Privacy Policy

1. Who we are

Got Smile Dental Clinic ("we", "us", or "the Clinic") is the personal information controller of the data you provide through this website and our clinic systems. We process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).

2. What we collect

Depending on how you interact with us, we may collect:

• Identity and contact details (name, email, phone, address)
• Appointment details (date, time, service requested, comments)
• Health and dental information (medical history, dental charts, treatment notes, procedure records)
• Emergency contact details
• Payment-related information (reservation fee proof, payment status — we do not store your full GCash PIN or banking credentials)

Health and dental records are sensitive personal information and receive heightened protection.

3. Why we process your data

• To schedule, confirm, and manage appointments
• To provide dental care and maintain clinical records
• To verify reservation payments and communicate with you
• To respond to inquiries submitted through our contact form
• To meet legal, professional, and record-keeping obligations
• To improve clinic operations and patient experience

4. Legal bases

We process personal data based on your consent (for example, when you submit a booking), fulfillment of a contract or service request, our legitimate interests in operating the clinic securely, and compliance with applicable laws and professional standards for dental records.

5. How we share data

We do not sell your personal data. We may share data with trusted service providers who process it on our instructions, such as:

• Cloud hosting and database providers
• Email delivery services used for confirmations and notices
• Payment-related processors where applicable

We may also disclose information when required by law, court order, or to protect vital interests.

6. Retention

Dental and medical records are retained for as long as necessary for treatment and as required by applicable professional guidelines and law (commonly many years after the last visit). Booking, payment proof, and related operational records are kept for clinic administration and audit purposes, then securely disposed of or anonymized when no longer needed.

7. Your rights

Under the Data Privacy Act, you may request to:

• Be informed about how your data is processed
• Access and correct your personal data
• Object to processing or withdraw consent where applicable
• Request erasure or blocking, subject to legal retention duties
• Lodge a complaint with the National Privacy Commission

8. Security

We implement organizational, physical, and technical measures appropriate to the sensitivity of dental records, including staff access controls, encrypted transport (HTTPS), and audit logging of significant system actions. No method of transmission or storage is completely secure; we work to reduce risk and respond to incidents promptly.

9. Contact / Data Protection Officer

For privacy requests or concerns, contact our Data Protection Officer (or clinic privacy contact) at gotsmiledentalclinic@gmail.com. Please update this contact once a DPO is formally appointed (see clinic internal checklist).

10. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of our booking or clinic services after updates constitutes notice of the revised policy where permitted by law.