Privacy policy
Draft, awaiting legal review. The clinic will confirm this text before the site goes live.
This policy explains what personal data CDIC Smiles collects through this website, why, who it is shared with, how long it is kept, and the rights you have under India's Digital Personal Data Protection Act, 2023. CDIC Smiles (Cosmetic Dental & Implant Center), with clinics in Wakad and Hinjewadi, Pune, decides how this data is used.
What we collect, and why
| Where | What | Why |
|---|---|---|
| Booking form | Clinic, reason for the visit, preferred day and time, name, phone number, and any note you add | To call you and arrange the appointment |
| Patient information form | Name, age, phone, email if given, reason for the visit, health conditions, medicines, allergies, pregnancy, past problems with anaesthetic, and whether you feel nervous | So the dentist can plan your care safely before you arrive |
| Virtual consultation form | Name, country, email, WhatsApp number, what you would like help with, and how and when you would like to talk | To reply with a plan and arrange a call |
| Email and WhatsApp | Whatever you send us, including X-rays, scans and photos | To advise you and keep with your records |
Health information is sensitive. We ask only for what the dentist needs, and only you decide what to share. Each form asks for your consent before it is sent, and we record which version of this policy you agreed to.
What the website records about every visit
- A security check by Cloudflare Turnstile on each form, to stop automated spam. It looks at signals from your browser; it does not ask you to identify pictures.
- Rate limiting. To stop the forms being flooded, we count requests per connection for a short time. We store a one-way, salted code made from your IP address, never the address itself, and delete these codes regularly.
- Server logs kept by our hosting provider, Cloudflare, for security and to keep the site running.
This site uses no advertising cookies and no analytics cookies, and nothing you type into a form is put in a web address or sent to an analytics service.
Maps
The home page, the clinic pages and the pages about a treatment at Wakad or Hinjewadi show Google Maps. Each map loads from Google once the page has loaded, and Google may then set cookies and receive your IP address under its own privacy policy. You can use the address and directions links instead if you prefer.
Who sees your data
The clinic team, to arrange and provide your care. We do not sell personal data or share it for marketing. These service providers handle it on our behalf, only to provide their service:
- Cloudflare: website hosting, the security check, and the database that stores form requests.
- Resend: sends the clinic an email when a form is submitted.
- Google: hosts the clinic's email (cdic.pune@gmail.com), where those notifications and the files you email us arrive; and the maps.
- WhatsApp (Meta): if you message us on WhatsApp, under WhatsApp's own terms.
Some of these providers may store data on servers outside India.
How long we keep it
- Requests sent through the website's forms are kept in its database for 24 months, then deleted.
- If you become a patient, the details you gave us, and the files you sent, become part of your clinical records. We keep clinical records for as long as the law on medical records requires.
- If you do not become a patient, ask us and we delete your emails and files sooner.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask what personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- ask us to erase it, unless the law requires us to keep it, as with clinical records;
- withdraw your consent at any time, which stops further use but does not undo use before you withdrew it;
- nominate someone to exercise these rights for you if you cannot;
- raise a grievance with us, and, if you are not satisfied with our answer, complain to the Data Protection Board of India.
To use any of these rights, email cdic.pune@gmail.com or call +91 97660 04270 or +91 99705 04270. We may ask you to confirm who you are before acting on a request.
Children
For a patient under 18, a parent or guardian should fill in the forms and give consent.
Keeping it safe
Every page and form is served over an encrypted connection. Access to the database and the clinic's email is limited to the people who need it.
Changes to this policy
If this policy changes, the date and version at the top change too. The version you agreed to is recorded with each form you send.