Privacy – Cookies Policy

This privacy policy covers the treatment of personally identifiable information that we Say teeth collect when you are on our site, and when you use our services. This policy also applies to the treatment of any personally identifiable information that our business partners share with us. This policy does not apply to the practices of companies that we do not own or control, or to people that we do not employ or manage.

ABOUT US

Say teeth is the trading name of Dr. Andrea Protopapa, a private practitioner registered in Cyprus with its registered office address at Foti Pitta 59, Sotira, 5390, Cyprus. In this Privacy Notice, reference to “Say teeth”, “we” or “us” is a reference to Say teeth, Dr. Andrea Protopapa and any other member of the Say teeth clinic which provides the services from time to time, unless we specifically state otherwise.

Say teeth operates the website https://www.say-teeth.com, which provides information about our dental practice and allows patients to schedule appointments.

THIS PRIVACY NOTICE

At Say teeth we are committed to protecting your privacy. This Privacy Notice applies to all users of our website and  visitors of our dental clinic including our Patients and prospective Patients, and any visitors. This Privacy Notice sets out the basis on which any personal data about you that you provide to us, that we create, or that we obtain about you from other sources, will be processed by us. Please read this Privacy Notice to understand our practices regarding your personal data and how we will treat it.

The Privacy Notice is provided only in the English language. The Privacy Notice was last updated on 1 October 2024.

DATA PROTECTION PRINCIPLES

Anyone processing personal data must comply with the principles of processing personal data as follows:

  • Lawfulness, fairness and transparency – data must be processed lawfully, fairly and in a transparent manner.
  • Purpose limitation – data must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
  • Data minimisation – data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
  • Accuracy – data must be accurate and, where necessary, kept up to date.
  • Storage limitation – data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
  • Integrity and confidentiality – data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage by using appropriate technical or organisational measures.

This Privacy Notice describes the personal data that we collect, and explains how we comply with these principles.

WHAT INFORMATION DO WE COLLECT?

We may collect the following types of personal information when you use our service or when communicate with us by email, telephone, fax or social media channel:

  • Personal Information: This includes your name, contact details (address, phone number, email), date of birth, personal identification number, gender, age and other information you provide when you visit our website or clinic.
  • Health Information: We may collect information about your dental health, medical history, and any allergies or health sensitivities.
  • Financial Information: If you make a payment, we may collect your payment card details.
  • Website Usage Data: We may collect information about your interactions with our website, such as your IP address, browser type, and pages visited.
    • Technical information, such as information concerning your device, IP-address, browser type, geographical location and operating system;
    • Browsing behaviour, such as the length of your visit, the links you click, the pages you visit and the frequency with which you visit a page.
  • Communication Information: Content of the communication, such as your request or question; Technical information of the communication, such as with whom you communicate at our end, date and time of the communication;
  • Publicly available information: We may collect publicly available information about you, such as information publicly available on your social media profile;
  • Any other personal data you provide us with.

We primarily collect your personal information directly from you. However, we may also receive additional data about your preferences and browsing habits from third-party partners like Google. For detailed information on how these partners handle your personal data, please refer to their respective privacy policies.

FORM AND COMMENTS

When you submit a form or comment on our website we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. We may collect your name and email address to respond to your inquiry.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

WHAT WE DO WITH THE INFORMATION WE COLLECT

We use your personal information for the following purposes:

  • Providing Dental Services: We use your information to schedule appointments, provide dental treatments, and communicate with you about your care.
  • Billing and Payment: We use your information to process payments and send you invoices.
  • Marketing and Communications: We may use your email address to send you marketing communications about our services, but only with your consent. You can opt out of these communications at any time.
  • Website Analytics: We use website usage data to improve our website and user experience.
  • Legal Compliance: We may use your information to comply with legal and regulatory requirements.

Below, we explain the purposes for which we process your personal data and on the basis of which legal basis we do so. We rely on the following legal bases

Our legitimate interest lies in enhancing user experience, ensuring security, and promoting our products and services.

Purpose – Legal Obligation

  • Comply with legal obligations.
  • Comply with requests from law enforcement, judicial authorities, or government agencies.
  • Transfer your data to law enforcement or judicial authorities as evidence of unlawful activity.

Purpose – Our legitimate interest

  • Responding to Inquiries: Answering your questions and providing requested materials or services.
  • Improving Our Services: Conducting statistical analysis to enhance our website, promotional information, and offerings.
  • Protecting Our Interests: Safeguarding our legitimate interests and those of third parties from violations of terms of use, intellectual property infringement, security threats, and harmful or illegal content.

