Privacy Policy

01Introduction

Tiara Dental Clinic (“Tiara Dental,” “we,” “us,” or “our”) respects your privacy. We are committed to protecting your personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

This Privacy Policy explains what personal data we collect through our website tiaradental.ph and our related channels. It covers why we collect it, how we use and protect it, who we share it with, and the rights you have over your data.

By using our website or contacting us through it, you acknowledge that you have read and understood this Policy.

02Who We Are

Tiara Dental Clinic is the Personal Information Controller (PIC) responsible for your data.

• Clinic: Tiara Dental Clinic
• Address: G4 Columbia Crystal Condominium, Columbia St. cor. 15th Ave, E. Rodriguez, Cubao, Quezon City
• Email: [email protected]
• Phone / SMS: +63 917 541 4263
• Data Protection Officer / Privacy contact: Dr. Rheagellene Publico-Nisperos, the clinic’s dentist, reachable at [email protected]

03What Personal Data We Collect

We collect only what we need. Depending on how you interact with us, this may include the following.

a. Information you give us directly

• Contact and enquiry details: your name, email address, mobile number, and the content of any message you send us through the website contact form, Facebook Messenger, SMS, or a phone call.
• Appointment and booking details: the service you are interested in, your preferred date, and any information you choose to share when arranging a visit.
• Health-related information (sensitive personal information): if, in the course of an enquiry or booking, you voluntarily share information about your dental or general health, this is treated as sensitive personal information and handled with additional care. See Section 7.

b. Information collected automatically when you visit the website

• Usage and device data: pages viewed, links clicked, time on site, referring website, browser type, device type, and approximate location, collected through cookies and analytics tools. See Section 6.
• Technical and server logs: your IP address and standard server-log information, kept for security and troubleshooting.

c. Information from third parties

• When you message us via Facebook Messenger (m.me/tiaradentalclinic) or interact with our Facebook and Instagram pages, we receive the information those platforms make available to us, such as your public profile name and the messages you send.

We do not knowingly collect payment-card details through the website.

04How and Why We Use Your Data

We process your personal data for the following purposes, each with a lawful basis under the DPA:

Purpose	Legal basis (DPA)
PurposeRespond to your enquiries and messages	Legal basisConsent; and steps taken at your request prior to a service
PurposeSchedule, confirm, and manage your appointment	Legal basisPerformance of a service you requested; consent
PurposeProvide and coordinate dental care and follow-up	Legal basisConsent; and, for health data, your consent to processing of sensitive personal information
PurposeKeep records required of a dental practice	Legal basisCompliance with a legal obligation
PurposeOperate, secure, and improve the website (analytics)	Legal basisConsent for cookies and analytics; our legitimate interest in a safe, working site
PurposeComply with law and respond to lawful requests	Legal basisCompliance with a legal obligation

We will not use your data for a new, unrelated purpose without informing you and, where required, obtaining your consent.

05Marketing

We will only send you appointment reminders or updates through the channel you contacted us on. We do not sell your data, and we do not send unsolicited marketing. Where any optional updates are offered, you may opt out at any time by replying or contacting us at [email protected].

06Cookies and Analytics

Our website uses cookies and similar technologies to function and to understand how visitors use the site. These include:

• Google Analytics 4 and Google Tag Manager, which measure website traffic and usage in aggregate so we can improve the site. These may set cookies and process usage data as described by Google.
• Essential and functional cookies needed for the site to work properly.

We use these tools with their standard, default configurations from Google. You can control or delete cookies through your browser settings, and you can opt out of Google Analytics using Google’s browser add-on.

07Sensitive Personal Information

As a dental clinic, any information about your oral or general health is sensitive personal information under the DPA. We process such information only:

• with your consent; or
• where processing is necessary for medical treatment carried out by, or under the supervision of, a licensed dental or health professional bound by confidentiality; or
• where otherwise permitted by the DPA.

We limit access to this information to personnel who need it to provide your care.

08Who We Share Your Data With

We treat your data as confidential and share it only as needed:

• Service providers that run our website and tools, acting as our Personal Information Processors, including:
  • Hostinger for website hosting;
  • Cloudflare for content delivery and security;
  • Google LLC for website analytics (Google Analytics and Tag Manager) and, separately, our Google Business Profile and Maps listing;
  • Meta Platforms (Facebook, Instagram, Messenger) when you contact or interact with us there.
• Professional advisers, regulators, or authorities, where we are required by law or a lawful order to disclose information.

We do not sell or rent your personal data to anyone.

Some of these providers, such as Google, Meta, and Cloudflare, may process data on servers outside the Philippines. Where that happens, we take reasonable steps so your data continues to receive protection consistent with the DPA.

09How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes above or as required by law:

• Website enquiry and contact messages: kept for as long as you remain a prospective patient of the clinic, so we can pick up the conversation when you are ready to visit. If you would like your messages deleted sooner, simply tell us (see Section 11) and we will erase them.
• Appointment and patient records: if you become a patient, your records are kept for as long as you remain a patient or a returning patient of the clinic, and in all cases for at least the period required for dental records under applicable Philippine law and professional rules.
• Analytics data: retained according to Google Analytics’ standard, default data-retention settings, after which it is automatically deleted or held only in aggregate form.

When data is no longer needed, we securely delete or anonymize it. You may ask us to delete your data at any time, subject to records we are legally required to keep.

10How We Protect Your Data

We use reasonable organizational, physical, and technical measures to protect your personal data against unauthorized access, loss, or disclosure. These include limiting access to authorized personnel, using secure (HTTPS) connections on the website, and keeping clinic records confidential. No method of transmission or storage is completely secure, but we work to protect your information and to address any incident as required by the DPA and NPC rules.

11Your Rights as a Data Subject

Under the Data Privacy Act, you have the right to:

• Be informed about the collection and processing of your personal data;
• Access the personal data we hold about you;
• Object to or withdraw consent for processing;
• Rectify inaccurate or outdated data;
• Erasure or blocking of your data in the circumstances the law allows;
• Data portability, where applicable;
• Damages for violations of your rights; and
• Lodge a complaint with the National Privacy Commission.

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable period. We may need to verify your identity before acting on a request.

12Children’s and Minors’ Data

We provide dental care to children, but bookings and enquiries involving a minor should be made by a parent or legal guardian. We do not knowingly collect a minor’s personal data through the website without such consent. If you believe a minor’s data has been provided without proper consent, contact us and we will address it.

13Links to Other Sites

Our website and profiles may link to third-party sites, such as Facebook, Instagram, and Google Maps. This Policy does not cover those sites, and we encourage you to read their privacy policies.

14Changes to This Policy

We may update this Policy from time to time. The current version, with its “Last updated” date, will always be posted on this page. Material changes will be made clear.

15How to Contact Us and the NPC

For any question, request, or concern about your personal data or this Policy:

• Tiara Dental Clinic · Dr. Rheagellene Publico-Nisperos, Data Protection Officer
• Email: [email protected] · Phone / SMS: +63 917 541 4263
• Address: G4 Columbia Crystal Condominium, Columbia St. cor. 15th Ave, E. Rodriguez, Cubao, Quezon City

If you believe your data-privacy rights have been violated, you may also contact the National Privacy Commission (NPC): website privacy.gov.ph, email [email protected].