Privacy Policy

1. Overview

Dental White ("we," "us," "our") is a dental clinic operating at 1st Floor, Adjacent to Royal Enfield, Opposite Air Force School, Rajiv Nagar, Sector 13, Gurugram, Haryana — 122007. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect when you visit www.dentalwhite.co.in, use our online booking system, contact us via WhatsApp or phone, or visit our clinic — and how we use, store, and protect that information.

By using our website or booking an appointment, you agree to the terms of this Privacy Policy.

2. Information We Collect

a) Information you provide directly:

• Name, phone number, and email address (booking form or contact form)
• Date of birth and gender (for patient records)
• Reason for visit or chief complaint (from booking notes or WhatsApp messages)
• Medical and dental history (collected during clinical consultation)
• Treatment information and clinical notes (created by your treating dentist)
• Payment details (processed via Razorpay — we do not store card or UPI credentials)

b) Information collected automatically from your browser:

• Browser type, device type, and operating system
• IP address and approximate location
• Pages visited, session duration, and links clicked (via Google Analytics)
• Referring website or search query that brought you to our site

c) Public reviews: Reviews you leave on Google, Justdial, or Practo are public by nature. We may display them on our website with attribution to the platform.

3. How We Use Your Information

We use the information we collect to:

• Confirm, manage, and remind you of your appointments
• Provide dental treatment and maintain accurate clinical records
• Communicate with you about treatment, follow-up care, and post-treatment check-ins
• Process payments via Razorpay
• Send appointment reminders via WhatsApp or SMS (opt-out available at any time)
• Improve our website and understand how patients find and use our services
• Comply with applicable Indian healthcare regulations and legal obligations

We do not use your information to sell or rent your data, target you with third-party advertising, or share your health information with any party not involved in your care without your explicit consent.

4. Sharing of Information

We do not sell, trade, or rent your personal information. We may share it only in these limited circumstances:

• Service providers: Google Analytics, Razorpay, Amelia Booking, and Rank Math — bound by their own privacy policies and our instructions.
• Specialist referrals: If your treatment requires referral to a specialist, relevant clinical information is shared with that professional only with your knowledge.
• Legal requirements: If required by a court order or governmental authority under Indian law — including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
• Medical emergency: If you are incapacitated and emergency treatment is required, we may share relevant health information with emergency services.

5. Cookies & Tracking

Our website uses cookies to improve your experience and understand site usage. We use three types:

• Strictly necessary: Required for the website to function (session management, booking form). Cannot be disabled.
• Analytics: Google Analytics tracks page visits and traffic sources in anonymised, aggregated form. This helps us understand which services patients search for most.
• Marketing: If you arrived via a Google Ads or Meta advertisement, those platforms may set tracking cookies to measure campaign performance. We use this data only to evaluate our advertising — not to profile you personally.

You can disable cookies through your browser settings at any time. Note that disabling certain cookies may affect the booking form or other interactive features.

6. WhatsApp Communications

We use WhatsApp (+91 95995 40992) for appointment bookings, reminders, and patient queries. When you message us:

• Your name and phone number become visible to us as part of the conversation
• Messages may contain health information — stored within our WhatsApp account and patient records
• WhatsApp communications are also governed by Meta's Privacy Policy

We will not add you to any group, broadcast list, or marketing communication without your explicit consent. To opt out of WhatsApp reminders, message us directly or inform us at your next visit.

7. Data Retention

• Patient records and clinical notes: Minimum 7 years from date of last treatment, per Clinical Establishments Act, 2010 and Medical Council guidelines.
• Appointment and contact information: 3 years from your last interaction with our clinic.
• Website analytics data: 14 months in anonymised form (Google Analytics default).
• Payment records: 7 years, as required under Indian accounting and tax regulations.

After the applicable retention period, data is securely deleted or anonymised.

8. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights:

• Right to access: Request a copy of the personal information we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data (subject to our clinical retention obligations)
• Right to withdraw consent: Withdraw consent for marketing or non-essential processing at any time
• Right to grievance redressal: File a complaint regarding how we handle your data

To exercise any right, contact us using the details in Section 12. We will respond within 30 days.

9. Children's Privacy

Dental White provides specialised dental care for children and treats their privacy with particular care. When booking for a child under 18, the parent or legal guardian provides consent on the child's behalf. We do not knowingly collect personal information directly from children under 13 via our website without parental consent.

Clinical records for minor patients are handled with the same confidentiality standards as adult records, accessible only to the treating clinician and the child's parent or legal guardian.

10. Data Security

We take reasonable technical and organisational measures to protect your information, including:

• SSL/TLS encryption on our website (https)
• Cloudflare security protection on our domain
• Password-protected clinic management systems with restricted access
• Secure payment processing via Razorpay (PCI DSS compliant)

No internet transmission is 100% secure. In the event of a data breach affecting your rights, we will notify you as required under applicable law.

11. Changes to This Policy

We may update this policy periodically. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

12. Contact Us

For any questions, requests, or complaints related to this Privacy Policy or your personal data:

We aim to respond to all privacy-related queries within 30 working days.