Politique de confidentialité

What data we collect

• Account: name, e-mail, phone and language. Your password is stored encrypted by the sign-in service (Amazon Cognito); we never see it.
• Quote requests: the treatment you need, the description of your case, when you can come and your contact details. Describing your case may include information about your dental health.
• Where you came from: with your request we keep how you first reached the site (the campaign tags and the click ID of a Google or Facebook ad, the page you arrived on and the site that sent you) and your answer to “How did you hear about us?”.
• Bookings and payments: the services, the date and the reservation fee. The payment is processed by Stripe; we do not store card details.
• Messages with clinics and the reviews you publish.
• Results and documents a clinic sends you.
• Clinic and agency staff: name, e-mail and role on the team.
• Technical data: what your browser needs to keep you signed in and, only if you accept, analytics cookies (Google Analytics).

Why we use it

• To provide the service: your account, requests, offers, bookings and messages (our contract with you).
• Health information is used only so that clinics can make you an offer, with the explicit consent you give when you send it.
• To notify you about your requests and bookings by e-mail and, if you choose it, on WhatsApp (reply STOP to end it at any time).
• To keep the platform secure and prevent abuse (legitimate interest).
• To understand how the site is used, only if you accept analytics cookies.
• To know which ads and channels bring requests, with the “where you came from” data (legitimate interest). Only our admins see it; we do not send it to Google, Meta or the clinics. It is kept in your browser only if you accept cookies.
• For legal obligations, such as accounting.

Who we share it with

• Clinics and agencies that see your request: they see it without your name and contact; only the clinic you book with receives your contact, once you have reserved with the reservation fee.
• The clinic you book with, for the visit.
• Our service providers: Amazon Web Services (servers in Frankfurt, EU, and e-mail), Stripe (payments), Meta (WhatsApp, only if you choose it), Google (analytics, only with your consent; translation of chat messages, only when you or the other person turns it on) and PostHog (analytics and recordings of how the site is used, with text, typed data and images masked, in Frankfurt, EU, only with your consent).
• Authorities, when the law requires it.
• We do not sell your data.

Where it is stored and for how long

Data is stored on servers in the European Union (Frankfurt). Google, Stripe and Meta may process data outside the EU, with the safeguards the law requires.

We keep data while you have an account and as long as the service and our legal obligations require. Analytics data is kept no longer than 14 months.

Cookies

Your sign-in and your choices (language, the cookie choice) are kept in your browser and need no consent. Analytics cookies and analytics data in your browser are stored only if you press “Accept”; if you reject, nothing is sent to Google or PostHog. Change your choice at any time under “Cookie settings” at the bottom of every page; we ask again after 12 months.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a readable format, and withdraw your consent at any time. Write to info@albaniasmiles.com.

You may complain to Albania’s Information and Data Protection Commissioner, or to the authority of your EU country (in Italy: Garante per la protezione dei dati personali).

Children

Accounts are for adults. For a child, a parent or guardian makes the request and the booking.

Changes

When we change this policy we update the date at the top; for important changes we tell you by e-mail.