Privacy Policy

DentalView (“we,” “us,” or “our”) is a dental clinic management platform designed for Philippine dental practices. We are committed to protecting your privacy and complying with Republic Act No. 10173 (the Data Privacy Act of 2012) and the rules and regulations issued by the National Privacy Commission (NPC).

This Privacy Policy explains how we collect, use, store, and protect personal information when you use our platform. It applies to clinic owners, their staff, and the patients whose data is processed through DentalView.

Our designated Data Protection Officer (DPO) can be reached at privacy@dentalview.ph.

We collect and process the following categories of personal data:

Clinic & Account Data

• Clinic name, address, and contact information
• Owner and staff names, email addresses, and roles
• Business Tax Identification Number (TIN)
• Subscription and billing preferences

Patient Data (Processed on Behalf of Clinics)

DentalView processes patient data as a data processor on behalf of your clinic (the data controller). This includes:

• Patient names, phone numbers, and email addresses
• Appointment history and scheduling data
• Treatment plans and clinical notes
• Consent records with timestamps and IP addresses
• Engagement scores and communication preferences

Technical & Usage Data

• IP addresses and browser/device information
• Page views and feature usage patterns
• Login timestamps and session metadata
• SMS delivery status and response data

We use collected data for the following purposes:

• Providing and maintaining the DentalView platform
• Processing subscription payments and generating invoices
• Sending appointment reminders via SMS on behalf of clinics
• Generating analytics, reports, and Smart Insights for clinic owners
• Improving platform performance, reliability, and features
• Ensuring security, preventing fraud, and detecting anomalies
• Complying with legal obligations under Philippine law
• Communicating service updates and important notices

We do not sell personal data to third parties. We do not use patient data for marketing purposes. Patient data is only processed as instructed by the clinic (data controller).

We retain data for the minimum period necessary to fulfill its purpose, comply with legal obligations, and meet BIR requirements:

After the retention period, data is securely deleted or irreversibly anonymized.

Under Section 16 of RA 10173, you have the following data subject rights:

To exercise any of these rights, contact our DPO at privacy@dentalview.ph. We will respond within 30 days.

We implement comprehensive security measures to protect your data:

Encryption

• All data in transit is encrypted with TLS 1.3
• All data at rest is encrypted with AES-256
• Database connections use encrypted channels

TLS ensures your data is protected during transmission, while AES-256 protects stored data.

Access Controls

• Role-Based Access Control (RBAC) limits data access by user role
• Row-Level Security (RLS) ensures clinics only see their own data
• Multi-factor authentication available for all accounts
• Automated session timeouts after periods of inactivity

RLS is enforced at the database level, providing an additional layer of tenant isolation.

Monitoring & Auditing

• Comprehensive audit logging of all data access and modifications
• Automated threat detection and anomaly monitoring
• Regular security assessments and penetration testing
• Incident response procedures with 24-hour notification commitment

We work with trusted third-party service providers who process data on our behalf. Each provider is contractually required to protect your data:

We do not transfer personal data outside the Philippines unless necessary for service delivery, and any such transfer complies with NPC guidelines on cross-border data transfer.

If you have questions about this Privacy Policy, want to exercise your data subject rights, or need to report a privacy concern:

For complaints about data privacy violations, you may also contact the NPC directly at complaints@privacy.gov.ph.