1. Information We Collect

We may collect the following types of information:

a. Personal Information

• Name

• Email address

• Phone number

• Country of residence

• Passport/NIC number (if required for treatment purposes)

• Medical and dental history (when voluntarily submitted)

• Appointment and inquiry details

b. Technical Information

• IP address

• Browser type and device info

• Operating system

• Pages visited and time spent

• Referral source

c. Cookies and Tracking

We use cookies and similar technologies to enhance user experience and track website analytics. You can manage cookie preferences through your browser settings.

2. How We Use Your Information

We may use your information to:

• Respond to inquiries or appointment requests

• Schedule and manage dental services

• Share treatment plans or medical guidance (with your consent)

• Process payments or confirm bookings

• Send updates, confirmations, or feedback forms

• Improve website functionality and content

• Comply with legal and regulatory requirements

3. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using personal data includes:

• Your consent

• Fulfillment of a contract

• Compliance with legal obligations

• Legitimate interests (such as responding to your requests or improving our services)

4. Your Data Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your personal data

• Object to processing or restrict usage

• Withdraw consent at any time

• Lodge a complaint with your local data protection authority

To exercise these rights, contact us at admin@dentaltourism.lk.

5. Data Retention

We retain your personal information only for as long as necessary for the purposes outlined in this policy or as required by law (e.g., medical records retention regulations).

6. Data Sharing and Disclosure

We do not sell or rent your personal data. We may share it only with:

• Authorized dental professionals involved in your care

• Third-party service providers (e.g., hosting, analytics, secure communications)

• Legal or regulatory authorities as required by law

• Payment processors or health insurance providers (if applicable)

All third-party providers are contractually obligated to protect your data.

7. International Data Transfers

As our operations and data storage may involve international transfers, we ensure appropriate safeguards (such as Standard Contractual Clauses under GDPR) are in place to protect your information.

8. Security Measures

We implement appropriate physical, technical, and administrative safeguards to protect your data from unauthorized access, loss, misuse, or alteration. These include:

• SSL encryption

• Role-based access control

• Secure data storage and backups

• Staff confidentiality agreements

9. Children’s Privacy

Our services are not intended for individuals under the age of 16 without parental or guardian consent. If we discover that we have collected personal data from a child without verification, we will take steps to delete it promptly.

10. Third-Party Links

Our website may contain links to external sites (e.g., hotel partners, tourism services). We are not responsible for their privacy practices. Please review their policies before submitting any personal information.

11. Changes to This Privacy Policy

We may update this policy from time to time. The latest version will always be posted on this page with an updated effective date. If changes are significant, we will notify you via email or website notice.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact:

📧 Email: privacy@dentaltourism.lk
📞 Phone: +94 71 618 9999
🏢 Address: Cayo Dental International, No. 911/2, Peradeniya Road, Kandy, Sri Lanka