Privacy Policy

1. INTRODUCTION AND SCOPE

1.1 About This Privacy Policy

This Privacy Policy ("Policy") describes how Dental Implants Local, a company registered in England and Wales ("Company", "we", "us", "our"), collects, uses, processes, stores, shares, and protects personal information in connection with our dental implant directory platform ("Platform") and related services ("Services").

This Policy applies to all users of our Platform, including dental practices ("Practices"), individual patients seeking services ("Patients"), and general website visitors ("Website Visitors") (collectively, "Users"), across all jurisdictions where we operate: United Kingdom, United States, Ireland, New Zealand, Australia, South Africa, and Canada.

1.2 Legal Framework and Compliance

Our privacy practices comply with applicable data protection laws in all operating jurisdictions, including but not limited to:

• General Data Protection Regulation (GDPR) 2016/679 for EU users
• UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018
• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
• Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
• Privacy Act 1988 (Privacy Act) - Australia
• Privacy Act 2020 - New Zealand
• Protection of Personal Information Act (POPIA) - South Africa
• State and provincial privacy laws as applicable

1.3 Healthcare Data Special Considerations

As a platform facilitating healthcare services, we recognize the heightened sensitivity of health information and implement enhanced protections consistent with healthcare privacy regulations including HIPAA (US), NHS Data Security and Protection Toolkit requirements (UK), and equivalent healthcare privacy standards in other jurisdictions.

1.4 Updates to This Policy

We may update this Policy periodically to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated via email to registered users and prominent website notice at least 30 days prior to implementation, except where immediate changes are required for legal compliance or security purposes.

2. INFORMATION WE COLLECT

2.1 Information Collected Directly from Users

2.1.1 Practice Registration and Profile Information

When Practices create accounts and maintain listings, we collect:

• Business Information: Practice name, business registration numbers, physical addresses, telephone numbers, email addresses, website URLs
• Professional Credentials: Dental license numbers, professional certifications, educational qualifications, years of experience, specialization areas
• Service Information: Treatment types offered, pricing information, availability schedules, appointment booking preferences
• Verification Documentation: Professional licenses, insurance certificates, business registration documents, identification materials
• Financial Information: Banking details for subscription billing, tax identification numbers, payment history records
• Marketing Content: Practice descriptions, photographs, promotional materials, staff information, patient testimonials (with consent)

2.1.2 Patient Inquiry and Communication Data

When Patients use our Services, we collect:

• Contact Information: Names, email addresses, telephone numbers, postal addresses
• Treatment Requirements: Specific implant needs, treatment preferences, urgency indicators, budget considerations
• Communication Records: Inquiry submissions, Practice communications, follow-up interactions, appointment scheduling data
• Preference Settings: Location preferences, Practice selection criteria, communication preferences, notification settings

2.1.3 Account Management Information

For all registered Users:

• Login Credentials: Usernames, encrypted passwords, security questions and answers
• Profile Preferences: Language settings, communication preferences, notification controls, privacy settings
• Support Communications: Customer service interactions, technical support requests, complaint submissions

2.2 Information Collected Automatically

2.2.1 Technical and Usage Data

Our systems automatically collect:

• Device Information: IP addresses, device identifiers, browser types and versions, operating systems, screen resolutions
• Usage Analytics: Page views, click-through rates, search queries, session durations, navigation patterns, feature utilization
• Performance Metrics: Loading times, error reports, system performance data, engagement measurements
• Location Data: General geographic location based on IP address (not precise location tracking)

2.2.2 Cookies and Tracking Technologies

We employ various tracking technologies:

• Essential Cookies: Required for basic Platform functionality, user authentication, security measures
• Analytics Cookies: Google Analytics and similar tools for usage pattern analysis and service improvement
• Marketing Cookies: Targeted advertising, conversion tracking, social media integration
• Preference Cookies: User setting storage, language preferences, customization options

Users can control cookie settings through browser configurations and our cookie preference center accessible via the Platform interface.

