Privacy Policy
This Privacy Policy (“Policy”) outlines how DR. K. C. CHOI DENTAL CLINIC (“Clinic,” “we,” or “us”) collects, uses, protects, and discloses personal information obtained from users (“you” or “users”) of our website accessible at mos-dentist.com. We are committed to safeguarding your privacy and ensuring the security of your personal data. By using our website, you consent to the practices described in this Policy.
Information We Collect
1.1 Personal Information: We may collect personal information such as your name, contact information (email address, phone number), and appointment preferences when you use our website’s appointment booking feature or submit inquiries through our contact forms.
1.2 Use of Cookies: We may use cookies, web beacons, and similar tracking technologies to enhance your browsing experience and collect information about your usage patterns on our website. This may include your IP address, browser type, operating system, referring URLs, and other website interactions.
Use of Personal Information
2.1 We use the personal information we collect for the following purposes:
Data Sharing and Disclosure
3.1 We do not sell, rent, or lease your personal information to third parties unless we have your permission or are required by law to do so.
3.2 We may share your personal information with trusted third-party service providers who assist us in operating our website, managing appointments, or delivering services on our behalf. These service providers are obligated to maintain the confidentiality and security of your personal information.
3.3 We may disclose your personal information if required by law or in good faith belief that such action is necessary to comply with legal obligations, protect our rights, or investigate potential violations related to our website or services.
Data Security
4.1 We employ industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.
4.2 We use secure socket layer (SSL) technology to encrypt and transmit sensitive data during online interactions.
4.3 However, please note that no method of data transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
4.4 Our Security and Compliance Objectives
We have developed our security framework using best practices for the SaaS industry. Our key objectives include:
Customer Trust and Protection: deliver superior products and services while protecting the privacy and confidentiality of data
Availability and Continuity of Service: ensure availability of the service and minimize risks to service continuity
Information and Service Integrity: make sure that customer information is never corrupted or altered inappropriately
Compliance with Standards: aim to comply with or exceed industry standard best practices.
Customer Data Protection
Data Classification
Per the Terms of Service, our customers are responsible for ensuring they only capture appropriate information to support their marketing, sales, services, content management, and operations processes. The products should not be used to collect or store sensitive information, such as credit or debit card numbers, financial account information, Social Security numbers, passport numbers, financial or health information except as otherwise permitted.
Tenant Separation
We provides a multi-tenant SaaS solution where customer data is logically separated using unique IDs to associate data and objects to specific customers. Authorization rules are incorporated into the design architecture and validated on a continuous basis. Additionally, we log application authentication and associated changes, application availability, and user access and changes are logged.
Encryption
All data is encrypted in transit with TLS version 1.2, or 1.3 and 2,048 bit keys or better. Transport layer security (TLS) is also a default for customers who host their websites on the platform.
We leverages several technologies to ensure stored data is encrypted at rest. Platform data is stored using AES-256 encryption. User passwords are hashed following industry best practices, and are encrypted at rest.
Key Management
Encryption keys for both in transit and at rest encryption are securely managed by the platform. TLS private keys for in transit encryption are managed through our content delivery partner. Volume and field level encryption keys for at rest encryption are stored in a hardened Key Management System (KMS). Keys are rotated at varying frequencies, depending upon the sensitivity of the data they govern. In general, TLS certificates are renewed annually. We are unable to use customer supplied encryption keys at this time.
Data Retention
5.1 We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Policy unless a longer retention period is required or permitted by law.
5.2 If you wish to request the deletion of your personal information, please contact us using the information provided in Section 8 (Contact Information) of this Policy. We will make reasonable efforts to promptly delete your information, subject to any legal or contractual obligations.
Third-Party Links
6.1 Our website may contain links to third-party websites for your convenience or informational purposes. Please note that we have no control over the content, privacy policies, or practices of these third-party websites.
6.2 We encourage you to review the privacy policies of any third-party websites you visit through links provided on our website.
Children’s Privacy
7.1 Our website is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take appropriate steps to remove such information from our records.
Your Rights
8.1 You have the right to access, update, correct, or delete your personal information held by us. If you would like to exercise any of these rights or have any questions or concerns about our privacy practices, please contact us using the information below.
Changes to the Privacy Policy
9.1 We may update or revise this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any material changes by posting the updated Policy on our website. Please review this Policy periodically to stay informed about how we collect, use, protect, and disclose your personal information.
Contact Information
10.1 If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: DR. K. C. CHOI DENTAL CLINIC
Email:[email protected]
By using our website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy, including the collection, use, protection, and disclosure of your personal information for the purposes outlined herein.
All rights reserved