Privacy policy

DRAFT — under legal review. This policy is not yet final.

About this policy This policy explains how Luck Dragon Pty Ltd ("we") handles personal information for Dentora. It covers two kinds of information: details about the dental practices that subscribe, and patient information we host on behalf of those practices.

Practices that subscribe We collect the practice name, contact person, email, phone and billing details to set up and bill your subscription. Card payments are handled by Stripe; we don't see or store card numbers.

Patient information Each practice decides what patient information it collects through its app and is responsible for it under the Privacy Act 1988 and the Australian Privacy Principles. We store and process it only to provide the service to that practice. Patients should contact their practice to access, correct or delete their information.

Where information is stored Information is stored with Cloudflare. Each practice's database and its encrypted nightly backups are stored in Australia (Oceania region); backups are kept for 35 days. Sensitive fields such as health fund numbers and health form answers are encrypted. Some Cloudflare processing may occur outside Australia.

Email, push and text messages We send login codes, appointment updates and reminders by email, and by push notification or text message where the patient or practice has turned these on. Email and text providers receive only what is needed to deliver each message.

Security Access is limited to the practice's own staff accounts and to us for support and maintenance. Staff sign-ins are protected, actions are logged, and the service is monitored continuously.

Questions and complaints Email paddy@luckdragon.io. If you're not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).