Privacy
Privacy policy
Last updated: 2026-07-19
At SuperClini we handle personal data with transparency and accountability. This policy explains what we collect on superclini.com and our commercial forms, why we do it, and what rights you have. Operations inside the product (EHR, payments, DICOM) are covered by the Data Processing Agreement signed with each contracting clinic.
1. Who we are
SuperClini / DentAI Studio is operated by SuperClini SpA (Chile). We act as the data controller for information we collect through this website. For clinical data processed inside the product, SuperClini acts as a data processor on behalf of each contracting clinic (controller).
2. What we collect
Through the contact form: name, email, phone, clinic name (optional), country, team size (optional), type of interest and free-text message. Automatically: IP address, browser user-agent and entry page. With your marketing consent, also: campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term), Google (gclid) and Meta (fbclid) click identifiers, referring partner code (canal_ref), landing page, traffic source and first-contact date. We do not collect clinical data through the public site, that is handled exclusively inside the product under a separate agreement.
3. Why we use the data
To respond to your commercial inquiry and qualify your interest in the platform. To send you information about features, pricing, and product updates (only if you consented). To comply with legal and accounting obligations. To prevent fraud and abuse of the website.
4. Legal basis
Explicit consent of the data subject (form checkbox) · LGPD art. 7º, I (Brazil), Ley 19.628 and Ley 21.719 (Chile), GDPR art. 6(1)(a) (EU). Specific consent to store non-essential information on your device (attribution cookie) · ePrivacy Directive art. 5(3) and GDPR art. 6(1)(a). Declining does not limit any site functionality. Legitimate interest for fraud prevention and site security · LGPD art. 7º, IX, GDPR art. 6(1)(f). Compliance with legal obligations where applicable · LGPD art. 7º, II, GDPR art. 6(1)(c).
5. Your rights
privacy.sections.rights.body
6. Retention
Commercial leads: up to 24 months since last contact, after that they are automatically anonymized or deleted. Data required by law (contracts, invoicing): kept for the applicable legal term.
7. Security
We apply reasonable technical and organizational measures: TLS on all traffic, irreversible password hashing, role-based access control, audit logs, encrypted backups. Site and product are hosted on providers with ISO 27001 and SOC 2 certifications.
8. Cookies and similar technologies
Essential cookies, always stored because the site does not work without them: NEXT_LOCALE (chosen language, 365 days), NEXT_COUNTRY (detected country, drives currency and pricing, 30 days) and superclini-theme (light or dark theme, browser local storage). None of them identifies you. Consent cookie: _sc_consent (6 months) stores your own choice about cookies. It is the proof that we honoured your decision. Marketing and attribution cookie, stored ONLY if you accept it: _sc_attr (90 days) records which campaign or ad brought you here, including Google (gclid) and Meta (fbclid) click identifiers. It tells us which campaigns actually help clinics find us. We load no third-party scripts, no Meta pixel and no Google Analytics. You can change or withdraw your choice at any time via the Cookie preferences link in the footer; withdrawing deletes the attribution cookie immediately.
9. International transfers
Some of our infrastructure providers (hosting, transactional email) are located outside Chile and Brazil. When international transfer happens, we ensure equivalent protection via standard contractual clauses (GDPR SCC) or adequacy decisions.
10. Third-party sharing
Today we do not share your data with advertising platforms. If you accept the Marketing and attribution category, we may in the future tell Google LLC and Meta Platforms that a contact originating from a campaign became a customer, in order to measure advertising return. That would involve the click identifier and hashed contact data, and always happens server to server, never through scripts loaded in your browser. Before any such transmission begins, this policy will be updated with the details of what is sent and we will ask for your choice again. You can decline now or withdraw later via the Cookie preferences link in the footer.
11. Contact
To exercise your rights or ask questions about this policy: [email protected]. Controller: SuperClini SpA, Chile.
Data Protection Officer (DPO)
For specific data-protection queries, write to [email protected].