Privacy Policy
Smile Gallery Dental Wellness Centre
Last updated: 16 September 2026
This policy explains how Smile Gallery Dental Wellness Centre (“Smile Gallery”, “we”) handles information when you use our website https://smile-gallery.com, contact us, or when clinic staff use our internal The Clinic Management App software with Google.
Clinic
Smile Gallery Dental Wellness Centre
E-4/205, Main Rd 3, near Flower Market, E-4, Arera Colony, Bhopal, Madhya Pradesh 462016, India
Phone: +91 9200700750
Email: dr.saurabh.shrivastava@gmail.com
1. Who this covers
- Visitors to smile-gallery.com
- People who enquire or book by phone, WhatsApp, form, or Google Business Profile
- Clinic staff who sign in to Google from The Clinic Management App to manage our Google Business Profile
This public website is not a patient portal. Treatment records live in our clinic systems, not on this webpage.
2. Information we collect
Website and enquiries
- Name, phone, email, and message if you send them
- Appointment or treatment interest you describe
- Technical logs such as IP address, browser type, and pages viewed (hosting / analytics, if enabled)
Clinic operations (not collected by this webpage, but held by the clinic)
- Patient identity, contact details, appointments, clinical notes, estimates, invoices, and related records needed to treat you and run the practice
Google sign-in (staff only)
The Clinic Management App uses Google OAuth so authorised staff can manage our Google Business Profile (posts, reviews, profile information). That sign-in is for clinic staff. It is not a “Sign in with Google” login for patients on this website.
When a staff member authorises Google, Google may share the Google account email and an access/refresh token with our software so we can call Google Business Profile APIs on behalf of the clinic. We do not use that OAuth connection to scrape your personal Gmail or Drive.
3. How we use information
- Answer enquiries and schedule visits
- Provide dental care and follow-up
- Billing, accounts, and legal records
- Publish and manage our Google Business Profile (staff tools only)
- Improve the website and clinic operations
- Comply with Indian law, including applicable IT and medical record duties
We do not sell personal information.
4. Google Business Profile and OAuth
Our internal app requests Google permission to manage the clinic’s Business Profile (scope used: Google Business Profile / business.manage).
- Purpose: schedule and publish clinic posts, handle reviews, and keep listing details accurate
- Tokens are stored so staff do not have to sign in every hour
- Patient clinical files are not uploaded to Google through this OAuth flow
- You can revoke The Clinic Management App access at https://myaccount.google.com/permissions
5. Sharing
We share information only when needed:
- Google, for Business Profile features the staff have authorised
- Hosting, email, SMS/WhatsApp, payment, or IT providers who process data for us
- Professional advisers or authorities where the law requires it
6. Retention
Enquiry and website logs: as long as needed to respond and for a reasonable clinic record period.
Patient and billing records: as required for clinical and legal retention in India.
Google tokens: until staff disconnect Google or we replace the connection.
7. Security
We use access controls, staff logins, and hosting safeguards. No method of transmission is fully secure. Call the clinic if you think your data was misused.
8. Your requests
You may ask what we hold about you, ask for a correction, or ask us to delete information we are not required to keep. Medical records may need to be retained even if you ask for deletion.
Contact: dr.saurabh.shrivastava@gmail.com or +91 9200700750.
9. Children
The website is for adults arranging care, including for their children. We do not knowingly collect children’s data through the website for marketing.
10. Changes
We may update this page. The date at the top will change. Continued use of the website means you have read the updated notice.