Privacy Policy
This explains what this website collects, why, and what we do with it. DNTL Desk is a product of NBLK® LLC (New York) and NBLK® Global Ltd (United Kingdom).
This policy covers THIS WEBSITE only. It does not cover a dashboard we have built for your practice: that is covered by the business associate agreement and the written agreement we sign with you.
Last updated: [DATE]
1. Who is responsible for your data
The companies behind DNTL Desk are: NBLK® LLC, 767 Broadway #1624, New York, NY 10003, United States, reachable at info@dntldesk.co. NBLK® Global Ltd, Registered in England and Wales, company no. 17271085, registered office Unit 1540, 275 New North Road, Islington, London N1 7AA, United Kingdom, reachable at info@dntldesk.co.uk.
For visitors in the United Kingdom and the European Union, NBLK® Global Ltd is the controller. For everyone else, NBLK® LLC is.
[CONFIRM: whether a UK or EU representative, or a data protection officer, must be named here.]
2. What we collect
Only what you type into the booking form, and ordinary technical information about the visit.
| What | When | Why |
|---|---|---|
| Your email address | You book a call | To confirm the call and reply to you |
| Your first name | You book a call, if you give it | So we can address you properly |
| Your practice name or website | You book a call, if you give it | So we arrive at the call prepared |
| What you would like your dashboard to do | You book a call, if you give it | So the call is useful |
| The time you chose | You book a call | To hold the appointment |
| Your IP address | Every request to the booking form | To limit how often one address can submit |
We do not ask for a mobile number and this site sends no text messages. We do not ask for payment details on this site. We do not use advertising trackers.
Your IP address is used to count requests and is never stored with your booking, never logged, and never sent to anyone else.
3. Patient data never reaches this website
No patient information is collected by this website, at any point. Nothing you type into the booking form should identify a patient, and we ask you not to put patient details in it.
When we build a dashboard for your practice, patient data stays in your own account, is encrypted, and is covered by a signed business associate agreement that is in place before we touch a single record. That arrangement is governed by that agreement and by the agreement we sign with you, not by this policy.
[CONFIRM: that the business associate agreement is the correct instrument for every US practice we serve, and what the UK equivalent is for NBLK® Global Ltd.]
4. Why we use it
- To arrange and hold the call you asked for.
- To send you a confirmation of that call.
- To reply to you about your enquiry.
- To stop one address flooding the booking form.
- To keep records of who we have spoken to and what was agreed.
We do not sell your information. We do not share it for anyone else's marketing, ever.
5. Our legal basis (UK and EU visitors)
| What we do | Our basis |
|---|---|
| Arranging and confirming a call you asked for | Taking steps at your request before a contract |
| Replying to an enquiry | Our legitimate interest in answering you |
| Rate limiting the booking form | Our legitimate interest in keeping the service available |
| Keeping business records | Our legal obligation, and our legitimate interest |
[CONFIRM: these bases with the reviewer, and whether any of them should be consent instead.]
6. Who else sees it
A small number of services we use to run the business. Each one sees only what it needs.
| Who | What they see | Where |
|---|---|---|
| Our hosting provider | Technical request logs for this website | United States |
| Our cloud provider | Your booking details, which are stored there | United States |
| Our email provider | Your confirmation email | United States |
We may also share information where the law requires it, or to establish or defend a legal claim.
[CONFIRM: the exact provider names, and whether each should be named here by name.]
7. Where your data is held
Booking details are held in the United States today. If you are in the United Kingdom or the European Union, that is a transfer outside your region.
[CONFIRM: the transfer mechanism relied on, and whether a UK or EU region is needed before launch.]
8. How long we keep it
| What | How long |
|---|---|
| A booking that led to no further contact | [CONFIRM: proposed 24 months] |
| A booking that became a customer | [CONFIRM: the life of the relationship, then 7 years] |
| Technical request logs | [CONFIRM: proposed 30 days] |
At the end of the period the record is deleted or anonymised so it can no longer identify you.
9. Your rights
Depending on where you live, you can ask us to:
- Tell you what we hold about you, and give you a copy.
- Correct anything that is wrong.
- Delete it.
- Restrict or object to how we use it.
- Take it elsewhere in a portable form.
Write to info@dntldesk.co and we will answer within one month. You do not have to pay, and we will not treat you differently for asking.
If you are unhappy with our answer you can complain to your data protection regulator. In the United Kingdom that is the Information Commissioner's Office.
10. Security
Information is encrypted in transit and at rest. Access is limited to the people who need it. Credentials for the systems behind this site are held in the deployment platform's own settings and never in our code.
No system is perfectly secure, and we do not claim otherwise.
11. Cookies
This website sets no cookies of its own, uses no analytics, and carries no advertising trackers. There is no cookie banner because there is nothing to consent to.
The live demo shown on the home page is a separate NBLK site, loaded inside a frame. It runs on made-up patients and sets its own cookies if it sets any at all.
[CONFIRM: that no analytics will be added before launch. Adding any changes this section and may require a banner.]
12. Children
This website is for dental practices and is not directed at children. We do not knowingly collect information from anyone under 16 through this site.
13. Changes
If we change this policy we will update the date at the top. If a change matters to you, we will tell the people whose details we hold.
14. How to reach us
NBLK® LLC, 767 Broadway #1624, New York, NY 10003, United States, reachable at info@dntldesk.co. NBLK® Global Ltd, Registered in England and Wales, company no. 17271085, registered office Unit 1540, 275 New North Road, Islington, London N1 7AA, United Kingdom, reachable at info@dntldesk.co.uk.
Email is the way to reach us. We do not publish a telephone number.