Privacy policy

This notice explains how Kempton Smile collects, stores and uses the personal information that you share through this website. It follows the Protection of Personal Information Act 4 of 2013 (POPIA).

Draft: the practice has not yet approved this notice. Text in square brackets marks facts that the practice must confirm.

Who we are

Kempton Smile is a dental practice at Shop 64, Kempton Square, Cnr Voltmeter & Monument Rd, Kempton Park. We are the responsible party for the personal information that this website collects.

What we collect

The contact form

When you send a message through the contact form, we store:

  • your name;
  • your email address;
  • your phone number, if you give it (it is optional);
  • your message;
  • the date and time of the message.

We use this information only to reply to your enquiry.

Teledentistry bookings

When you request a teledentistry slot, we store:

  • the type of consultation that you choose;
  • your preferred time window;
  • your name, email address and phone number;
  • the pain level and the symptoms that you select;
  • whether you flag an urgent symptom;
  • that you accepted the consent statement;
  • a booking reference and the date and time of the request.

Your pain level and symptoms are health information. POPIA treats health information as special personal information. We process it only with your consent, which you give in the last step of the booking form, and only to assess the urgency of your consultation and to provide it.

The consultation itself takes place on the ScanO Care platform. [CLINIC TO CONFIRM: what personal information the practice shares with ScanO Care, and the operator agreement with ScanO Care]

Online bookings with a dentist

The "Book with" links open the booking system of a third party at mygc.co.za. That system collects your information under its own privacy notice. [CLINIC TO CONFIRM: the name of the booking provider and the link to its privacy notice]

Where we store your information

The website stores contact messages and teledentistry bookings in a database on the practice's web server. [CLINIC TO CONFIRM: the hosting provider and the country where the server is located]

Only authorised practice staff can read this information. They sign in to a password-protected admin area of the website. The website does not sell your information or share it for marketing.

How long we keep your information

[CLINIC TO CONFIRM: the retention period for contact messages and for teledentistry bookings, and the reason for each period]

Practice staff can delete a message or a booking in the admin area.

Cookies and analytics

Cookies that this website sets

The public pages of this website set no cookies. The admin area sets one cookie, kempton_admin_session, only when a staff member signs in. This cookie keeps the staff member signed in for up to 12 hours. Patients and visitors never receive it.

Google Analytics

The website can load Google Analytics 4 to count visits and see which pages people use. It loads only when the practice switches it on. When it is on, Google sets its own cookies and receives information about your visit, such as your IP address, your browser and the pages that you view. [CLINIC TO CONFIRM: whether Google Analytics is switched on, and the data-retention setting in the Google Analytics account]

Fonts

Each page loads its fonts from Google Fonts. Your browser therefore sends your IP address to Google when it loads the page.

Your rights

Under POPIA you have the right to:

  • ask whether we hold personal information about you, and ask for a copy of it;
  • ask us to correct information that is wrong, out of date or incomplete;
  • ask us to delete information that we no longer have the right to keep;
  • object to the processing of your information;
  • withdraw your consent, when we process your information because of your consent;
  • lodge a complaint with the Information Regulator.

To use these rights, contact us at info@kemptonsmile.co.za. [CLINIC TO CONFIRM: the time in which the practice answers a request]

Complaints to the Information Regulator

If you are not satisfied with our answer, you can complain to the Information Regulator of South Africa.

  • Website: inforegulator.org.za
  • [CLINIC TO CONFIRM: the current complaints email address and postal address of the Information Regulator]

Security

The admin area needs a staff password. Its session cookie is HttpOnly, so page scripts cannot read it, and on the live site the browser sends it only over HTTPS. [CLINIC TO CONFIRM: the backup and access-control measures of the practice]

Changes to this notice

We update this notice when the way we handle personal information changes. Last updated: [CLINIC TO CONFIRM: the approval date].