Privacy Policy

Last updated: 31 July 2026

This policy explains what personal information Dental Leaf Multi Speciality Dental Clinic (“Dental Leaf”, “we”, “us”) collects through this website, why we collect it, how long we keep it and what rights you have over it. It applies to dentalleaf.in. It does not cover the clinical records we hold about you as a patient, which are governed by our in-clinic records policy and by Indian medical record-keeping requirements.

1. Who we are

Dental Leaf Multi Speciality Dental Clinic
65A, T.T.K. Nagar, West Tambaram, Irumbuliyur, Chennai, Tamil Nadu 600045
Phone: +91 9585 360 320
Email: dentalleafs@gmail.com

For any question about this policy or your data, contact us using the details above and mark your message for the attention of the practice manager.

2. Information we collect

We only collect what we need to respond to you and to arrange your care.

Information you give us directly

• Appointment booking form: your name, phone number, email address, the treatment you are enquiring about, your preferred date and time, and anything you write in the message box.
• Contact form: your name, phone number, email address and your message.
• Phone, WhatsApp and email: whatever you choose to tell us when you get in touch.

Please do not send detailed medical or dental history through the website forms. Bring it to your appointment or discuss it with us directly, where we can handle it securely.

Information collected automatically

• Server logs: our web host records your IP address, browser type and the pages you requested. This is standard for any website and is used for security and troubleshooting.
• Anti-spam: to stop automated abuse of our forms, we record a one-way hashed version of your IP address and the time of submission. The hash cannot be reversed to recover your IP address, and these records are discarded automatically within one hour.
• Analytics: if website analytics are enabled, we use Google Analytics 4 with IP anonymisation to understand which pages are useful. This tells us things like “40 people tapped the call button this week”. It does not tell us who you are.

3. Why we use it, and our lawful basis

What we do	Why
Reply to your enquiry and arrange an appointment	To take steps you have asked for before providing treatment
Contact you about an appointment you booked	To deliver the service you requested
Keep our forms free of spam and abuse	Our legitimate interest in keeping the site working
Understand how the website is used	Your consent, and our legitimate interest in improving the site
Meet record-keeping and legal obligations	Compliance with applicable law

We do not sell your personal information, and we do not use it for advertising profiling.

4. Who else sees your information

We share as little as possible, and only with providers that help us run the clinic:

• Google (Gmail / Google Workspace) — form submissions are delivered to our clinic inbox by email, so they pass through and are stored on Google’s mail servers.
• Google Analytics — anonymised usage statistics, only when analytics is enabled.
• Google Maps — our contact page embeds a map. When it loads, Google may receive your IP address and set cookies under its own privacy policy.
• WhatsApp (Meta) — if you choose to message us on WhatsApp, that conversation is handled by WhatsApp under Meta’s privacy policy.
• Our web hosting provider — which stores the website and its server logs.

We may also disclose information where we are legally required to, or where it is necessary to protect someone’s safety.

5. How long we keep it

• Enquiries that do not become appointments: kept while we deal with them and for a reasonable period afterwards, then deleted.
• Anti-spam records: automatically discarded within one hour.
• Patient clinical records: retained for the period required by Indian medical record-keeping rules. [CONFIRM YOUR RETENTION PERIOD]
• Server logs: retained per our host’s standard policy.

6. How we protect it

The website is served over HTTPS. Our forms validate and sanitise what is submitted, and are protected against automated abuse. Access to the clinic inbox is restricted to authorised staff. No system is completely secure, but we take reasonable steps to protect your information and to keep the amount we hold to a minimum.

7. Your rights

Under India’s Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data we hold about you and how it is used;
• correct anything inaccurate, incomplete or out of date;
• erase personal data where we no longer have a reason to keep it;
• withdraw consent, where we relied on your consent;
• nominate someone to exercise these rights on your behalf; and
• raise a grievance about how we have handled your data.

Contact us using the details in section 1 and we will respond within a reasonable period. If you are not satisfied, you may escalate to the Data Protection Board of India.

Grievance Officer: [NAME AND EMAIL — required under the DPDP Act]

8. Children

We treat children as patients, and we ask that a parent or guardian makes the booking and provides the contact details. We do not knowingly collect information directly from a child through this website.

9. Cookies

This website does not set advertising cookies. Cookies may be set by Google Analytics (when enabled) and by the embedded Google Map on our contact page. You can block or delete cookies in your browser settings; the site will continue to work.

10. Changes to this policy

If we change this policy we will update the “last updated” date at the top of this page. Please check back occasionally.