We are committed to protecting your personal data and your right to privacy. This policy explains exactly what we collect, why, and how we protect it.
ETERNAL Dental International ("ETERNAL Dental") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information about you when you visit our website, book a consultation, or receive dental treatment. We comply with the GDPR, Indonesian Personal Data Protection Law (UU PDP), and equivalent healthcare privacy laws.
ETERNAL Dental International is the data controller responsible for your personal data. We operate dental clinics delivering cosmetic, restorative, and implant dentistry across multiple international locations. Our contact details:
If you have any questions about how we handle your data, please contact us at dental@cliniceternal.com.
We collect different categories of personal data depending on how you interact with us:
Data is collected directly from you when you submit a form, book a consultation, undergo a procedure, or contact us. Technical data is collected automatically when you browse our website.
Your personal data is used only for the purposes for which it was collected:
Under GDPR and applicable data protection law, we process your personal data under the following legal bases:
To deliver the dental services you have requested — consultations, procedures, payments, and aftercare.
To improve our services, prevent fraud, and maintain system security. These interests are always balanced against your rights.
Medical records, tax records, and other data must be retained for legally mandated periods.
For marketing emails, clinical photography for marketing use, and processing of sensitive health data — you may withdraw consent at any time.
Dental and medical information is classified as "special category data" under GDPR and receives the strongest protections. We process it only where strictly necessary for providing healthcare and with your explicit consent.
Medical data — consultation notes, intraoral photos, 3D scans, X-rays, treatment records, Digital Smile Design files — is handled with strict confidentiality. Access is limited to:
Your dental data will never be shared with advertisers, insurers, or employers for commercial purposes without your explicit written consent. Before-and-after photographs are used for your clinical file only, unless you separately consent in writing to marketing use.
We do not sell your personal data. It is shared only in these limited circumstances:
Carefully vetted third parties bound by data processing agreements — payment processors (Stripe, PayPal), email delivery services, cloud hosting, and dental imaging platforms. They process data only for purposes we instruct.
Authorised labs producing your prosthetics receive the minimum data needed to fabricate your crowns, bridges, veneers, or aligners.
If you transfer care between our international clinic locations, relevant records may be shared for continuity of treatment.
We may disclose data when required by law, court order, or regulatory authority, or to protect rights, property, or safety.
Our website uses cookies and similar technologies to improve your experience.
Required for site functionality — session management, form security. Cannot be disabled.
Anonymised data showing how visitors use our site. Individual tracking data is not shared with third parties.
Used only with your consent to serve relevant dental service advertising. Opt out any time via browser settings.
We keep data only as long as needed, or as required by law:
Because ETERNAL Dental operates internationally, your data may be transferred between our clinic locations for continuity of care.
Transfers outside the EEA rely on Standard Contractual Clauses (SCCs) approved by the European Commission, which impose equivalent data protection obligations on the recipient.
Depending on your location, you have rights over your personal data. We honour these globally:
To exercise any right, contact dental@cliniceternal.com. We respond within 30 days. We may verify your identity before processing. EU/EEA residents dissatisfied with our response may complain to their national Data Protection Authority.
Patients under 18 require verifiable parental or guardian consent before consultation or treatment. The parent or guardian retains rights of access to the child's medical records as provided by law.
We do not knowingly collect personal data from any child under 13 through our website. If you believe we have inadvertently collected data from a minor online, please contact us immediately for deletion.
We implement appropriate technical and organisational measures to protect your data:
In the event of a data breach likely to risk your rights and freedoms, we will notify you and the relevant authority as required by law.
Our website may link to third-party services (Google Maps, social media, payment gateways). We are not responsible for their privacy practices. Please review their policies separately.
We may update this Privacy Policy over time. The "Last Updated" date at the top shows when it was last revised. Material changes will be communicated by email or a prominent site notice before taking effect. Continued use of our services after changes constitutes acceptance.
For questions, requests, or concerns about this Privacy Policy: