Privacy Policy
This Privacy Policy describes how Dental Capital ("we", "us", "our"), operated through the website dentalcapitaloftheworld.com (the "Platform"), collects, uses, discloses, and protects your personal information when you access or use our services. By using the Platform, you consent to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
We collect information you voluntarily provide when using our Platform, including:
- Account Information: Name, email address, password (encrypted), phone number, profile photo, and account type (patient or clinic).
- Patient Profile Data: Dental treatment preferences, travel preferences, language preferences, and any medical information you choose to share in communications with clinics.
- Clinic Profile Data: Clinic name, address, contact details, professional credentials, certifications, services offered, pricing, images, team member information, and business hours.
- Communications: Messages sent through our messaging system between patients and clinics, reviews, ratings, and any other content you submit.
- Payment Information: If applicable, billing information processed through third-party payment providers. We do not store credit card numbers on our servers.
1.2 Information Collected Automatically
When you access the Platform, we automatically collect:
- Usage Data: Pages visited, features used, search queries, clicks, referring URLs, and interaction patterns.
- Device Information: Browser type, operating system, device type, screen resolution, and language settings.
- Location Data: Approximate location based on IP address. We do not collect precise GPS location without your explicit consent.
- Cookies and Tracking Technologies: As described in our Cookie Policy.
1.3 Information from Third Parties
We may receive information from third-party services such as Google Analytics, social media platforms (if you use social login), and identity verification services.
2. How We Use Your Information
We use the collected information for the following purposes:
- Provide and Improve Services: To operate the Platform, connect patients with dental clinics, process bookings, and improve user experience.
- Communications: To send you account notifications, booking confirmations, security alerts, and, with your consent, marketing communications.
- Personalization: To customize your experience, recommend clinics and treatments based on your preferences, and display relevant content.
- Safety and Security: To detect and prevent fraud, abuse, and unauthorized access; to verify clinic credentials; and to enforce our Terms and Conditions.
- Analytics: To analyze usage trends, measure the effectiveness of our services, and conduct research to improve the Platform.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Between Users: When a patient contacts a clinic or submits a booking request, relevant contact and treatment information is shared between the parties to facilitate the service.
- Service Providers: We share information with third-party service providers who assist us in operating the Platform, including hosting providers, email services (Resend/SendGrid), analytics (Google Analytics), and customer support tools.
- Legal Requirements: We may disclose information if required by law, court order, subpoena, or government regulation, or if we believe disclosure is necessary to protect our rights, safety, or property, or that of our users or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of the transaction.
- With Your Consent: We may share your information for other purposes with your explicit consent.
4. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption of passwords using Argon2 hashing algorithm
- HTTPS/TLS encryption for all data in transit
- CSRF (Cross-Site Request Forgery) protection
- Rate limiting to prevent brute force attacks
- Secure session management with HTTP-only cookies
- Regular security reviews and updates
Despite these measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the Platform at your own risk.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or reporting obligations.
Reviews and ratings may remain on the Platform after account deletion in anonymized form to maintain the integrity of clinic evaluations.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Rectification: Request correction of inaccurate or incomplete personal information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Data Portability: Request your data in a structured, machine-readable format.
- Withdrawal of Consent: Withdraw consent for processing where consent is the legal basis.
- Objection: Object to processing of your personal information for direct marketing purposes.
To exercise any of these rights, contact us at [email protected].
7. International Data Transfers
The Platform operates internationally. Your information may be transferred to and processed in countries other than your country of residence, including countries that may not have the same data protection laws. By using the Platform, you consent to such transfers. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.
8. Children's Privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected information from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.
9. Third-Party Links
The Platform may contain links to third-party websites, including clinic websites, payment processors, and social media platforms. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:
- Email: [email protected]
- Website: dentalcapitaloftheworld.com/contact