Privacy Policy

1. Introduction

MyDentalFly ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using MyDentalFly, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

We collect information that you provide directly to us:

• Name, email address, phone number
• Postal address and country of residence
• Date of birth
• Dental health information and medical history
• Payment information (processed securely by Stripe)
• Dental images, X-rays, and photographs you upload
• Communication preferences

Automatically Collected Information

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website addresses
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for:

• Providing and managing our services
• Connecting you with dental clinics
• Processing bookings and payments
• Sending treatment quotes and clinic information
• Communicating about your appointments and treatment plans
• Improving our website and services
• Sending marketing communications (with your consent)
• Complying with legal obligations
• Preventing fraud and ensuring security

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

Contract Performance

Processing necessary to provide our services, including connecting you with clinics, managing bookings, and processing payments.

Consent

Where you have given consent, such as for marketing communications. You can withdraw consent at any time.

Legitimate Interests

Processing necessary for our legitimate interests, such as fraud prevention, security, and service improvement, where these do not override your rights.

Legal Obligation

Processing required to comply with legal requirements, such as financial record keeping.

5. Sharing Your Information

We share your information with:

Dental Clinics

When you request a quote or book treatment, we share relevant information (name, contact details, dental information, medical history) with the selected clinic(s).

Service Providers

• Payment processors (Stripe) for secure payment handling
• Email service providers for communications
• Cloud storage providers for data storage
• Analytics providers to improve our services

Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

6. Data Security

We implement appropriate security measures:

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive information
• Access controls and authentication
• Regular security audits and updates
• Staff training on data protection

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights (GDPR)

Under UK GDPR, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing at any time

To exercise these rights, contact us at: info@mydentalfly.co.uk

8. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Typically:

• Account information: Until you request deletion or 3 years of inactivity
• Medical/dental records: 7 years (legal requirement)
• Payment records: 6 years (tax and legal requirements)
• Marketing data: Until you unsubscribe

9. Cookies

We use cookies and similar technologies to improve your experience. See our Cookie Policy for details.

You can control cookies through your browser settings.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.

11. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from children. If you believe we have collected such data, contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place through:

• EU Standard Contractual Clauses
• Adequacy decisions by the UK government
• Your explicit consent where required

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated via email.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us: