1import{_ as l,c as n,o as t,aV as o,g as s}from"./CkMt2lWi.js";import{u as r}from"./BJnzDZPt.js";const d={},c={class:"legal-page"};function v(e,a){return t(),n("section",c,[...a[0]||(a[0]=[o('<div class="legal-shell" data-v-89674909><header class="legal-header" data-v-89674909><h1 class="legal-title" data-v-89674909>Privacy Policy</h1><p class="legal-subtitle" data-v-89674909> Our Privacy Policy outlines how we collect, use, and protect your personal information. Your privacy and security are our priorities. </p><p class="legal-meta" data-v-89674909>Last Updated: November 20, 2025</p></header><section class="legal-section" data-v-89674909><h2 data-v-89674909>Information We Collect</h2><p data-v-89674909> Dev-Haus Limited ("we," "us," "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you use our dental practice management software and services (the "Services"). </p></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Company Details</h3><ul data-v-89674909><li data-v-89674909>Dev-Haus Limited</li><li data-v-89674909>Registered in England and Wales</li><li data-v-89674909>Company Number: 16808964</li><li data-v-89674909>Registered Office: 32 Park Place LS1 2SP</li><li data-v-89674909>Data Protection Officer: Saba Arif</li><li data-v-89674909>Email: [email protected]</li><li data-v-89674909>Phone: 07956776114</li></ul></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Practice Information</h3><ul data-v-89674909><li data-v-89674909>Practice name, address, and contact details</li><li data-v-89674909>Practice owner and staff member information</li><li data-v-89674909>Professional registration numbers (GDC numbers)</li><li data-v-89674909>Payment and billing information</li></ul></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Patient Information (Processed on Behalf of Your Practice)</h3><ul data-v-89674909><li data-v-89674909>Personal identifiers (name, date of birth, NHS number, address, contact details)</li><li data-v-89674909>Medical and dental history</li><li data-v-89674909>Clinical notes, treatment plans, and consent forms</li><li data-v-89674909>Dental radiographs, photographs, and 3D scans</li><li data-v-89674909>Appointment history and communications</li><li data-v-89674909>Financial records related to dental treatment</li><li data-v-89674909>Patient comfort preferences and special requirements</li></ul></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Technical Information</h3><ul data-v-89674909><li data-v-89674909>IP addresses and device information</li><li data-v-89674909>Browser type and version</li><li data-v-89674909>Usage data and analytics (anonymized where possible)</li><li data-v-89674909>Cookies and similar tracking technologies</li></ul></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>Legal Basis for Processing</h2><p data-v-89674909>We process personal data under the following legal bases:</p><ul data-v-89674909><li data-v-89674909>Contract Performance: To provide our Services to dental practices</li><li data-v-89674909>Legitimate Interests: To improve our Services, prevent fraud, and ensure security</li><li data-v-89674909>Legal Obligation: To comply with UK GDPR, Data Protection Act 2018, NHS regulations</li><li data-v-89674909>Consent: Where specifically obtained for marketing communications or optional features</li></ul></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>How We Use Your Information</h2></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Service Provision</h3><ul data-v-89674909><li data-v-89674909>Operate and maintain the Dev-Haus platform</li><li data-v-89674909>Enable appointment scheduling, task management, CRM, and document storage</li><li data-v-89674909>Process payments and billing</li><li data-v-89674909>Provide customer support and training</li></ul></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Service Improvement</h3><ul data-v-89674909><li data-v-89674909>Analyze usage patterns to enhance functionality</li><li data-v-89674909>Develop new features based on user feedback</li><li data-v-89674909>Conduct research and analytics (using anonymized data)</li></ul></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Communications</h3><ul data-v-89674909><li data-v-89674909>
1Send service updates, security alerts, and technical notices</li><li data-v-89674909>Provide customer support responses</li><li data-v-89674909>Send marketing communications (with consent, opt-out available)</li></ul></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Legal and Security</h3><ul data-v-89674909><li data-v-89674909>Comply with legal obligations and regulatory requirements</li><li data-v-89674909>Detect, prevent, and address fraud, security issues, and technical problems</li><li data-v-89674909>Enforce our Terms of Service</li></ul></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>Data Storage and Security</h2></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Storage Location</h3><ul data-v-89674909><li data-v-89674909>Primary Data Storage: AWS (Amazon Web Services) data centers located in London, UK (eu-west-2)</li><li data-v-89674909>Backup Storage: Geo-redundant backup in Dublin, Ireland (eu-west-1) for disaster recovery</li><li data-v-89674909>Data Residency: All patient and practice data remains within the UK and EU at all times</li></ul></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Security Measures</h3><ul data-v-89674909><li data-v-89674909>Encryption: AES-256 encryption for data at rest, TLS 1.3 for data in transit</li><li data-v-89674909>Access Control: Role-based access control (RBAC), multi-factor authentication (MFA)</li><li data-v-89674909>Infrastructure: ISO 27001 certified cloud infrastructure with 99.9% uptime SLA</li><li data-v-89674909>Backup: Daily automated backups with 30-day retention, tested quarterly</li><li data-v-89674909>Audit Trails: Comprehensive logging of all data access and modifications</li><li data-v-89674909>Penetration Testing: Annual third-party security audits</li><li data-v-89674909>Staff Training: All employees receive GDPR and data security training</li><li data-v-89674909>Physical Security: Data centers with 24/7 monitoring, biometric access controls</li></ul></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Data Retention</h3><ul data-v-89674909><li data-v-89674909>Active Practice Data: Retained for