Privacy Policy

Miso Dental Care Clinic (“we”, “us”, or “our”) respects your privacy and is committed to protecting personal information you share with us-whether online, by phone, WhatsApp, email, or in person at our clinic in Peradeniya, Sri Lanka.

This Privacy Policy explains what information we collect, why we collect it, how we use and safeguard it, and the choices available to you. By using our website or providing information to us, you acknowledge this policy. If you do not agree, please refrain from submitting personal data through our digital channels.

The information we collect depends on how you interact with us. We only ask for details that help us respond, schedule care, or improve your experience.

• Contact and identity details - such as your name, phone number, and email address when you complete our contact form, appointment request, or newsletter signup.

• Appointment preferences - including preferred date, time window, visit type, service or concern, and any notes you choose to share about symptoms or questions.

• Communications - messages you send us by email, phone, WhatsApp, or through website forms, including follow-up correspondence.

• Technical data - limited website usage information such as browser type, device type, approximate location (derived from IP address), pages viewed, and referral source. See our Cookie Policy for details on cookies and analytics.

• Clinical and patient records - when you become a patient, we maintain dental and health information required for diagnosis, treatment, billing, and continuity of care, in line with professional and regulatory standards.

We use personal information for legitimate purposes connected to running our clinic and serving patients. We do not sell your personal data.

• Confirming, rescheduling, or following up on appointment requests and enquiries.

• Providing dental examinations, treatment, and ongoing care, including maintaining accurate clinical records.

• Communicating about your visit, treatment plans, reminders, and clinic updates you have opted into.

• Operating and improving our website, including understanding how visitors use our pages so we can make content clearer and more helpful.

• Meeting legal, regulatory, and professional obligations applicable to dental practice in Sri Lanka.

• Protecting the security of our website, systems, staff, and patients.

Where applicable under Sri Lankan data protection law, we process personal information on one or more of the following bases:

• Consent - for example, when you subscribe to updates or submit a form voluntarily.

• Contract or pre-contractual steps - when processing is necessary to respond to your appointment request or provide agreed treatment.

• Legitimate interests - such as improving our services, securing our website, and communicating with existing patients, balanced against your rights.

• Legal obligation - when we must retain or disclose information to comply with law, regulation, or professional duty.

We keep access to personal information limited to those who need it for their role. We may share information only in the circumstances below:

• With clinic staff and clinicians involved in your care or in scheduling your visit.

• With trusted service providers who support our operations (for example, website hosting, email delivery, or appointment management tools), under confidentiality and data-handling agreements where appropriate.

• With laboratories, specialists, or other healthcare providers when referral or coordinated care requires it, and with your knowledge where practicable.

• When required by law, court order, or a request from a competent authority.

• To protect rights, safety, and property where disclosure is reasonably necessary.

We retain personal information only for as long as needed for the purposes described in this policy, unless a longer period is required or permitted by law or professional guidance.

Website enquiry and appointment request data is typically kept for a reasonable period to manage follow-up and resolve any issues. Clinical records are retained in accordance with dental and healthcare record-keeping requirements in Sri Lanka.

When information is no longer needed, we take steps to delete or anonymise it securely.

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or loss. These include access controls, secure handling of patient records, and careful selection of third-party providers.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. Please contact us promptly if you believe your interaction with us may have been compromised.

Depending on applicable law, you may have rights regarding your personal information, which can include:

• Requesting access to personal information we hold about you.

• Asking us to correct inaccurate or incomplete information.

• Requesting deletion of certain information, subject to legal and clinical record obligations.

• Objecting to or restricting certain processing activities.

• Withdrawing consent where processing is based on consent (for example, marketing emails), without affecting prior lawful processing.

To exercise these rights, contact us using the details in the “Contact us” section below. We may need to verify your identity before responding. You may also have the right to lodge a complaint with a relevant supervisory authority in Sri Lanka.

Our website may use essential cookies and, where enabled, analytics tools to understand traffic and improve content. You can learn more about the cookies we use and how to manage preferences in our Cookie Policy.

We provide dental care for children and families. When a parent or guardian submits information on behalf of a child, we treat that information in accordance with this policy and applicable law.

Our website is not directed at children to collect information independently. If you believe a child has submitted personal information to us without appropriate consent, please contact us so we can review and take appropriate action.

Our website may contain links to external sites (for example, maps or social media). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy, to the extent permitted by law.

If you have questions about this Privacy Policy, wish to exercise your rights, or need to update information we hold about you, please contact us: