سياسة الخصوصية

Udentis ("we", "our", "us") operates the Udentis dental practice management platform. This Privacy Policy explains how we collect, use and protect the personal data of clinic staff, patients (processed on behalf of clinics) and website visitors, in compliance with the EU General Data Protection Regulation (GDPR) and applicable Bulgarian data protection law.

1. Data we collect

We collect information you provide directly (account registration, demo requests, contact forms), data generated through platform use (appointment records, patient data entered by clinic staff, invoices, audit logs), and standard technical data (IP address, browser type, session cookies).

2. How we use your data

We use collected data to provide and improve the platform, send transactional communications (password resets, invoice receipts), respond to support requests, and comply with legal obligations. We do not sell personal data to third parties.

3. Patient data and GDPR roles

For patient health data entered by clinic staff, Udentis acts as a data processor and the dental clinic acts as the data controller. We process this data strictly on documented instructions from the clinic. A Data Processing Agreement (DPA) is available on request.

4. Data storage and security

All data is stored on servers located within the European Union. We apply AES-256 encryption at rest and TLS 1.3 in transit. Access is restricted via role-based controls and multi-factor authentication for administrative access.

5. Data retention

Account and platform data is retained for the duration of your subscription plus 30 days after cancellation, unless a longer period is required by law. You may request earlier deletion by contacting us.

6. Your rights

Under GDPR you have the right to access, rectify, erase, restrict or port your personal data, and to object to its processing. To exercise these rights, email [email protected].

7. Cookies

We use strictly necessary cookies for session management, CSRF protection and storing your cookie choice. Analytics and marketing cookies are only ever set after you opt in, and nothing non-essential runs before you make a choice. You can change or withdraw your consent at any time using the cookie settings, or the link in the footer of every page. A full list of the cookies we set is in our Cookie Policy.

8. Website forms

When you submit a demo request or contact form we store the details you provide, the site language, and a one-way hash of your IP address (never the address itself) so we can respond and prevent abuse. The legal basis is your consent, given by ticking the box on the form. These records are deleted automatically after 365 days, and sooner on request.

9. Contact

For privacy-related enquiries: [email protected] · Udentis OOD, Sofia, Bulgaria.