Privacy notice
When you book a dental visit through Flossify, a clinic and Flossify keep a few things about you. This page says what they are, why, for how long, who can see them, and what you can ask for. It is written to be read, not filed.
What we keep
- Your name and mobile number, as you typed them on the booking form.
- The visit: which clinic, which dentist, what for, when, and the texts sent about it.
- What the clinic records about your teeth. This is the clinic’s record, held by the clinic; ask the clinic or its Data Protection Officer for a copy.
Why we keep it
- To run the visit: hold the chair, know who is coming, and have the record ready.
- To remind you the day before, and to let you confirm or cancel by text.
- To bill you and, where you have one, to file with your HMO or PhilHealth.
- To meet the clinic’s legal duties: dental records, receipts and the audit of who looked at what.
Nothing else. No marketing, and no use for a new purpose without asking you first.
Who sees it
- Your clinic’s staff, at the branch you booked with. Each time someone opens your record, that is written down.
- Flossify’s operations people, only to keep the service running, and never to read records for their own sake.
- The text provider sees the number and the message it is asked to send, nothing more.
Nobody else. Your details are never sold and never handed to advertisers.
How long we keep it
- Clinical records stay as long as the law requires the clinic to keep them.
- Text logs are deleted two years after they were sent. The visit itself stays in the clinic’s record.
- You may ask for the rest to be deleted at any time, and it will be, unless a law says the clinic must keep it.
Your rights
The Data Privacy Act of 2012 (Republic Act 10173) gives you the right:
- to be told what is kept about you and why;
- to see it;
- to have it corrected;
- to object to a use you did not agree to;
- to have it erased or blocked;
- to be paid for harm caused by its misuse;
- to take a copy with you, in a form you can use;
- to complain to the National Privacy Commission.
How to ask
Write to your clinic’s Data Protection Officer, who is named on the clinic’s public page, or to Flossify’s: [YOUR DPO NAME], [YOUR DPO EMAIL]. Say which of the rights above you are using; you do not need a reason. You will hear back within fifteen working days.
If something ever went wrong with your data, you and the National Privacy Commission would hear from us within 72 hours.
- [YOUR NPC REGISTRATION NUMBER — do not claim registration before it is true]
The bracketed lines are placeholders. They are filled in before this page goes live, and marked until then.
When this notice changes
When this notice changes, the version number changes, and you will be asked again before we rely on the new one. The version you agreed to is kept with your record, so the words you said yes to are always the words we can show you.