This policy explains the collection, use, retention, and protection of personal data when you visit our website, submit consultation requests, book appointments, or use services at Santé Dental Clinic. Health data and medical records are protected according to the requirements for medical information and sensitive personal data.
1. Receiving Entity and Point of Contact Santé Dental Clinic is the receiving entity for data requests arising from the clinic's operations. You can contact us via email at Sante.dentalvn@gmail.com, hotline 0258 730 8386, or at STH24.19 Thich Quang Duc, Nam Nha Trang Ward, Khanh Hoa Province.
2. Data That May Be Collected
-
Contact and appointment information: full name, phone number, email (if provided), preferred schedule, services of interest, and content of communication with the clinic.
-
Examination and treatment information: medical history, allergies, current medications, examination results, X-rays, intraoral photos, treatment plans, and other necessary data when you use our services.
-
Transaction information: treatment items, amount, payment status, invoices, and necessary information for reconciliation. We do not require you to provide your PIN, bank password, or OTP code to our staff.
-
Technical information (when the website uses corresponding tools): IP address, browser type, device, access time, security logs, and cookie preferences. The specific scope is notified according to the function being implemented.
3. Purpose of Use Santé uses necessary data to respond to requests, confirm and remind appointments; receive patients, perform care and treatment; manage records, payments, invoices, warranties, and resolve complaints. Data may also be used to protect the system and fulfill legal obligations. Each purpose is limited to the necessary scope. Information provided for booking an appointment is not automatically used to publicize treatment images, share with advertising partners, or send marketing materials.
Consent and Scope of Sharing
4. Processing Basis and Your Choices Santé notifies you of the data types, purposes, and relevant parties before performing processing activities that require consent. Consent is recorded clearly, voluntarily, and verifiably; consent is not inferred simply from your silence or continued use of the website. For cases where the law permits or requires processing without consent, Santé only processes within the applicable legal basis, while fulfilling obligations regarding notification and related data protection. Consent to receive advertising or use images for media is selected separately. You can decline without losing the right to be considered for examination and treatment. Withdrawing consent does not invalidate the legality of processing activities previously carried out.
5. Images and Media Content Photos, X-rays, and data created for professional purposes are managed in their respective records. When wishing to use images, testimonials, or treatment stories to post on the website, social media, or for advertising, Santé requires separate consent regarding the content, channel, and scope of use. Covering eyes, cropping photos, or omitting names may not completely eliminate the possibility of identifying a person. You can contact us to discuss stopping the use of images within the scope of your rights and applicable agreements; the portion of records that must be retained by law is managed separately.
6. Parties That Can Access Data Assigned personnel only access data according to their duties. When coordination with labs, diagnostic units, software providers, storage, messaging, or payment services is necessary, Santé determines the role, sharing basis, and security requirements before providing the necessary data. Providing data to other healthcare facilities, insurance companies, or state agencies must meet corresponding legal conditions; this is not broadly inferred from a single appointment booking consent. Santé does not sell customers' personal data. If using infrastructure, platforms, or partners with data processing activities outside Vietnam, Santé will notify you and fulfill applicable legal requirements before implementation. You can contact us for an explanation regarding the data recipients related to your request.
Retention and Data Rights
7. Retention Period and Protection Appointment and consultation data are kept for the time necessary for the notified purpose. Medical records, transaction documents, and related documents are retained according to the statutory time limits applicable to each type of record. When the purpose ends and there is no longer a retention obligation, the data is deleted, destroyed, or processed so that personal identification is no longer possible according to the appropriate procedure. Santé applies measures to manage access rights, account security, backups, and control data provision in line with the system being used. In the event of an incident, the clinic will organize a response, limit the impact, and notify competent authorities and data subjects according to applicable regulations.
8. Exercising Your Rights Within the scope and conditions of the law, you have the right to know, consent or withhold consent, withdraw consent; view, request the provision or correction of data; request deletion, restriction, or object to processing; file a complaint and request the protection of legitimate interests. Please send your request through the point of contact, stating the content to be processed and sufficient information to verify your identity. Santé may require appropriate verification to avoid disclosing data to unauthorized persons. The clinic responds within the legal timeframe; if it is impossible to fulfill the entire request, we will explain the basis and scope of processing. Requests to delete or withdraw consent do not automatically lead to the destruction of medical records, invoices, or documents that the law requires to be retained. If a lack of data makes a service impossible to perform safely or legally, Santé will explain this for your choice.
9. Children's Data and Cookies The processing of children's data ensures the child's best interests, verifies the representative, and obtains the consent of the subjects according to age, data type, and legal requirements. The person booking an appointment for a child should only provide necessary information through the channel instructed by the clinic. If the website uses cookies or non-essential tracking tools, you will be notified and given a choice before activation according to applicable regulations. You can change your choices or browser settings; some functions may be affected. Links to other platforms are subject to the separate policies of those platforms.
10. Policy Updates The applicable version and effective date are published on the website. When changing the purpose or scope of processing that requires new consent, Santé will provide notification and obtain the appropriate consent before application.