Privacy Policy
Last updated: 24 July 2026
1. Introduction
Best Smile Dental Pte Ltd (“Best Smile Dental”, “we”, “us” or “our”) respects your privacy and is committed to handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, store, protect and otherwise process personal data when you:
- visit our website at https://bestsmiledental.com.sg/;
- request or manage an appointment;
- submit an enquiry;
- contact us by telephone, email, WhatsApp or another communication channel;
- receive dental or administrative services from us;
- participate in a promotion, survey or feedback exercise; or
- otherwise interact with Best Smile Dental.
This Privacy Policy should be read together with our Website Terms and Conditions and any other notices provided when we collect personal data from you. By providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.
2. Who we are
This website and the dental clinic associated with it are operated by:
Best Smile Dental Pte Ltd
11 Upper Boon Keng Road
#01-929
Singapore 380011
Website: https://bestsmiledental.com.sg/
Telephone/WhatsApp: +6589787051
3. What is personal data?
“Personal data” means data, whether true or not, about an individual who can be identified:
- from that data alone; or
- from that data together with other information to which we have or are likely to have access.
Depending on how you interact with us, the personal data we collect may include health-related or other sensitive information.
4. Personal data we may collect
We may collect the following categories of personal data.
4.1 Identity information
This may include your:
- full name;
- date of birth;
- age;
- gender, where relevant to treatment or administration;
- nationality or residency status, where required;
- NRIC, FIN, passport or other identification information where collection is permitted or required;
- patient number or internal record identifier; and
- identity-verification information.
We will not collect, use or disclose NRIC or other national identification numbers unless doing so is permitted or required under applicable law, or is reasonably necessary to establish or verify your identity to a high degree of accuracy.
4.2 Contact information
This may include your:
- telephone number;
- mobile number;
- email address;
- residential or mailing address;
- preferred communication method; and
- emergency contact information.
4.3 Appointment information
This may include:
- your preferred appointment date and time;
- the clinic service or treatment you are interested in;
- the reason for your appointment;
- your preferred dental practitioner, if any;
- appointment confirmations and reminders;
- cancellations, rescheduling requests and missed appointments; and
- records of communications concerning your appointment.
4.4 Dental and health information
Where necessary for providing dental services, we may collect information including:
- your dental concerns and symptoms;
- dental and medical history;
- allergies;
- medications;
- existing health conditions;
- pregnancy status where relevant;
- past treatments or procedures;
- examination findings;
- diagnoses;
- clinical notes;
- treatment plans;
- prescriptions;
- referrals;
- dental charts;
- X-rays, scans, photographs and other clinical images;
- laboratory results;
- consent forms;
- treatment progress;
- post-treatment information; and
- other information relevant to the safe provision of dental care.
Please avoid submitting detailed medical or dental information through general website forms unless the form specifically requests it.
4.5 Payment, subsidy and insurance information
This may include:
- billing information;
- invoices and receipts;
- payment status;
- partial payment-card information provided by a payment processor;
- insurance provider and policy information;
- corporate benefits information;
- CHAS or other subsidy information;
- MediSave-related information;
- claim documentation; and
- transaction and refund records.
We may use external payment processors. We may not directly receive or store complete payment-card details when payment is processed by a third party.
4.6 Information about parents, guardians and representatives
Where an appointment is made for a child or another person, we may collect:
- the representative’s name;
- contact information;
- relationship to the patient;
- proof of authority, where required; and
- communications between the representative and the clinic.
4.7 Communications We may keep records of communications made through:
- website forms;
- email;
- telephone calls;
- SMS;
- WhatsApp;
- social-media messaging;
- appointment platforms; and
- in-person interactions.
These records may include the date, time, content and purpose of the communication.
4.8 Website and device information
When you visit our website, we or our technology providers may automatically collect:
- Internet Protocol address;
- browser type and version;
- device type;
- operating system;
- language settings;
- referring website;
- pages viewed;
- links clicked;
- date and time of access;
- approximate location based on your Internet Protocol address;
- session duration;
- cookie identifiers; and
- website performance and diagnostic data.
4.9 Images and recordings
Where appropriate and with the necessary notice or consent, we may collect:
- clinical photographs;
- before-and-after treatment images;
- CCTV recordings at the clinic;
- telephone recordings, where applicable; and
- photographs, videos or testimonials created for educational or marketing purposes.
Clinical images used for treatment and record-keeping are different from images used for advertising or promotional purposes. We will obtain separate permission where required before using identifiable patient images or testimonials for marketing.
5. How we collect personal data
We may collect personal data:
- directly from you;
- from a parent, guardian, family member or authorised representative;
- through our website;
- through an online appointment-booking provider;
- through telephone, email, SMS or WhatsApp;
- during registration, consultation, examination and treatment;
- from referral letters or referring healthcare professionals;
- from laboratories, imaging providers and other healthcare providers;
- from insurers, administrators, employers or subsidy administrators;
- through payment providers;
- through cookies and website analytics;
- from publicly available sources where appropriate; and
- from other parties where collection is authorised by you or permitted by law.
Where you provide personal data relating to another person, you confirm that you are authorised to provide it and, where required, have informed that person about the purposes for which the information is being provided.
6. Purposes for collecting, using and disclosing personal data
We may collect, use and disclose personal data for the following purposes.
6.1 Appointment administration
We may use your information to:
- respond to appointment requests;
- identify and register patients;
- schedule, confirm, cancel or reschedule appointments;
- send appointment reminders;
- manage waiting lists;
- contact you about practitioner availability or clinic changes;
- prepare for your consultation; and
- follow up after an appointment.
6.2 Dental care and treatment
We may use your information to:
- assess your dental condition;
- provide examinations, diagnoses and treatment;
- create and manage treatment plans;
- obtain informed consent;
- prescribe medication;
- arrange X-rays, scans, tests or laboratory work;
- monitor treatment progress;
- provide aftercare instructions;
- manage clinical risks and patient safety;
- coordinate care with other healthcare professionals; and
- maintain accurate dental and clinical records.
6.3 Payments and claims
We may use your information to:
- prepare quotations and treatment estimates;
- issue invoices and receipts;
- collect and process payments;
- manage deposits, refunds and outstanding balances;
- verify insurance or corporate benefits;
- submit or support claims;
- process applicable subsidies or MediSave arrangements; and
- respond to billing enquiries.
6.4 Clinic operations
We may use your information to:
- manage patient relationships;
- maintain internal records;
- train and supervise clinic personnel;
- conduct quality assurance;
- improve our services and patient experience;
- manage complaints and feedback;
- investigate incidents;
- maintain business continuity;
- prevent fraud and misuse;
- protect patients, staff and property; and
- administer our clinic and business.
6.5 Website operation and improvement
We may use website information to:
- provide and maintain the website;
- operate website forms and appointment links;
- diagnose technical problems;
- improve website performance;
- understand how visitors use the website;
- maintain website security;
- prevent malicious activity;
- measure the effectiveness of website content; and
- improve our online services.
6.6 Communication
We may contact you for:
- appointment confirmation;
- appointment reminders;
- responses to enquiries;
- treatment-related instructions;
- follow-up care;
- administrative matters;
- payment or claim matters;
- service announcements;
- changes affecting your appointment; and
- other matters related to your relationship with the clinic.
We may communicate through telephone, email, SMS, WhatsApp or another channel you have provided or selected.
6.7 Legal and regulatory compliance
We may process personal data to:
- comply with applicable laws and regulations;
- meet licensing and professional obligations;
- respond to lawful requests from public authorities;
- manage legal claims and disputes;
- comply with court orders;
- support audits or investigations;
- report matters where legally required; and
- protect our legal rights and legitimate interests.
7. Consent and other permitted processing
Where consent is required, we will notify you of the purposes for which your personal data is being collected, used or disclosed. Consent may be:
- expressly provided;
- deemed to have been provided through your actions;
- provided by an authorised representative; or
- otherwise recognised under applicable law.
In certain circumstances, we may collect, use or disclose personal data without consent where permitted or required by law. This may include situations involving:
- medical emergencies;
- protection of vital interests;
- investigations;
- legal claims;
- compliance with legal obligations;
- legitimate interests, subject to applicable safeguards; or
- other exceptions under Singapore law.
8. Marketing communications
With your consent or where otherwise permitted, we may send information about:
- clinic services;
- dental-health information;
- promotions;
- events;
- new services;
- reminders for routine dental care; and
- other clinic-related updates.
You may withdraw your consent to receive marketing communications by:
- using an unsubscribe link where provided;
- replying with the applicable opt-out instruction;
- contacting the clinic; or
- contacting our Data Protection Officer.
Opting out of marketing does not prevent us from sending necessary administrative, appointment, payment, treatment or service-related communications.
9. Disclosure of personal data
We may disclose personal data where reasonably necessary to the following parties.
9.1 Healthcare professionals and providers
This may include:
- dentists;
- dental specialists;
- doctors;
- nurses and dental assistants;
- referring healthcare professionals;
- laboratories;
- radiology and imaging providers;
- pharmacies;
- hospitals;
- emergency services; and
- other healthcare providers involved in your care.
9.2 Administrative and professional service providers
This may include:
- appointment-booking providers;
- clinic-management system providers;
- website developers and hosting providers;
- cloud-storage providers;
- information-technology support providers;
- payment processors;
- banks;
- accountants;
- auditors;
- insurers;
- legal advisers;
- debt-recovery service providers;
- document-storage or destruction providers;
- communications providers; and
- security providers.
