Privacy Policy

1Who are we and who does this policy cover?

Center for Dental Implants & Esthetics (“CDIE”, “we”, “us”) is a private limited company running dental clinics in Gurgaon (Gurugram), Haryana, India. We are the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), and the “controller” under GDPR. In simple words: we decide why and how your information is used, so we are responsible for it.

This policy covers:

• Visitors to cdieindia.com, including people who fill a form, message us on WhatsApp or call us.
• Patients of our clinics at Sector 51 and Sector 74, Gurgaon, and their parents or guardians.

Using our website or sharing your information with us means you have read this policy. Where the law asks for your consent, we ask for it separately and clearly.

2What information do we collect when you use our website?

3What patient information do we collect at our clinics?

When you become a patient, we create a clinical record. It may include:

• Identity and contact: name, age, gender, address, phone, email, emergency contact.
• Health information: medical and dental history, allergies, medicines, pregnancy status where relevant, and habits that affect treatment.
• Diagnostic records: X-rays (IOPA, OPG), 3D scans (CBCT), intraoral scans, clinical photographs and models.
• Treatment records: diagnosis, treatment plans, consent forms, prescriptions, notes and follow-ups.
• Billing records: estimates, invoices and payment mode. Card and UPI payments are handled by the payment provider, and EMI by the finance partner you choose.

Health information is sensitive. We use it only to diagnose, treat and follow up your care, and for the other purposes in section 5.

4Do we use cookies and tracking tools on cdieindia.com?

Yes. On your first visit a banner asks you to Accept or Decline. If you decline, we use only essential cookies that keep the site working. The analytics and advertising tools below stay off until you accept.

• Change your mind any time: use the cookie settings link on this site, or clear cookies in your browser.
• Browser “Do Not Track” signals: our site does not currently act on them. The cookie banner is how you control tracking here.
• We do not use third-party call-tracking or call-recording services.

5Why do we use your information?

• To treat you: diagnose, plan, perform and follow up your dental care.
• To run appointments and billing: bookings, reminders, estimates, invoices, insurance reimbursement paperwork and EMI applications you request.
• To answer you: reply to calls, WhatsApp messages, emails and forms.
• To improve our website and services: understand which pages and treatments patients need information on.
• To advertise responsibly: measure ads and reach people who may need care, only if you accepted marketing and analytics cookies.
• To meet legal duties: maintain medical records, respond to lawful requests, and protect our rights.

Our basis for doing so is your consent, or where the law allows, a legitimate use such as providing the care you asked for, a medical emergency, or a legal obligation.

6Who do we share your information with?

We do not sell your personal information. We share it only when needed, and only the part that is needed:

• Our clinical team at the clinic where you are treated, including specialists who join your care.
• Dental laboratories and manufacturers that make your crowns, dentures, implants parts or aligners. They receive scans, impressions or measurements for your case.
• Other doctors, hospitals or diagnostic centres when your care needs them, with your consent.
• Service providers for scheduling, messaging, analytics, advertising and IT hosting, as listed in section 4. They may use your data only for the service they provide to us.
• Payment and EMI partners you choose to use.
• Authorities when a law, court order or valid government request requires it.
• A buyer or successor if our business is ever merged or transferred. Your rights stay protected.

7How long do we keep your information?

We may keep information longer if the law requires it, if it is needed for a legal claim, or if it is made anonymous so that it no longer identifies you. You can also ask us to delete your data earlier (section 11). Some clinical records may have to stay where the law requires us to keep them.

8How do we keep your information safe?

• Our website uses HTTPS, which encrypts data between your device and our server.
• Patient records are open only to staff who need them for your care.
• Physical records are kept at our clinics and destroyed when the retention period ends.
• We choose service providers that offer standard security protections.

No website or storage method is 100% secure. If a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires. We protect health information in line with the DPDP Act and with international good practice. We do not claim certification under any foreign health-data law.

9What about children and patients under 18?

We treat children, including milk-teeth care, fluoride treatment and early orthodontics. For any patient under 18, we collect and use information only with the consent of a parent or legal guardian, who must be present or approve in writing. Our website forms are meant for adults. If a child sent us information without a parent’s knowledge, tell us and we will delete it. We do not use children’s data for tracking or targeted advertising.

10What if I am an international patient?

Our clinics and servers are in India, so your information is processed in India. If you contact us from outside India, you agree to this transfer when you share your information. We apply the same protections to every patient, wherever you live. Our laboratory or manufacturing partners may be outside India for some treatments (for example, aligners). We share only what is needed for your case.

11What are my rights under India’s DPDP Act?

The DPDP Act and its Rules are being brought into force in phases, with the main duties for businesses applying from May 2027. We already follow its principles. As a “Data Principal”, you can:

• Ask for a summary of the personal data we hold about you and how we use it.
• Ask us to correct, complete or update your data.
• Ask us to erase your data when it is no longer needed, unless a law requires us to keep it.
• Withdraw your consent at any time. This does not affect what we did before you withdrew.
• Use our grievance process (section 17) and, if you are not satisfied, complain to the Data Protection Board of India.
• Nominate someone to exercise these rights for you if you die or cannot act for yourself.

To use a right, write to our Patient Care Officer. We may ask you to confirm your identity first.

12What are my rights under GDPR (EU and EEA residents)?

If you are in the European Union or European Economic Area, you may also:

• Access your data and get a copy in a common format (portability).
• Correct inaccurate data, or erase it where the law allows.
• Restrict or object to certain uses.
• Withdraw consent at any time. We use explicit consent for health information.
• Complain to your local data protection authority.

Contact us using section 17. We will reply within the time the law allows.

13What if I live in California?

To the extent California privacy law (CCPA/CPRA) applies to us, you may ask to know what personal information we collected, to delete it, to correct it, and to opt out of “sale” or “sharing”. We do not sell personal information. Advertising cookies such as the Meta Pixel may count as “sharing” for advertising under California law. You can stop this by choosing Decline in our cookie banner. We will not treat you worse for using these rights. Send requests to the address in section 17.

14How do you handle marketing messages, reviews and photos?

• Messages: we send appointment reminders and care instructions as part of your treatment. We send offers or newsletters only if you agreed. Reply “STOP” or tell us, and we will stop.
• Before-and-after photos and testimonials: we publish them only with your written consent, and you can withdraw that consent later.
• Reviews: reviews you post on Google or social media are public and are governed by those platforms.

15Links to other websites

Our site links to Google Maps, WhatsApp, Instagram, Facebook, LinkedIn, Appointy and finance partners. We do not control them and are not responsible for their privacy practices. Please read their policies before sharing information.

16Will this policy change?

We may update this policy when our services, tools or the law change. The “Last updated” date at the top shows the latest version. For major changes we will add a notice on our website. Please check back from time to time.