Privacy policy
Who we are
This policy explains how Lilium Group Ltd (company number 17549926, registered office4th Floor Office, 205 Regent Street, London, W1B 4HB, United Kingdom) collects and uses personal data in connection with Hey Odonta and this website. For questions or to exercise your rights, email hello@heyodonta.com.
Our role
- Controller: we are the data controller for data about our customers' staff, website visitors and people who contact us.
- Processor: for patient data that clinics put into Hey Odonta, the clinic is the controller and we process it only on the clinic's instructions under a data processing agreement. Patients should contact their clinic first about their data.
What we collect
- Account details: name, work email, phone number, clinic name and address.
- Billing details: billing contact and payment records. Card details are handled by our payment provider and never stored by us.
- Usage data: log-in times, device and browser information, and how the Service is used.
- Messages you send us, such as support requests.
Why we use it, and our lawful basis
- To provide the Service and support (performance of a contract).
- To take payments and keep financial records (contract and legal obligation).
- To keep the Service secure and improve it (legitimate interests).
- To send product updates to customers, which you can opt out of at any time (legitimate interests).
Who we share it with
We use trusted suppliers for hosting, email and text delivery, customer support and payment processing. They may only use the data to provide services to us. We do not sell personal data.
Where it is stored
Data is hosted in the UK or European Economic Area. If any supplier transfers data elsewhere, we use safeguards approved under UK data protection law, such as the International Data Transfer Agreement.
How long we keep it
We keep account data while you are a customer and for up to 6 years afterwards for legal and accounting purposes. Patient data is deleted 30 days after a clinic closes its account, unless the clinic instructs otherwise.
Security
Data is encrypted in transit and at rest, and access is limited to staff who need it.
Cookies
This website uses only cookies needed for it to work. If we add analytics cookies, we will ask for your consent first.
Your rights
Under UK GDPR you can ask to access, correct, delete or restrict your data, object to its use, or move it to another provider. Email us and we will reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will post any changes here and update the date at the top.