WHO DO WE SHARE YOUR INFORMATION WITH?

We may share your personal information with:

  • Dental Professionals: We may share your information with other dental professionals involved in your care, such as specialists or consultants.
  • Third-Party Service Providers: We may use third-party service providers, such  as a hosting provider for our website, patient record system, payment processors or cloud storage providers, to help us deliver our services. These providers are required to handle your information in accordance with our instructions and our privacy standards.
  • Legal Authorities: We may share your information with law enforcement or regulatory authorities if required by law or to protect our rights or the rights of others.  
  • GHS (General Healthcare System): If you are receiving GHS dental treatment, we may share your information with the GHS for administrative, clinical, and research purposes. This includes sharing information with the GHS Business Services Authority (BSA) for billing and payment purposes.

WHERE DO WE PROCESS YOUR PERSONAL DATA?

Your data are exclusively processed within the territory of the Republic of Cyprus.

DATA RETENTION

We will retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. 

How long we hold your personal data for will vary. The retention period will be determined by various criteria including:

  • Purpose: We will retain data for as long as needed to achieve the intended purpose.
  • Legal Obligations: Laws and regulations may mandate minimum retention periods.

We will hold your data for 6 years after the end of our relationship with you (last treatment, visit, or contact). Your data is held for this long to:

  • Legal Compliance: To comply with legal obligations, such as the Personal Data Protection Law of Cyprus (Law 125(I)/2001).
  • Legitimate Interests: For purposes like addressing chargebacks or preventing fraud.
  • Statistical Analysis: For statistical and modelling purposes, including lifecycle modelling, stress testing, and fraud modelling.

Please note that this is a general guideline, and specific circumstances may require different retention periods if required by law.

YOUR RIGHTS

You have the following rights under the GDPR:  

  • Access: You have the right to request a copy of the personal information we hold about you.
  • Rectification: You have the right to request that we correct any inaccurate or incomplete information.  
  • Erasure: You have the right to request that we delete your personal information under certain circumstances.
  • Restriction of Processing: You have the right to request that we restrict the processing of your personal information under certain circumstances.  
  • Data Portability: You have the right to request that we transfer your personal information to another organisation in a structured, commonly used, and machine-readable format.
  • Object: You have the right to object to the processing of your personal information for certain purposes. This applies when:
    • The processing is based on our legitimate interest as outlined in our Privacy Notice.
    • You can demonstrate that there are compelling reasons related to your specific situation that outweigh our legitimate interests.
    • If these conditions are met, you can object to the processing of your personal data.

EXERCISING YOUR RIGHTS

To exercise your rights, please contact us using the information provided on our website. Your request should:

  • Clearly state the specific right you wish to exercise.
  • Provide reasons for your request, if necessary.
  • Be dated and signed.
  • Be accompanied by a digitally scanned copy of your valid identity card for verification. If you use our contact form, we may request a signed confirmation and proof of identity.

We will promptly acknowledge receipt of your request. If it meets the above conditions and is valid, we will process it within a reasonable timeframe, typically within 30 days.

IF YOU FAIL TO PROVIDE PERSONAL DATA

If we are legally required to collect personal data or if it’s necessary for a treatment agreement between us, and you fail to provide the requested information, we may not be able to fulfil our obligations under that agreement. In such cases, we may have to cancel our service. We will notify you if this becomes necessary.

COMPLAINTS

If you have a complaint about our handling of your personal information, you may contact us via email or post. You have the right to lodge a complaint with a supervisory authority, such as the Office of the Commissioner for Personal Data Protection www.dataprotection.gov.cy

SECURITY

We implement appropriate technical and organisational measures to protect your personal information from unauthorised or unlawful processing and accidental loss, destruction, or damage.  However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your information

AMENDMENTS TO THE PRIVACY NOTICE

We may review and, if appropriate, update this Privacy Notice from time to time. We may place notice of any such amendments on our website, unless we make updates in order to comply with law or regulations, or where we make updates which are of an immaterial and routine nature. Please visit https://say-teeth.com for the most recent version of this Privacy Notice.

  • CONTACT US

If you have any questions about this Privacy Notice or your information, or wish to exercise any of your rights as described in this Privacy Notice, you can contact us as follows:

By post:

  • Say teeth
  • Foti Pitta 59 
  • Sotira,
  • 5390

By email: [email protected]

Cookies Policy

INFORMATION ABOUT OUR USE OF COOKIES

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.

We use the following cookies:

  • Strictly necessary cookies: These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.
  • Analytical/performance cookies: They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
  • Functionality cookies: These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Contents on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if you have visited the other website. Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you will not be able to access some or all parts of our site.