SonrisaConnect ("we", "us") is a business operated by John J Hoyos. This policy explains what personal data we collect through this website, why, and the rights you have. Questions or requests: support@sonrisaconnect.com.
1. Who we are
SonrisaConnect is an online marketplace that connects patients in the United States with independent dental practices in Colombia. We are a marketplace and not a medical provider, and we are not a healthcare provider or a covered entity under HIPAA. The data controller (responsable del tratamiento) is John J Hoyos, operating as SonrisaConnect, reachable at support@sonrisaconnect.com.
2. What we collect
- Practices: clinic name, city, address, license or RETHUS number, contact person, WhatsApp number, email, treatments and prices, photos and documents you upload, plan choice and consent record.
- Patients: when patient tools are live, your name, email, messages, and the photos and X-rays you choose to upload. Health-related information is sensitive data. You are never required to provide it, and we only process it with your prior, express and informed authorization.
- Technical data: basic server logs from our hosting provider (such as IP address and browser type). We do not use advertising cookies. Pages load fonts from Google Fonts, which may receive your IP address.
At launch, the practice onboarding form is the only form that transmits data. The patient record upload, quote and booking screens are being rolled out and, until they are announced as live, do not store or send your data.
3. Why we use it
- To review and list dental practices and verify their licenses.
- To connect patients with practices, deliver quotes and messages, and provide support.
- To bill practice subscriptions and any optional success fee.
- To keep the site secure, prevent fraud and meet legal obligations.
4. Legal basis and your consent
We process personal data based on your prior authorization (consent), which you give when you submit a form and tick the consent boxes, and where needed to perform a contract with you. You may revoke your authorization at any time by emailing support@sonrisaconnect.com, subject to legal or contractual duties to keep certain records.
5. Your rights under Colombia Ley 1581 de 2012
If your data is processed under Colombian law you have the right to: know, update and rectify your data; request proof of the authorization you gave; be informed about how your data has been used; revoke your authorization and request deletion where legally possible; access your data free of charge; and file a complaint with the Superintendencia de Industria y Comercio (SIC). To exercise these rights, email support@sonrisaconnect.com with your name and your request. We will respond within the periods set by law.
6. US residents
We do not sell personal data and do not share it for cross-context advertising. Depending on your state (for example California), you may have rights to access, correct and delete your personal information and to know what we collect. Email support@sonrisaconnect.com to make a request. We follow applicable US consumer-protection norms, including truthful disclosures about our service.
7. Who we share data with
- Practices and patients you choose to connect with on the platform.
- Service providers that help us run the site: payment processing (Stripe), form handling and file storage (Formspree), website hosting (GitHub Pages), email delivery, and messaging (WhatsApp) if you contact us there. They may only use data to provide their service.
- Authorities when the law requires it.
8. International transfers
Because we connect people in the United States and Colombia, data will move between those countries and may be stored by providers in the United States. By giving your authorization you agree to this transfer. We ask providers to protect it with appropriate security measures.
9. How long we keep it
We keep data only as long as needed for the purposes above. Practice account data is kept while the listing is active and for the period required for billing and legal records afterward. You can ask us to delete your data sooner where the law allows.
10. Security and children
We use reasonable technical and organizational measures, but no online service is perfectly secure. Do not send sensitive information by unencrypted channels. Our service is not directed to children under 18 and we do not knowingly collect their data.
11. Changes and contact
We may update this policy and will change the date above when we do. Contact: SonrisaConnect, operated by John J Hoyos, support@sonrisaconnect.com.