent mechanisms as required.
We may share personal data only where reasonably necessary, including with:
We do not sell personal data in the ordinary meaning of a public consumer data marketplace.
SmileGrid may use infrastructure, vendors, or support processes that involve processing or access from locations outside the place where the data was originally collected, subject to applicable law and reasonable safeguards.
Where customer organizations require location-specific handling, this may be addressed through contract and deployment design where available.
We retain personal data only for as long as reasonably necessary for:
Retention periods may vary based on the type of data and context.
Security and operational logs may be retained in accordance with applicable law, security requirements, and incident response obligations.
We use reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction.
These measures may include:
No platform or storage environment is completely immune from risk, and we cannot guarantee absolute security.
SmileGrid applies reasonable safeguards, but no internet-based service can be guaranteed to be completely secure.
Subject to applicable law, individuals may have rights in relation to their personal data, which may include rights to:
Where SmileGrid processes data on behalf of a customer organization, requests relating to workspace-controlled data may need to be directed first to the relevant customer organization, since that organization may control the relevant data and processing purpose.
SmileGrid is intended for business and operational use by authorized organizations and staff.
To the extent customer organizations enter data relating to minors into the platform, the customer organization is responsible for ensuring lawful collection and use, including parental or guardian authorization where required by applicable law.
SmileGrid does not knowingly collect children’s personal data directly through its public website for independent consumer use.
By using the Services, you agree that we may communicate with you electronically for service-related, legal, security, onboarding, billing, and support purposes.
Electronic records and electronic communications may be used for product operations, acknowledgements, notices, and acceptance workflows where legally valid.
We may update this Privacy Policy from time to time. When we do, we will revise the effective date and publish the updated version. Where required by law, we will take additional steps to notify users or obtain updated consent.
For privacy, grievance, or data protection concerns, please contact:
Privacy / Grievance Contact
[Name / Designation]
The Smile Grid
[Registered Address]
Email: [privacy@thesmilegrid.com]
Phone: [●]
If you are raising a concern about data submitted by a clinic or customer organization through a SmileGrid workspace, we may ask you to contact the relevant clinic or organization directly where they control the relevant data.
Questions about this policy? Contact us at our contact page or write to legal@thesmilegrid.com.