2.3 Information from Third-Party Sources

2.3.1 Professional Verification Services

We obtain information from:

• Regulatory Databases: Professional license verification, disciplinary action records, practice status confirmations
• Business Registration Authorities: Company incorporation details, business status verification, registered address confirmation
• Insurance Providers: Professional indemnity coverage verification, policy status confirmation
• Educational Institutions: Qualification verification, continuing education compliance records

2.3.2 Payment Processing Partners

Stripe and other payment processors provide:

• Transaction Data: Payment amounts, currency, transaction success/failure status, billing addresses
• Fraud Prevention Information: Risk assessment scores, transaction pattern analysis, security verification results
• Financial Compliance Data: Tax reporting information, regulatory filing requirements, anti-money laundering checks

2.3.3 Integration Partners

Third-party service providers may share:

• Course Directory Information: Educational program details, enrollment data, completion certificates, continuing education credits
• Discount Program Data: Product purchases, service utilization, promotional code usage, partner satisfaction ratings
• Social Media Information: Public profile information, shared content, engagement metrics (with user consent)

3. HOW WE USE PERSONAL INFORMATION

3.1 Primary Service Delivery

3.1.1 Platform Operations

We use personal information to:

• Maintain Directory Listings: Display Practice information, manage subscription tiers, update service offerings, handle profile modifications
• Facilitate Lead Generation: Process Patient inquiries, match treatment needs with appropriate Practices, deliver contact information securely
• Process Communications: Enable secure messaging between Patients and Practices, manage appointment scheduling, facilitate follow-up interactions
• Manage User Accounts: Authenticate access, maintain profile settings, process subscription changes, handle account termination requests

3.1.2 Subscription and Billing Management

Personal information supports:

• Payment Processing: Subscription billing, transaction processing, refund handling, tax calculation and reporting
• Financial Administration: Invoice generation, payment history tracking, currency conversion, regulatory compliance reporting
• Subscription Management: Tier upgrades/downgrades, feature access control, renewal processing, cancellation handling

3.2 Service Enhancement and Optimization

3.2.1 Analytics and Performance Improvement

We analyze data to:

• Optimize User Experience: Improve Platform navigation, enhance search functionality, personalize content presentation, streamline user workflows
• Enhance Matching Algorithms: Refine Patient-Practice matching accuracy, improve relevance scoring, optimize geographic targeting
• Monitor Platform Performance: Track system reliability, identify technical issues, measure feature utilization, optimize loading times

3.2.2 Quality Assurance and Safety

Data usage includes:

• Content Moderation: Review Practice listings for accuracy, monitor Patient reviews for authenticity, detect fraudulent activity, ensure regulatory compliance
• Professional Verification: Ongoing credential monitoring, license status tracking, disciplinary action alerts, insurance coverage verification
• Security Monitoring: Fraud detection, unauthorized access prevention, suspicious activity identification, system vulnerability assessment

3.3 Legal and Regulatory Compliance

3.3.1 Healthcare Regulation Compliance

We process information to:

• Maintain Professional Standards: Verify Practice qualifications, monitor regulatory compliance, support professional body investigations, facilitate credential verification
• Support Patient Safety: Track complaint patterns, monitor treatment outcomes (where disclosed), facilitate regulatory reporting, maintain incident documentation
• Enable Regulatory Oversight: Provide information to healthcare authorities, support investigation processes, maintain audit trails, ensure transparency

3.3.2 Data Protection and Privacy Compliance

Information processing supports:

• Rights Fulfillment: Respond to data subject requests, manage consent preferences, facilitate data portability, process deletion requests
• Breach Response: Incident investigation, impact assessment, regulatory notification, affected user communication
• Compliance Monitoring: Regular privacy impact assessments, data flow mapping, retention period management, cross-border transfer oversight

3.4 Marketing and Business Development

3.4.1 Direct Marketing Communications

With appropriate consent, we use information for:

• Service Updates: New feature announcements, service improvement notifications, policy change communications
• Educational Content: Industry news, best practice guidance, continuing education opportunities, regulatory updates
• Promotional Communications: Subscription upgrade offers, partner discounts, special promotions, event invitations