9.3 Scheme administrators and other organisations
This may include:
- government agencies;
- regulators;
- subsidy administrators;
- insurance providers;
- third-party administrators;
- corporate benefit providers;
- employers where authorised;
- MediSave-related administrators; and
- other organisations involved in funding or administering your care.
9.4 Corporate transactions
If Best Smile Dental undergoes a restructuring, merger, acquisition, sale, transfer of business or similar transaction, personal data may be disclosed to professional advisers and relevant transaction parties, subject to appropriate confidentiality and data-protection safeguards.
9.5 Authorities and other legally permitted recipients
We may disclose personal data:
- where required by law;
- in response to a court order or lawful request;
- to protect a patient or another person;
- to investigate suspected wrongdoing;
- to enforce our rights;
- to defend legal claims; or
- where disclosure is otherwise permitted under applicable law.
We do not sell patients’ personal data.
10. Third-party appointment-booking platforms
Our website may direct you to an external appointment-booking platform. When you make a booking through that platform:
- the platform may collect information directly from you;
- the platform’s privacy policy and terms may also apply;
- the platform may process information on our behalf or for its own stated purposes; and
- information required to manage your appointment may be shared with Best Smile Dental.
You should review the third-party provider’s privacy policy before submitting personal data. Although we take reasonable care when selecting service providers, we do not control all aspects of an independent third party’s systems, policies or processing activities.
11. WhatsApp, email and messaging applications
You may choose to communicate with us through WhatsApp, email, SMS or another messaging service. These services may be operated by third parties and may process information outside Singapore. Their own terms, privacy policies and security practices apply. Electronic communications may not always be fully secure. Please avoid sending unnecessary identification documents, complete payment-card details or highly sensitive health information through general messaging channels unless requested through an approved process. For emergencies, do not rely on email, website forms or WhatsApp. Seek immediate medical assistance where appropriate.
12. Cookies and similar technologies
Our website may use cookies, pixels, tags, scripts and similar technologies. A cookie is a small data file placed on your browser or device. Cookies may be used to:
- enable essential website functions;
- maintain website security;
- remember preferences;
- understand website usage;
- measure website performance;
- identify technical errors;
- improve user experience; and
- support analytics or marketing, where applicable.
12.1 Types of cookies
We may use: Strictly necessary cookies
These are required for website functionality, security or appointment-related features. Analytics cookies
These help us understand how visitors interact with the website. Functional cookies
These remember settings and preferences. Advertising or marketing cookies
Where used and permitted, these may help measure campaigns or display relevant content.
12.2 Managing cookies
You may manage or disable cookies through:
- your browser settings; or
- a cookie-preference tool made available on the website.
Blocking some cookies may affect website functionality.
13. Website analytics
We may use analytics services to understand:
- how many people visit the website;
- which pages are viewed;
- how visitors navigate the website;
- the general location from which visits originate;
- the device and browser used; and
- whether website features are working properly.
Analytics providers may use cookies or similar identifiers. Information collected through analytics may be aggregated or pseudonymised, but it may still be treated as personal data where an individual can reasonably be identified.
14. External links
Our website may contain links to external websites or services, including:
- appointment platforms;
- maps;
- social-media platforms;
- messaging applications;
- insurers;
- subsidy information; and
- other third-party resources.
We are not responsible for the privacy practices, content or security of independent third-party websites. You should review their privacy policies before providing personal data.
15. Protection of personal data
We take reasonable administrative, physical and technical measures to protect personal data in our possession or control. These measures may include:
- access controls;
- role-based permissions;
- passwords and authentication controls;
- staff confidentiality obligations;
- staff training;
- antivirus and security software;
- software updates;
- backups;
- secure storage;
- physical access restrictions;
- vendor assessment;
- contractual safeguards;
- incident-response procedures; and
- secure disposal or anonymisation procedures.
Access to patient information is limited to personnel and service providers who reasonably require it for authorised purposes. However, no electronic system, transmission method or storage system can be guaranteed to be completely secure.
16. Personal-data breaches
If a personal-data breach occurs, we will take reasonable steps to:
- contain and assess the breach;
- identify the information and individuals affected;
- mitigate potential harm;
- correct security weaknesses;
- preserve relevant evidence; and
- notify affected individuals and the appropriate authorities where required by law.
17. Accuracy and correction
We will make reasonable efforts to ensure that personal data used or disclosed by us is accurate and complete where it is likely to affect you or another person. You should notify us promptly if:
- your name or contact information changes;
- your medical or dental information changes;
- information in your records is inaccurate; or
- information submitted through the website or appointment platform was incorrect.
You may request correction of personal data by contacting our Data Protection Officer. We may need to verify your identity and may request supporting documents before making a correction.
