This policy explains what personal data Damansara Dental Studio collects through this website, why we collect it, and what you can ask us to do with it. It is written to meet our obligations under Malaysia's Personal Data Protection Act 2010 (PDPA).
It covers this website only. Personal and clinical data collected during an actual visit to the clinic is handled under our in-clinic patient records policy and the confidentiality duties that apply to registered dental practitioners in Malaysia.
Who we are
Damansara Dental Studio, a dental clinic at C212 (Ground Floor) Centre Wing, Metropolitan Square, Jalan PJU 8/1, Bandar Damansara Perdana, 47820 Petaling Jaya, Selangor, Malaysia. We are the data controller for the information described below.
For any privacy question or request, contact us at damansaradentalstudio@gmail.com or +603-7613 7159.
What we collect, and why
Information you give us directly
When you submit the booking form on our Contact page, we collect your name, email address, phone number, your preferred treatment or reason for visiting, your answers about your goals for your smile and how you rate the importance of your dental health, and any message you write. We use this solely to respond to you and arrange an appointment.
When you submit the international patient enquiry form on our Dental Tourism page, we collect your name, email address, country, and details of the treatment you are enquiring about, for the same purpose.
If you pay an appointment deposit, we collect your name, email address and a booking reference. Card and payment-account details are entered directly with our payment providers — they are never sent to, seen by, or stored on this website.
Providing this information is voluntary, but if you do not provide it we will not be able to contact you or arrange your appointment.
Information collected automatically
Like almost every website, ours records standard technical information when you visit: your IP address, browser and device type, the pages you view, and the site or search that referred you. This is used to keep the site secure and to understand which pages are useful.
We use Google Analytics 4 for this. It sets cookies in your browser to distinguish repeat visits. We have not enabled advertising or remarketing features. You can opt out entirely using Google's browser add-on, or by blocking cookies in your browser settings — the site works normally without them.
Who your information is shared with
We do not sell your personal data, and we do not share it for anyone else's marketing. It is disclosed only to the service providers that make this website work:
- Netlify — hosts this website and delivers our form submissions to our email inbox.
- Google — provides Analytics, and serves the fonts used on this site (which means Google receives your IP address when a page loads).
- Stripe and PayPal — process deposit payments, if you choose to pay one. Each handles your payment details under its own privacy policy.
- Third-party publishing tools that supply some of the articles on our blog, which load content into the page from their own servers.
- WhatsApp (Meta) — if you choose to start a chat with us using a WhatsApp link on this site.
Some of these providers process data on servers outside Malaysia. Where that happens, we rely on the provider's own contractual data-protection commitments. We may also disclose information where we are required to by Malaysian law or a lawful request from an authority.
How long we keep it
Enquiry and booking form submissions are kept for as long as needed to deal with your enquiry and, if you become a patient, for as long as our patient-records obligations require. Analytics data is retained on Google's standard retention schedule. If you ask us to delete an enquiry that did not become an appointment, we will do so.
Keeping it safe
This site is served entirely over HTTPS, so anything you submit is encrypted in transit. Form submissions are delivered to a clinic-controlled email account. We take reasonable steps to protect your data, though no method of transmission over the internet can be guaranteed completely secure.
Your rights under the PDPA
Under the Personal Data Protection Act 2010 you have the right to:
- Access the personal data we hold about you, and request a copy.
- Correct anything that is inaccurate, incomplete or out of date.
- Withdraw your consent to our processing, and to limit how your data is processed.
- Ask us to stop using your data for direct marketing — we will comply without charge.
To exercise any of these, email damansaradentalstudio@gmail.com. We may need to verify your identity first, and we will respond within the period required by the PDPA. We may charge a small prescribed fee for a data-access request, as the Act permits.
Children
We treat patients of all ages, but this website is not directed at children, and we do not knowingly collect personal data online from anyone under 18 without a parent or guardian submitting it on their behalf.
Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes will be made clear on the site.
This policy is provided for transparency about our website. It is not legal advice, and it does not replace the consent and privacy notices you are given as a patient at the clinic.