Privacy Notice

The clinic is responsible for your personal information. Under India's Digital Personal Data Protection Act, 2023, it is the Data Fiduciary.

The portal is run for the clinic by its software provider. The provider handles your information only to run and support the portal, on the clinic's instructions, and never for its own purposes.

Account details: your name, mobile number, email address and password. Your password is stored only in a scrambled form that nobody, including clinic staff, can read.

Details you choose to add: a photo of yourself, your date of birth, gender and address.

Health information you choose to add: allergies, current medicines, medical history, COVID-19 history and an emergency contact. If you add an emergency contact, please make sure they are happy for you to share their name and number.

Records the clinic makes about your care: appointments, treatment notes, prescriptions and bills. Some of these are shown to you in the portal.

Images and documents about your care, such as X-rays, scans and reports, which the clinic keeps in its Google Drive and links to your record.

If you book an appointment on WhatsApp: your WhatsApp number, the appointment you choose and the name you type. The clinic does not keep anything else you write there.

Bills and prescriptions the clinic sends you on WhatsApp: a record of each message, when it was sent, and whether it was delivered and read. They go to the mobile number on your record — the clinic does not keep a separate WhatsApp number for you.

Technical information needed to keep you signed in and to protect your account, such as a sign-in cookie and a count of failed sign-in attempts, and a record of the emails the clinic sends you.

To create and protect your account, and to match it to your records at the clinic.

To book and manage your appointments, and to contact you about them and about follow-up care.

To provide your dental treatment safely and keep a record of it.

To send you emails about your account, such as confirming your email address or resetting your password.

If you confirm your email address for it, to email you links to your bills and prescriptions, until you ask the clinic to stop.

To send you a link to each bill on WhatsApp, at the mobile number on your record, and to a prescription when you ask the clinic for it. You do not have to ask for this, and you can stop it at any time.

To keep the records the law requires the clinic to keep.

Your information is never sold, and it is not used for advertising.

Clinic staff who need it for your care or to run the clinic. Each member of staff signs in with their own account, and sensitive actions, such as printing your full history, are recorded.

Companies that run the portal for the clinic: Vercel and Supabase, which host the portal and its database in Mumbai, India; Resend, which delivers the clinic's emails from the United States; and Sentry, which receives reports of technical errors in the United States, with personal details removed wherever possible.

Google, which stores the X-rays, scans and other files the clinic keeps about your care in the clinic's Google Drive account. Google may store these files outside India.

Meta, which runs WhatsApp and carries the messages when you book an appointment with the clinic on WhatsApp, or when the clinic sends you links to your bills and prescriptions there. Meta may handle these messages outside India.

Authorities, when the law requires it.

Your information is not shared with other clinics or healthcare providers unless you agree or the law requires it.

The portal's information is stored in Mumbai, India, on encrypted storage, and travels between your phone and the portal over an encrypted connection. The clinic's emails, its WhatsApp messages, error reports, and the files it keeps in Google Drive may be held outside India by the companies named above.

Treatment records, including notes, prescriptions, bills and medical history, are kept for as long as the law and professional rules require the clinic to keep medical records. This applies even if you close your portal account.

When your portal account is closed, it can no longer be used to sign in.

See your information: much of it is in the portal, and you can ask the clinic for the rest.

Correct it: you can change your details in the portal, or ask the clinic to.

Ask for it to be deleted: the clinic will delete what it is not required to keep, and tell you what it must keep and why.

Withdraw your consent, as explained below.

Stop the clinic's WhatsApp messages at any time: reply STOP to any of them, switch them off in the portal, or tell the clinic. Stopping changes nothing about your treatment or your appointments.

Nominate someone to use these rights on your behalf if you die or become unable to.

Complain: to the clinic first, using the contact details on this page, and then, if you are not satisfied, to the Data Protection Board of India.

You can withdraw your consent at any time by telling the clinic. Your portal account will then be closed. Withdrawing does not undo anything done before, and the clinic will still keep the treatment records the law requires it to keep.

Accounts are for adults. A parent or legal guardian may create and manage an account for a child in their care, and gives consent on the child's behalf. The portal does not track children or show them advertising.

The portal uses one cookie, to keep you signed in. It does not use advertising or tracking cookies.

If this notice changes, you will be shown the new version and asked to accept it before you next use the portal.