Privacy Policy | Dream Dental Care

1. Who we are

Dream Dental Care is a dental clinic operated at Guntur vari thota 2nd Lane, Main Road, beside Radhika Rayudu Hospital, Guntur, Andhra Pradesh 522001, India, under the clinical direction of Dr YNR Sudeshna Tulabandula (Periodontist & Implant Specialist). For the purposes of the DPDP Act, we act as the Data Fiduciary that determines the purpose and means of processing your personal data, and you are the Data Principal.

2. Scope of this policy

This policy applies to information we collect from and about you when you visit our website (dreamdental.co.in), book or attend an appointment, receive treatment, participate in a dental camp, make a payment, or otherwise interact with us in person, by phone, SMS, WhatsApp or email.

3. Information we collect

We collect only the information reasonably necessary to provide safe, effective dental care and to operate the clinic lawfully:

✓ Identity & contact - full name, date of birth, gender, mobile number(s), email and postal address.

✓ Health & clinical - dental and medical history, chief complaints, examination findings, dental (odontogram) charts, diagnoses, treatment plans, prescriptions, X-rays and other images, allergies, current medications, blood group, blood pressure, pregnancy status and other conditions you disclose. This is sensitive personal data and is treated with heightened care.

✓ Appointment & visit - appointment dates/times, attendance, recalls and reminders, and clinical notes for each visit.

✓ Billing & payment - invoices, amounts, payment method and status, and (where applicable) GST details. Online payments are processed by our payment gateway (Razorpay); we do not store your full card number, CVV, UPI PIN or bank credentials.

✓ Communications & feedback - messages we send you and your replies, enquiries, feedback and reviews.

✓ Website & technical - limited technical data such as IP address, device/browser type and pages viewed, and whether marketing emails we send are opened, used to keep the site secure and improve it.

4. How we collect it

Directly from you when you book, register, or share information during consultation and treatment; from a parent or guardian for patients who are minors; through our website and online booking; at dental camps and outreach events; and automatically through standard website technology (see Cookies below).

5. Why we use your information & our lawful basis

We process your information to: provide, plan and coordinate your dental treatment; schedule appointments and send reminders and recalls; prepare bills, receipts and process payments; maintain accurate medical records as required by law; respond to your enquiries and provide aftercare; and, where you have consented, send you clinic updates, birthday wishes and health information. Our lawful bases are your consent, the necessity of processing to provide the dental care you request, and our legal and regulatory obligations (including record-keeping and taxation).

6. Consent and how to withdraw it

By providing your information and receiving care, you consent to the processing described here. You may withdraw consent for non-essential processing (such as promotional messages) at any time by contacting us or using the unsubscribe/opt-out option in a message. Withdrawing consent does not affect processing already carried out, and we may still need to retain and process certain records to meet legal obligations or to complete care you have requested.

7. Messages and marketing

We may contact you by SMS, WhatsApp, email or phone for appointment confirmations, reminders, recalls, payment receipts and clinic information. Promotional communications are sent only where permitted, and you can opt out of them at any time; essential messages relating to your care, appointments and payments may still be sent.

8. When we share information

We do not sell your personal data. We share it only as needed to run the clinic and deliver care, with:

✓ Service providers (Data Processors) acting on our instructions - our SMS/WhatsApp gateway, email provider, payment gateway (Razorpay), and website/hosting provider - only to the extent needed to deliver that service.

✓ Dental laboratories for the fabrication of crowns, dentures, aligners and similar prosthetics, limited to what is necessary for the work.

✓ Authorities or third parties where required by law, court order, or to protect the safety of a patient or others.

Where a treatment plan is presented for your review and acceptance, you may choose to sign it electronically; that signature and acceptance are stored with your record.

9. How we protect your information

Your data is transmitted over encrypted (HTTPS/TLS) connections and stored on access-controlled systems. Clinical records, X-rays, signed documents and uploads are accessible only to authorised staff through authenticated logins, and access to sensitive records is recorded in an internal audit log. We take reasonable technical and organisational measures to guard against unauthorised access, loss, misuse or alteration.

10. How long we keep it

We retain your records for as long as you remain our patient and thereafter for the period required to meet medical record-keeping, tax and legal obligations. When information is no longer required for these purposes, it is securely deleted or anonymised.

11. Your rights

Subject to the DPDP Act, you have the right to: obtain access to and a summary of the personal data we hold about you; request correction or updating of inaccurate or incomplete data; request erasure of data we are not legally required to retain; withdraw consent for non-essential processing; nominate another individual to exercise your rights in the event of death or incapacity; and raise a grievance with us. We provide a downloadable export of your records on request. To exercise any right, contact us using the details in Section 15.

12. Children and minors

For patients under 18, we collect and process information with the consent of, and in the presence of, a parent or legal guardian, and we do not knowingly process a minor's data in a way that is detrimental to their wellbeing.

13. Cookies and tracking

Our website uses only the minimal cookies needed to keep you signed in and remember basic preferences. We do not use third-party advertising trackers. Marketing emails we send may include a pixel that tells us whether the email was opened, used solely to measure and improve our own communications; you can opt out of marketing emails at any time.

14. Third-party links

Our website may link to third-party sites (for example, our travel partner for dental-tourism visitors, or a Google review page). We are not responsible for the privacy practices of those sites; please review their policies separately.

15. Data breach & grievance redressal

In the event of a personal data breach that is likely to affect you, we will take prompt remedial action and provide notification as required under the DPDP Act. If you have any question, request or complaint about how your data is handled, please contact our Grievance Officer:

Grievance Officer - Dream Dental Care
Guntur vari thota 2nd Lane, Main Road, beside Radhika Rayudu Hospital, Guntur, Andhra Pradesh 522001
Phone: 95557 49997 · Email: hello@dreamdental.co.in

We aim to acknowledge and respond to requests and grievances within a reasonable period. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

16. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The current version, with its revision date, will always be available on this page.