Privacy Policy

1.1.AvantGart Dental Clinic recognizes the importance of protecting the privacy, confidentiality, and security of personal information entrusted to it.

1.2.This Privacy Policy explains how personal information is collected, used, stored, shared, and protected in connection with the clinic's website, appointment services, and clinical operations.

1.3.The clinic processes personal information subject to applicable Nigerian laws, including the Nigeria Data Protection Act 2023.

2.1.This Privacy Policy applies whenever the clinic processes personal information in connection with its services.

2.2.Patients submitting online appointment requests are required to acknowledge this Privacy Policy as part of the booking process.

2.3.Acknowledgment confirms that the Policy has been presented to the patient. It does not remove statutory privacy rights or constitute blanket consent for unrelated processing.

2.4.The clinic's legal duties concerning personal information apply independently of whether a patient has submitted an online appointment request.

3.1.Depending on the services provided, the clinic may collect names, telephone numbers, email addresses, and other relevant contact details.

3.2.Appointment information may include preferred dates, times, booking requests, appointment status, rescheduling history, and relevant communications.

3.3.Clinical information may include medical and dental history, consultation details, diagnostic findings, treatment records, X-rays, photographs, and other healthcare documentation.

3.4.The clinic may also collect payment information, transaction records, complaints, and information required for legal or regulatory compliance.

3.5.Information relating to an individual's health may constitute sensitive personal data and is subject to additional legal protections.

4.1.Personal information may be used to receive, review, confirm, decline, and reschedule appointment requests.

4.2.Relevant information may be used to provide dental care, conduct clinical assessments, maintain treatment records, and communicate with patients.

4.3.The clinic may process appropriate information for billing, administrative operations, professional compliance, and security.

4.4.Information may also be processed where legally justified to investigate complaints, respond to lawful investigations, and establish, exercise, or defend legal claims.

4.5.Promotional processing involving identifiable patient information requires an appropriate lawful basis and any additional authorization required by law.

5.1.The clinic shall identify an appropriate lawful basis for each relevant processing activity under applicable Nigerian data protection law.

5.2.Depending on the circumstances, processing may be based on contract performance, legal obligations, protection of vital interests, legitimate interests where permitted, or valid consent.

5.3.Sensitive health information shall be processed only where applicable additional legal conditions are satisfied.

5.4.Acceptance of general appointment terms shall not automatically authorize unrelated uses of personal information.

6.1.Information submitted through the website's appointment form is used to manage routine appointment requests.

6.2.Authorized clinic personnel may access relevant appointment information for legitimate booking and administrative purposes.

6.3.The clinic may use appointment details to communicate decisions, including approvals, declines, and proposed rescheduling arrangements.

6.4.Patients should avoid including unnecessary sensitive medical information in optional appointment messages.

6.5.Submitting an appointment request does not automatically guarantee confirmation.

7.1.The clinic may collect and maintain medical records reasonably necessary for professional dental care and applicable legal obligations.

7.2.Clinical records may include examination findings, diagnostic imaging, treatment plans, procedures, medication information, and clinical consent documentation.

7.3.Patient medical information shall be subject to appropriate confidentiality and security safeguards.

7.4.Access shall be restricted according to legitimate clinical, administrative, and legal responsibilities.

7.5.Records shall not be disclosed publicly merely because they are held by the clinic.

8.1.The clinic may obtain clinical photographs, dental images, and videos for lawful purposes such as diagnosis, treatment planning, clinical documentation, and related healthcare activities.

8.2.The clinic may use identifiable patient photographs, videos, dental images, and testimonials for advertisements, its website, social media, printed promotional materials, and educational publications where a valid lawful basis and any required authorization have been obtained.

8.3.Permission to capture photographs for clinical purposes does not automatically authorize their publication for commercial advertising.

8.4.Where consent is required, patients shall receive appropriate information about the proposed promotional use, including its purpose and intended publication channels.

8.5.Promotional consent shall be voluntary and shall not be made a mandatory condition of ordinary appointment booking or dental treatment.

8.6.Where promotional use is validly authorized, approved materials may be reasonably cropped, resized, formatted, or adapted within the scope of that authorization without misleadingly representing the patient or treatment.

8.7.Withdrawal of consent and requests concerning previously published promotional materials shall be addressed in accordance with applicable law.

8.8.Additional safeguards shall apply to images of children and photographs revealing sensitive medical information.

9.1.The clinic may disclose relevant personal information to authorized healthcare professionals involved in patient care where legally justified.

9.2.Information may also be shared with authorized administrative or technical service providers, payment providers, and professional advisers where permitted and necessary.