18. Retention of personal data
We retain personal data only for as long as:
- it remains necessary for the purpose for which it was collected;
- it is needed to provide dental services;
- it is needed for clinic administration;
- it is needed to respond to complaints or legal claims;
- it is required under healthcare, professional, tax, accounting or other laws; or
- another legitimate business or legal reason applies.
Different categories of information may have different retention periods. When personal data is no longer required, we will take reasonable steps to:
- securely delete it;
- destroy it;
- anonymise it; or
- remove the means by which it can be associated with an identifiable individual.
Withdrawing consent does not necessarily require us to delete clinical or other records that must be retained for legal, professional, patient-safety or legitimate operational reasons.
19. Overseas transfers
Some of our service providers may store or process personal data outside Singapore. Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the recipient provides a standard of protection comparable to the protection required under Singapore’s Personal Data Protection Act. These safeguards may include:
- contractual data-protection requirements;
- confidentiality obligations;
- access and security controls;
- vendor due diligence; and
- use of providers operating under recognised data-protection frameworks.
20. Access to personal data
You may request:
- access to personal data that we hold about you; and
- information about how we have used or disclosed that personal data within the period required under applicable law.
To make a request, contact our Data Protection Officer using the details in Section 2. We may require:
- a written request;
- proof of identity;
- proof of authority where acting for another person;
- sufficient details to identify the requested information; and
- payment of a reasonable administrative fee where permitted.
We may refuse, limit or redact access where permitted or required by law, including where disclosure could:
- reveal another person’s personal data;
- threaten another person’s safety or health;
- interfere with an investigation;
- reveal confidential commercial information; or
- breach a legal or professional obligation.
We will inform you where a request cannot be fulfilled, unless we are legally prevented from doing so.
21. Withdrawal of consent
You may withdraw consent to our continued collection, use or disclosure of personal data by contacting our Data Protection Officer. Your request should identify:
- the personal data concerned;
- the processing activity concerned; and
- the consent you wish to withdraw.
Before processing the withdrawal, we may inform you of the likely consequences. Depending on the scope of your request, withdrawal may affect our ability to:
- arrange or manage an appointment;
- communicate with you;
- provide treatment;
- process insurance, subsidy or MediSave matters;
- maintain an ongoing patient relationship; or
- provide another requested service.
Withdrawal of consent:
- does not affect processing already carried out lawfully;
- does not require us to delete information that must or may legally be retained; and
- does not prevent processing that is permitted without consent under applicable law.
We will process valid withdrawal requests within a reasonable period.
22. Children and minors
A parent, legal guardian or authorised representative may provide personal data and arrange dental services for a child. We may collect information about:
- the child;
- the parent or guardian;
- their relationship;
- consent and authority; and
- the child’s dental and medical needs.
Where appropriate, we may consider the child’s age, understanding and ability to provide consent. The presence or consent of a parent, guardian or authorised representative may be required before certain services or treatments are provided.
23. CCTV
CCTV may be used in selected clinic areas for:
- safety;
- security;
- crime prevention;
- incident investigation; and
- protection of patients, visitors, staff and property.
CCTV will not ordinarily be installed in areas where a person would reasonably expect a high degree of privacy. CCTV footage may be disclosed to security providers, insurers, advisers, authorities or other recipients where reasonably necessary or legally required.
24. Testimonials and marketing images
We will not use identifiable patient testimonials, clinical photographs, videos or before-and-after images for advertising or promotional purposes without obtaining the required permission. Where permission is provided:
- the intended use will be explained;
- the channels on which the content may appear may be identified;
- consent may be recorded in writing;
- the material may remain available where it has already been lawfully published or distributed; and
- withdrawal may not be fully effective for copies already shared, downloaded, printed or republished by others.
Refusing marketing consent will not affect your eligibility to receive dental treatment.
25. Complaints and questions
You may contact our Data Protection Officer if you:
- have a question about this Privacy Policy;
- believe your personal data has been handled improperly;
- wish to request access or correction;
- wish to withdraw consent;
- wish to make a privacy complaint; or
- wish to report a suspected personal-data breach.
Please provide sufficient information for us to understand and investigate your concern. We will review the matter and respond within a reasonable period.
26. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in:
- our clinic operations;
- website functionality;
- appointment systems;
- service providers;
- technology;
- data-handling practices; or
- legal and regulatory requirements.
The updated policy will be published on this page with a revised “Last updated” date. Material changes may also be communicated through another appropriate channel.
27. Governing law
This Privacy Policy is governed by the laws of the Republic of Singapore. Nothing in this Privacy Policy limits any rights or obligations arising under Singapore’s Personal Data Protection Act 2012 or other applicable laws.
28. Contact details
For privacy questions, requests or complaints, please contact: Data Protection Officer
Best Smile Dental Pte Ltd
11 Upper Boon Keng Road
#01-929
Singapore 380011
Telephone: +6589787051