Smile Virtual
Smile Virtual is a US teledentistry platform that lets dental practices offer remote cosmetic consultations from their website. The patient uploads selfies of their smile, a dentist records a personalised video with treatment options, and the patient can then book an appointment. Because the photos and concerns describe the patient's teeth, the data can qualify as health data under the GDPR and is processed in the United States.
What does Smile Virtual do?
What is Smile Virtual?
Smile Virtual is an online dental consultation platform operated by Smile Virtual Consult, LLC in the United States. It connects patients with dentists for remote cosmetic consultations: the patient uploads photos of their smile and describes what they would like to change, a dentist reviews the case and records a personalised video explaining treatment options, cost and duration, and the patient can then schedule an in-office appointment. Dentists subscribe to the service to generate new patient leads, mainly for cosmetic dentistry. It is not a virtual try-on or AR filter tool.
How Smile Virtual appears on a website
A dental practice adds a Smile Virtual consultation button, form or script to its own website, and the consultation flow runs on the Smile Virtual application. Technology scanners detect the service through scripts or references pointing to www.smilevirtual.com and app.smilevirtual.com. The application is hosted on Amazon Web Services in the United States and itself loads Google services such as Google Tag Manager and Google Fonts.
Cookies and personal data
Smile Virtual's privacy policy states that it collects usage details, IP addresses and information through cookies, web beacons and other tracking technologies. Cookie names used by the embedded widget are not publicly documented. The data a patient submits is far more sensitive: name, email address, phone number, smile photos, a description of dental concerns and the dentist's recorded assessment. Photos of teeth together with treatment questions can reveal information about a person's health and should be treated as health data under Article 9 of the GDPR.
GDPR and consent
The consultation is requested by the patient, but processing health data still requires an Article 9 exception, in practice the patient's explicit consent collected before upload. Any analytics or marketing trackers loaded with the widget require cookie consent. Because Smile Virtual is a US company hosting data in the US, the practice must also secure a valid transfer mechanism and a data processing agreement.
Practical steps
- Load the Smile Virtual widget only when the visitor chooses to start a consultation, not on every page.
- Add an explicit consent checkbox for the processing of photos and health information, with a link to your privacy notice.
- Sign a data processing agreement with Smile Virtual and document the transfer mechanism to the United States.
- Tell patients how long photos and videos are kept and how to request deletion.
Smile Virtual and the GDPR
Smile Virtual is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Explicit consent for health data (Art. 9(2)(a) GDPR) and consent for any non-essential storage (Art. 5(3) ePrivacy Directive); performance of a pre-contractual request for the consultation itself (Art. 6(1)(b) GDPR)
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive, HIPAA (United States)
Impact assessment (DPIA)
A DPIA is advisable because the service processes health-related images and information about patients, and transfers them to a US provider. Assess the necessity of each data item, the explicit consent wording, retention of photos and videos, access by dentists, and the safeguards for the transfer to the United States.
Sample text for your banner
To start a virtual smile consultation, your photos and answers will be sent to Smile Virtual, a provider based in the United States, and reviewed by our dentist. Please confirm that you explicitly consent to this processing of information about your dental health.
What Smile Virtual sets and contacts
- Tracking method
- Teledentistry consultation widget or link embedded on a dental practice website; detected through scripts or references to www.smilevirtual.com and app.smilevirtual.com. The patient uploads smile photos and receives a recorded video consultation from the dentist.
- Server location
- United States (application hosted on Amazon Web Services, us-east-2 region)
- Data transferred outside the EU
- Smile Virtual Consult, LLC is a US company and its application runs on AWS in the United States. Photos, contact details and consultation videos are therefore processed in the US; check the vendor's transfer mechanism (EU-US Data Privacy Framework certification or Standard Contractual Clauses).
Third-party domains contacted (2)
www.smilevirtual.comapp.smilevirtual.com
Frequently asked questions about Smile Virtual
Can't find your question? Write to us, we answer fast.
Is Smile Virtual a virtual try-on tool?
No. Smile Virtual is a teledentistry platform: patients upload smile photos and a real dentist records a video consultation with treatment options. It is used by practices to turn website visitors into appointments.
Are smile photos health data under the GDPR?
They can be. Photos of teeth sent together with a description of dental concerns allow conclusions about a person's oral health, so they should be handled as health data under Article 9 GDPR, which requires explicit consent.
Where does Smile Virtual store patient data?
Smile Virtual Consult, LLC is a US company and its application is hosted on Amazon Web Services in the United States. A European practice must cover this transfer with an appropriate mechanism.
Does the Smile Virtual widget need cookie consent?
The consultation itself is a service the patient requests, but cookies or trackers that are not strictly necessary for it, such as analytics, need prior consent. Loading the widget only after the visitor clicks reduces the issue.
What should a dental practice put in its privacy notice?
Name Smile Virtual as a recipient, describe the data collected (photos, contact details, dental concerns), the US transfer, the retention period and how patients can withdraw consent or request deletion.
Trengo
Trengo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Trengo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Trengo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Skedify
Skedify is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Skedify integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Skedify helps organizations maintain robust websites that meet user expectations and technical requirements.
LocaliQ Live Chat
LocaliQ Live Chat is a live chat and customer messaging platform that enables businesses to engage with website visitors in real time. It provides instant messaging, chatbot automation, and team collaboration tools to deliver fast, personalized customer support. LocaliQ Live Chat supports multi-channel communication, conversation routing, and canned responses to improve response times. With built-in analytics and CRM integration, LocaliQ Live Chat helps convert visitors into customers.
DoubleTick
DoubleTick is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. DoubleTick supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, DoubleTick ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Envybox
Envybox is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Envybox integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Envybox helps organizations maintain robust websites that meet user expectations and technical requirements.
Leadtex
Leadtex is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Leadtex supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Leadtex ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.