9.3.The clinic may disclose relevant information in response to valid court orders, lawful regulatory requirements, or authorized law-enforcement requests.

9.4.Where legally justified, relevant records may be used or disclosed to establish, exercise, or defend legal claims.

9.5.Disclosures shall be limited to information reasonably necessary for the relevant lawful purpose and subject to appropriate safeguards.

9.6.This Policy does not grant unrestricted permission to publish confidential patient records, identities, or private information.

10.1.Where permitted by law, the clinic may preserve and use relevant information to investigate alleged misconduct, obtain legal advice, or respond to legal proceedings.

10.2.Records may be disclosed to competent authorities or professional advisers where legally justified.

10.3.The clinic shall take reasonable steps to preserve confidentiality and avoid unnecessary disclosure.

10.4.Nothing in this Policy prevents individuals from exercising lawful rights or reporting concerns to competent authorities.

11.1.Where the clinic uses personal information for direct marketing, it shall comply with applicable legal requirements relating to transparency, lawful processing, consent where required, and objection or withdrawal rights.

11.2.Identifiable promotional photographs, videos, and testimonials shall be handled according to the photography provisions of this Policy.

11.3.Patients may decline promotional photography without losing access to ordinary appointment services solely on that basis.

12.1.The website may use technically necessary cookies or comparable browser technologies to support appointment tracking and essential website functionality.

12.2.Patients may need to use the same browser they used when submitting their appointment request to access browser-linked appointment information.

12.3.Deleting browser cookies or switching devices may affect access to that information.

12.4.Any additional analytics, advertising, or non-essential tracking technologies introduced in the future shall be assessed and disclosed as required by law.

13.1.The clinic shall implement appropriate technical and organizational measures to protect personal information against unauthorized access, loss, alteration, misuse, and disclosure.

13.2.Such safeguards may include role-based staff access, account security, confidentiality procedures, backups, and system maintenance.

13.3.Authorized personnel are expected to access patient information only for legitimate work-related purposes.

13.4.Where a personal data breach triggers legal notification obligations, the clinic shall comply with those obligations.

13.5.Although no digital system can be guaranteed completely risk-free, the clinic remains responsible for meeting applicable data protection and security obligations.

14.1.Personal information shall be retained only for as long as reasonably necessary for the relevant lawful purposes, subject to applicable medical, accounting, legal, and professional record-retention requirements.

14.2.Different categories of personal information may require different retention periods.

14.3.The clinic shall establish and maintain an appropriate retention schedule for appointment information, clinical records, financial records, and other relevant information.

14.4.When information is no longer required, it shall be securely deleted, anonymized, or otherwise disposed of as appropriate, unless continued retention is legally justified.

15.1.Subject to applicable law, individuals may request information about how their personal data is processed.

15.2.Patients may request access to personal information and correction of inaccurate or incomplete information.

15.3.Individuals may request erasure or restriction of processing where applicable.

15.4.Patients may object to certain processing activities and withdraw consent where processing relies on consent.

15.5.Additional rights may apply under Nigerian data protection legislation.

15.6.Certain requests may be subject to lawful limitations, including legitimate medical-record retention or legal obligations.

15.7.Individuals may submit complaints to the Nigeria Data Protection Commission or another competent authority.

16.1.Personal information concerning children shall be processed in accordance with applicable Nigerian law and relevant healthcare obligations.

16.2.Where required, authorization shall be obtained from a parent, guardian, or another legally authorized person.

16.3.Children's clinical records and identifiable promotional images shall be subject to appropriate additional safeguards.

17.1.The clinic may engage authorized hosting, technical, payment, communication, or professional service providers to support its operations.

17.2.Where those providers process personal information on behalf of the clinic, appropriate legal, contractual, and security safeguards shall apply.

17.3.Any international transfer of personal information shall comply with applicable Nigerian data protection requirements.

17.4.The clinic shall identify and disclose relevant service providers, recipients, and international transfer arrangements where required before this Policy is finalized.

18.1.Patients may contact the clinic regarding suspected unauthorized disclosures, privacy concerns, inaccurate information, or other personal data matters.

18.2.The clinic shall review complaints and take appropriate action in accordance with applicable law.

18.3.The clinic may investigate relevant incidents, preserve necessary evidence, and seek appropriate professional assistance.

18.4.Nothing in this Policy prevents individuals from contacting the Nigeria Data Protection Commission or exercising lawful remedies.

19.1.The clinic may update this Policy to reflect changes in its operations, legal obligations, service providers, or technology.

19.2.Material changes shall be communicated where required by applicable law.

19.3.The clinic shall maintain appropriate records of policy versions and relevant patient acknowledgments.