3.4.2 Market Research and Analysis

Aggregated and anonymized data supports:

• Industry Insights: Market trend analysis, demand forecasting, competitive intelligence, service gap identification
• Product Development: New feature conceptualization, service enhancement prioritization, user interface improvements
• Business Intelligence: Performance benchmarking, growth planning, strategic decision-making, investor reporting

4. INFORMATION SHARING AND DISCLOSURE

4.1 Information Sharing with Users

4.1.1 Practice-Patient Communications

We facilitate information sharing by:

• Lead Delivery: Transmitting Patient contact information and treatment requirements to relevant Practices securely
• Profile Display: Publishing Practice information, credentials, and service offerings to prospective Patients
• Review Systems: Displaying Patient feedback and ratings to help inform treatment decisions
• Communication Facilitation: Enabling secure messaging and appointment scheduling between parties

4.1.2 Public Directory Information

Certain Practice information is publicly accessible:

• Basic Contact Details: Practice names, addresses, telephone numbers, website links, general service descriptions
• Professional Credentials: Licensed specializations, years of experience, educational qualifications, professional affiliations
• Patient Reviews: Verified patient feedback, ratings, and testimonials (with reviewer consent and privacy protection)

4.2 Service Provider and Business Partner Sharing

4.2.1 Essential Service Providers

We share information with:

• Payment Processors: Stripe and other financial service providers for subscription billing, transaction processing, fraud prevention, regulatory compliance
• Cloud Infrastructure: AWS, Microsoft Azure, and other hosting providers for data storage, processing, backup, and disaster recovery
• Communication Services: Email service providers, SMS gateways, notification systems for user communications and alerts
• Analytics Providers: Google Analytics, other measurement tools for usage analysis, performance monitoring, user experience optimization

4.2.2 Professional Verification Partners

Information sharing includes:

• Regulatory Databases: Professional licensing authorities for credential verification, status monitoring, disciplinary action tracking
• Insurance Verification: Professional indemnity insurers for coverage confirmation, policy status updates, claims history review
• Educational Institutions: Dental schools, continuing education providers for qualification verification, credit tracking, compliance monitoring

4.2.3 Business Integration Partners

We may share relevant information with:

• Course Directory Partners: Educational content providers for enrollment processing, progress tracking, certification management
• Discount Program Partners: Product and service providers for purchase processing, benefit delivery, satisfaction monitoring
• Professional Organizations: Dental associations, specialty societies for member verification, event coordination, continuing education tracking

4.3 Legal and Regulatory Disclosures

4.3.1 Mandatory Legal Disclosures

We disclose information when required by:

• Court Orders: Subpoenas, search warrants, judicial orders, legal discovery processes in civil and criminal proceedings
• Regulatory Investigations: Healthcare authorities, professional licensing boards, consumer protection agencies, competition authorities
• Law Enforcement: Police investigations, fraud prevention, public safety matters, national security requirements
• Tax and Financial Authorities: Revenue services, anti-money laundering agencies, financial intelligence units, customs authorities

4.3.2 Public Safety and Legal Protection

Information may be disclosed to:

• Protect User Safety: Prevent fraud, abuse, or harm to Users, investigate security incidents, support emergency responses
• Defend Legal Interests: Protect Company rights, defend against legal claims, enforce Terms of Service, investigate violations
• Compliance Obligations: Meet regulatory reporting requirements, support audit processes, facilitate government oversight

4.4 Business Transactions and Corporate Changes

4.4.1 Merger and Acquisition Activities

In connection with potential or actual:

• Business Sales: Asset sales, business unit transfers, equity transactions, strategic partnerships
• Corporate Restructuring: Mergers, acquisitions, consolidations, spin-offs, joint ventures
• Financing Activities: Investment rounds, debt financing, public offerings, private placements

4.4.2 Due Diligence and Transition

Information sharing may occur for:

• Due Diligence Processes: Business valuation, risk assessment, compliance verification, financial analysis
• Integration Planning: System integration, data migration, service continuity, user communication
• Regulatory Approvals: Competition authority clearance, healthcare regulatory approval, professional body notification