Skip to content

Patient Privacy Notice

Draft — pending legal review. This document has not yet been reviewed by counsel and may change before it takes effect. Version 0.1-draft · effective 2026-10-01 · updated 2026-09-27.

If you are a patient booking an appointment or receiving care at a dental clinic that uses Enamela, this notice explains what information is stored in Enamela on the clinic's behalf, and who to contact with questions. Your clinic, not Enamela, controls your patient data and is responsible for answering your questions about it.

1. Who controls my data

Your dental clinic is the data controller of your patient information. Enamela is a software provider (data processor) that the clinic uses to manage its records, and Enamela processes your data only on the clinic's instructions, as described in our Data Processing Agreement with clinics.

For questions about your own records, how they are used, or to exercise a privacy right (such as access or correction), contact your clinic directly. Enamela cannot make changes to your patient records without the clinic's involvement.

2. What is typically stored

  • Contact details: name, phone number, and similar identifying information used for booking and reminders.
  • Appointment history: bookings, reschedules, and attendance.
  • Clinical records: treatment notes and odontogram/tooth charting entered by your clinic's dental team.
  • Billing references related to treatment you received.
  • Messages sent to you about appointments, for example through WhatsApp or email.

3. Booking through book.enamela.app

When you book an appointment through a clinic's booking page at book.enamela.app, the information you enter is sent to that clinic's account in Enamela and is subject to the clinic's own privacy practices, not a separate Enamela account of your own.

4. How your data is protected

Enamela applies security measures on behalf of clinics, including encryption in transit and at rest, daily backups, role-based staff permissions, and an audit log of who accessed records. Enamela support staff can access a clinic's account only with the clinic's consent, and that access is logged. See the Security page for more detail.

5. Messaging

Your clinic may send you appointment reminders or updates through WhatsApp or email using Enamela. These messages are sent by your clinic; if you want to stop receiving them, tell your clinic or follow the opt-out instructions in the message.

6. Retention and deletion

How long your records are kept is set by your clinic, subject to applicable dental record-keeping requirements in your country. If your clinic stops using Enamela, its data (including your records) is handled as described in our Data Processing Agreement with that clinic.

7. Contact

For questions about your own patient data, please contact your clinic directly. If you have a question specifically about how Enamela as a company handles data, you can reach us at privacy@enamela.app [confirm address], but we will generally direct patient-specific requests back to your clinic.