duration of subscription plus 30 days</li><li data-v-89674909>Archived Data: Retained as required by UK dental record-keeping regulations (11 years from last treatment or until patient reaches age 25, whichever is longer)</li><li data-v-89674909>Backups: Retained for 30 days, then securely deleted</li><li data-v-89674909>Marketing Data: Retained until consent is withdrawn or 3 years of inactivity</li></ul></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>Data Sharing and Disclosure</h2><p data-v-89674909> We do NOT sell, rent, or trade your personal information. We may share data only in the following circumstances: </p></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Service Providers</h3><ul data-v-89674909><li data-v-89674909>AWS (Cloud Hosting): Infrastructure and data storage</li><li data-v-89674909>Stripe (Payment Processing): Secure payment transactions</li><li data-v-89674909>Twilio (Communications): SMS and email delivery</li><li data-v-89674909>SendGrid (Email): Transactional and marketing emails</li><li data-v-89674909>Google Analytics: Anonymized usage analytics</li></ul><p data-v-89674909>All third-party providers are bound by Data Processing Agreements (DPAs) ensuring GDPR compliance.</p></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Legal Requirements</h3><ul data-v-89674909><li data-v-89674909>When required by law, court order, or regulatory authority (NHS BSA, CQC, ICO)</li><li data-v-89674909>To protect our rights, property, or safety</li><li data-v-89674909>In connection with legal proceedings</li></ul></section><section class="legal-section" data-v-89674909><h3 data-v-89674909>Business Transfers</h3><ul data-v-89674909><li data-v-89674909>In the event of merger, acquisition, or sale of assets, data may be transferred (with notice to users)</li></ul></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>Your Rights Under UK GDPR</h2><h3 data-v-89674909>Right of Access</h3><ul data-v-89674909><li data-v-89674909>Request a copy of personal data we hold about you (Subject Access Request)</li></ul><h3 data-v-89674909>Right to Rectification</h3><ul data-v-89674909><li data-v-89674909>Correct inaccurate or incomplete data</li></ul><h3 data-v-89674909>Right to Erasure ("Right to be Forgotten")</h3><ul data-v-89674909><li data-v-89674909>
1Request deletion of your data (subject to legal retention requirements)</li></ul><h3 data-v-89674909>Right to Restriction of Processing</h3><ul data-v-89674909><li data-v-89674909>Limit how we use your data in certain circumstances</li></ul><h3 data-v-89674909>Right to Data Portability</h3><ul data-v-89674909><li data-v-89674909>Receive your data in a structured, machine-readable format (CSV, JSON)</li></ul><h3 data-v-89674909>Right to Object</h3><ul data-v-89674909><li data-v-89674909>Object to processing based on legitimate interests or direct marketing</li></ul><h3 data-v-89674909>Right to Withdraw Consent</h3><ul data-v-89674909><li data-v-89674909>Withdraw consent at any time (where processing is based on consent)</li></ul><h3 data-v-89674909>Right to Lodge a Complaint</h3><ul data-v-89674909><li data-v-89674909>Complain to the Information Commissioner's Office (ICO)</li><li data-v-89674909>Website: ico.org.uk | Phone: 0303 123 1113</li><li data-v-89674909>To Exercise Your Rights: Email [email protected]</li><li data-v-89674909>Or write to our Data Protection Officer. We will respond within 30 days.</li></ul></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>Cookies and Tracking Technologies</h2><h3 data-v-89674909>Essential Cookies</h3><ul data-v-89674909><li data-v-89674909>Required for platform functionality (authentication, session management)</li></ul><h3 data-v-89674909>Analytics Cookies</h3><ul data-v-89674909><li data-v-89674909>Google Analytics (anonymized) to understand usage patterns</li></ul><h3 data-v-89674909>Marketing Cookies</h3><ul data-v-89674909><li data-v-89674909>Used for targeted advertising (with consent)</li></ul><p data-v-89674909> Cookie Management: You can control cookies via browser settings. Disabling essential cookies may impact functionality. </p></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>International Data Transfers</h2><p data-v-89674909> While we store data exclusively in the UK/EU, some service providers may access data from outside the EU: </p><ul data-v-89674909><li data-v-89674909>Safeguards: Standard Contractual Clauses (SCCs), adequacy decisions, and DPAs</li><li data-v-89674909>Your Control: You may object to international transfers; we will assess alternative arrangements</li></ul></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>Children's Privacy</h2><p data-v-89674909> Dev-Haus is not intended for use by individuals under 18 without parental/guardian consent. Dental practices are responsible for obtaining appropriate consent when treating minors. </p></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>Data Breach Notification</h2><p data-v-89674909>In the event of a data breach affecting your personal information:</p><ul data-v-89674909><li data-v-89674909>We will notify you and the ICO within 72 hours (where legally required)</li><li data-v-89674909>We will provide details of the breach, potential impact, and remediation steps</li><li data-v-89674909>Emergency contact: [email protected]</li></ul></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>Changes to This Privacy Policy</h2><p data-v-89674909> We may update this Privacy Policy periodically. Changes will be posted at dev-haus.com/privacy with an updated "Last Updated" date. Continued use of Services constitutes acceptance of changes. </p></section><section class="legal-section" data-v-89674909><h2 data-v-89674909>Contact Us</h2><p data-v-89674909>For Privacy Inquiries:</p><ul data-v-89674909><li data-v-89674909>Email: [email protected]</li><li data-v-89674909>Phone: 07956776114</li><li data-v-89674909>Address: Dev-Haus Limited, 32 Park Place LS1 2SP</li><li data-v-89674909>Email: [email protected], [email protected]</li></ul></section></div>',1)])])}const u=l(d,[["render",v],["__scopeId","data-v-89674909"]]),g={__name:"privacy-policy",setup(e){return r({title:"Privacy Policy | Flossly",meta:[{name:"robots",content:"noindex"}]}),(a,h)=>{const i=u;return t(),s(i)}}};export{g as default};
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.