Privacy Policy

1. Scope

This Policy applies when you interact with Dentabay through our clinics, forms, advertisements, websites, social media pages, messaging channels, or other services that link to this Policy. It also applies to information processed through advertising and analytics tools that we use for legitimate business and marketing purposes.

This Policy does not govern the independent privacy practices of third-party platforms. For example, Meta Platforms, Inc. and its affiliates process information under their own terms and privacy policies.

2. Information we collect

Depending on how you interact with us, we may collect:

• Identity and contact information, such as your name, telephone number, email address, and preferred contact method.
• Appointment and enquiry information, such as the service you are interested in, preferred clinic or appointment time, and messages you send to us.
• Marketing lead information submitted through Dentabay forms or Meta Lead Ads, including the fields displayed to you before submission.
• Technical and usage information, such as IP address, device or browser type, page and advertisement interactions, timestamps, referral information, and cookie or similar technology identifiers, where applicable.
• Advertising information, such as campaign, advertisement, ad set, lead, page, and aggregated performance identifiers or metrics.
• Communication records, including correspondence with our team and consent or opt-out preferences.

3. Where information comes from

We may obtain information directly from you, from your interactions with our services and advertisements, from authorised staff or service providers, and from third-party platforms such as Meta when you submit a lead form or interact with a Dentabay campaign.

4. How we use information

• Respond to enquiries and arrange consultations or appointments.
• Provide, administer, and improve Dentabay services.
• Manage leads and follow up on requests you choose to submit.
• Create, deliver, measure, and optimise marketing campaigns.
• Generate campaign reporting and understand aggregate performance.
• Maintain security, prevent fraud or misuse, and troubleshoot our systems.
• Comply with legal, regulatory, accounting, and record-keeping obligations.
• Respect your communication preferences and manage consent or opt-out requests.

We do not sell personal information for monetary consideration.

5. Meta Marketing API and Meta technologies

Dentabay uses Meta business tools, which may include the Meta Marketing API, Lead Ads, Ads Manager, Meta Pixel, Conversions API, Facebook Pages, and Instagram professional accounts. Our authorised application may access or process data made available by Meta solely to:

• Create and manage Dentabay advertising campaigns, ad sets, creatives, and related assets.
• Retrieve leads that people voluntarily submit through Dentabay lead forms.
• Read campaign insights, delivery status, and aggregated performance metrics.
• Measure campaign effectiveness, attribute permitted events, and improve marketing operations.
• Maintain Dentabay business account, Page, and advertising workflows.

Access is limited to permissions approved by Meta and granted by authorised Dentabay users. We use Meta data only for the purposes described in this Policy and in accordance with the Meta Platform Terms, applicable Meta developer policies, and applicable law. We do not use Meta user data to build unrelated profiles, make eligibility decisions, or provide data to data brokers.

You can manage certain Meta privacy and advertising choices through your Facebook or Instagram settings. Meta’s own collection and use of information are explained in the Meta Privacy Policy.

6. When we disclose information

We may disclose information only where reasonably necessary to:

• Authorised Dentabay personnel who need it for their work.
• Service providers supporting hosting, customer relationship management, communications, analytics, security, and advertising, under appropriate obligations.
• Meta and other platforms when required to operate requested integrations or advertising services.
• Professional advisers, regulators, law enforcement, courts, or other parties where required by law or necessary to protect rights and safety.
• A successor organisation in connection with a legitimate merger, restructuring, or transfer of business, subject to appropriate safeguards.

7. Legal grounds and consent

Where applicable, we process information based on your consent, steps taken at your request, performance of a contract, compliance with legal obligations, and our legitimate interests in operating, securing, and improving our services and marketing. Where consent is required, you may withdraw it at any time without affecting processing already carried out lawfully.

8. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described above, including follow-up on enquiries, campaign reporting, dispute resolution, security, and legal or accounting requirements. Retention periods vary according to the type and sensitivity of information, the context in which it was collected, and applicable requirements. When information is no longer required, we delete it or render it anonymous, subject to permitted backups and legal holds.

9. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect information, including access controls, authentication, restricted permissions, secure transport, monitoring, and vendor management where appropriate. No system can be guaranteed to be completely secure, and we encourage you not to send sensitive clinical information through advertising lead forms.

10. Your privacy rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information; withdraw consent; object to or restrict certain processing; and opt out of direct marketing. We may need to verify your identity before completing a request. We will not discriminate against you for making a privacy request.

To stop promotional email or messaging, use the unsubscribe method provided or contact us using the details below. Service-related communications may still be sent where necessary.

11. Data deletion requests

You may ask Dentabay to delete information received through our Meta application or other marketing channels by emailing izzuddin@iasvalley.com.my with the subject “Dentabay Data Deletion Request”.

Please include your full name, the email address or telephone number used in your enquiry, the relevant Facebook or Instagram account name if applicable, and enough information for us to locate the record. Do not send passwords or copies of sensitive clinical documents. After identity verification, we will delete or anonymise eligible information and confirm completion, except for information we must retain by law or for legitimate security, fraud prevention, or legal claims.

A dedicated copy of these instructions is available at our Data Deletion Instructions page.

12. International processing

Some technology and service providers may process information in countries other than Malaysia. Where required, we use appropriate contractual, organisational, or legal safeguards for such transfers.

13. Children’s privacy

Our online marketing services are not intended to collect personal information directly from children without involvement of a parent or legal guardian. If you believe a child has provided information improperly, please contact us so that we can take appropriate action.

14. Changes to this Policy

We may update this Policy to reflect changes to our practices, technologies, or legal obligations. We will publish the revised version on this page and update the “Last updated” date. Material changes may also be communicated through an appropriate additional notice.

15. Contact us