Privacy Notice
Data Privacy Act of 2012 (Republic Act No. 10173)
Last updated October 3, 2026
CavClinics connects patients with dental clinics in Cavite. This notice explains what personal information we collect, why, who can see it, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173).
What we collect
- Account details – your name, email, phone number and password (stored only in scrambled, hashed form).
- Profile details you choose to add – birthday, gender, address and photo.
- Health information you give when booking – age, allergies, current medications, medical conditions and previous X-rays or files you upload.
- Dental records your clinic creates – treatment records, dental chart, X-rays and orthodontic simulations.
- Appointments and payments – bookings, invoices and proof of payment.
- Symptom checker answers – the symptoms you select, so we can suggest services and improve suggestions.
Health information is sensitive personal information under RA 10173. We only collect and share it with your consent, or as the law allows.
Why we use it
- To create and secure your account and send you notifications.
- To book, confirm and manage your appointments.
- So the clinic you book with can prepare for your visit and treat you safely.
- To keep your dental records and payment history available to you.
- To produce anonymous, aggregated statistics that help improve the platform.
The symptom checker gives suggestions only. It is not a diagnosis; a dentist must examine you.
Who can see it
- The clinics you book with and their authorized staff, each only as far as their role allows.
- CavClinics administrators, only to support you, verify clinics and keep the platform secure.
We do not sell your information or share it for advertising. We disclose it to others only when the law requires.
How long we keep it
We keep your information while your account is active. Dental records may be kept longer where clinics must retain patient records by law or professional rules. When information is no longer needed, it is deleted or anonymized.
How we protect it
Access is limited by role, passwords are hashed, uploaded files are checked before they are stored, and every clinic sees only its own patients' records.
Your rights
Under RA 10173 you have the right to be informed, to access your information, to object, to have it corrected, erased or blocked, to data portability, and to be indemnified for damages. You may withdraw consent at any time; this does not affect processing already done, and some services (such as booking) need the information to work.
To use these rights, email info@cavclinics.ph. If you believe your rights were violated, you may also file a complaint with the National Privacy Commission (privacy.gov.ph).