Privacy Policy

Last updated: September 02. 2025

Who we are: Nova Dental Implant Centres (“NDIC”, “we”, “us”, “our”) are a group of independently owned dental practices operated by registered dental practitioners in Australia. This Privacy Policy explains how we collect, use, disclose, and protect your personal information across our websites, landing pages, forms, communications (phone/SMS/email), and in-clinic interactions, and how to exercise your privacy rights.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the Spam Act 2003 (Cth), and the Notifiable Data Breaches (NDB) scheme.

By using our website or engaging with us, you agree to this Privacy Policy and our Terms & Conditions.

1) What we collect

We collect information in three ways: you provide it, we collect it automatically, and we receive it from third parties.

A. Information you provide

Identity & contact: name, email, phone, address, suburb/state/postcode.
Demographic & preferences: age range, language preferences, communication preferences.
Health & clinical pre-screening: information you choose to share about your dental history, conditions, medications, allergies, and goals (collected for triage and to prepare for consultation).
Funding information: details you provide to assist with ATO compassionate release of super or third-party finance pathways (we do not control approvals).
Bookings & communications: enquiries, messages, recorded voicemails, call notes, and survey responses.
Billing & transactions (if applicable): payer name, method, amounts, limited payment metadata (we use PCI-compliant processors; we do not store full card details).

B. Information collected automatically

Technical data: IP address, device identifiers, browser type/version, operating system, time zone, referring URLs.
Usage data: pages viewed, time on page, clicks/scrolls, form starts/completions, ad campaign source.
Cookies & similar tech: first- and third-party cookies, pixels (e.g., Meta/Google), tags and SDKs used for analytics, site performance, fraud prevention, conversion measurement, and ad personalisation/retargeting (see §8 “Cookies & Similar Technologies” and “Your Choices”).

C. Information from third parties

Advertising & analytics partners (e.g., Google, Meta) — aggregated engagement and attribution data.
Finance/super facilitators — status information you or they share back to coordinate your case.
Clinic partners and service providers — scheduling and coordination data.
Public sources — where lawful.

2) How we use your information

We use personal information to:

Provide and improve our websites, communications, and in-clinic services.
Respond to enquiries; book and manage appointments; pre-screen for suitability.
Prepare your initial consult (so the dentist can advise you properly in-clinic).
Assist administration for funding (ATO compassionate release/finance) at your request.
Send confirmations, reminders, important notices, and (where you opt-in) marketing by SMS/email.
Personalise content and ads, measure performance, and improve our campaigns.
Detect, prevent, and investigate fraud, abuse, or security incidents.
Comply with Australian law, regulator requests, and enforce our terms.

We do not provide medical advice online. Diagnosis and treatment occur only after a full in-person consultation with a registered dental practitioner.

3) When we disclose personal information

We disclose personal information only as needed and subject to safeguards:

Practices within NDIC and their clinical/support teams to coordinate your care.
Service providers under contract (hosting, CRM, forms, analytics, SMS/email platforms, call recording/telephony, IT/security, payment processors, document storage).
Advertising and measurement partners (e.g., Google/Meta) — we may share or allow collection of online identifiers (e.g., IP, cookies) for ad personalisation/measurement. You can opt-out or adjust settings (see §9 “Your Choices”).
Finance/super facilitators at your request to progress your application(s).
Professional advisors (accountants, auditors, insurers, lawyers) under duties of confidence.
Regulators and law enforcement where required or authorised by law.
Corporate transactions (merger, acquisition, asset sale or restructure) — subject to confidentiality and lawful bases.

We do not sell your personal information for money.

4) Health information & clinical confidentiality

Where your information constitutes health information, we handle it with higher protections consistent with the Privacy Act, APP 12/13 (access/correction) and relevant health records obligations in your state/territory. Clinical records are controlled by the relevant independent practice and treating clinician.

5) Direct marketing & SMS/email communications

We send service messages (confirmations, reminders, essential updates).
With your consent/opt-in, we may send promotional messages.
Not a condition of purchase: your consent to marketing is voluntary and not required to receive care.
Opt-out anytime: reply STOP to SMS or use the unsubscribe link in emails; or contact us (see §12). Processing may take a short time to complete.

Carrier charges may apply. While we use reputable providers, we are not responsible for carrier delays or delivery failures.

6) Overseas disclosure

Some providers (e.g., cloud hosting, email/SMS delivery, analytics) may store or access data from locations outside Australia (e.g., the United States, EU, or APAC). Where we disclose information overseas, we take reasonable steps to ensure recipients protect it to standards comparable to the APPs (contractual terms, technical safeguards, and access controls).

7) Security & retention

We use reasonable administrative, technical, and physical safeguards (access controls, encryption in transit, network protections, staff training). No system is perfect; if a data breach is likely to cause serious harm, we will notify you and the OAIC per the NDB scheme.

We retain personal information only as long as necessary for the purposes described (and to meet legal/clinical recordkeeping obligations). When no longer needed, we de-identify or securely destroy it.

8) Cookies & similar technologies

We use cookies/pixels/SDKs to operate our site, improve performance, prevent fraud, personalise content/ads, and measure campaigns. Types include:

Strictly necessary (site operation, security)
Performance & analytics (traffic, engagement)
Preferences (remember settings)
Marketing (ad personalisation/retargeting, frequency capping, attribution)

You can manage cookies in your browser and via our on-site Cookie Controls (where available). Blocking some cookies may impact site features.

Do Not Track: Browser “DNT” signals are not currently recognised; use the options above to manage tracking.

9) Your choices & rights

Access & correction: You may request access to, or correction of, your personal information (APP 12/13).
Marketing opt-out: Unsubscribe or reply STOP as noted in §5.
Cookies/ads controls: Use browser settings, our Cookie Controls, and platform tools (e.g., Google Ad Settings, Meta Ad Preferences).
Withdrawing consent: Where processing relies on consent, you may withdraw it at any time (this won’t affect prior lawful use).

We may need to verify your identity before actioning requests.

10) Children

Our website and campaigns are not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will delete it where appropriate.

11) Links to other sites

Our site may link to third-party websites. Their privacy practices are their own; please review their policies. We are not responsible for third-party content or handling of your information.

12) Contact, complaints & escalation

Privacy Officer – NDIC

Email:

Phone:

Address:

If you have a concern, contact us first. We’ll acknowledge and investigate. If you’re not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC): oaic.gov.au or 1300 363 992.

13) Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date will change, and significant changes may be notified on-site or via email/SMS (where appropriate). Continued use of our site or services after changes indicates acceptance.