Privacy Policy
Last updated: May 10, 2026
1. Who We Are
NgipenHub (ngipenhub.com) is a Philippine dental clinic directory operated by Genmar Dadivo. We connect patients with dental clinics across the Philippines and provide clinic owners with tools to manage their listings, appointments, and patient communications.
This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations.
2. Information We Collect
From clinic owners (registered accounts):
- Name, email address, and password
- Clinic name, address, city, contact number, and website
- Business description, service listings, and operating hours
- Photos and logo uploaded to your clinic profile
- Subscription and payment reference information
- Staff member names and roles (Pro plan)
From patients (no account required):
- Name, email address, and phone number — collected only when submitting a booking request or initiating a chat
- Appointment notes and messages exchanged with the clinic
- Review content submitted after a completed appointment
Automatically collected:
- Pages viewed (used for clinic analytics — no personal identifier is stored)
- Browser type and device information (session data only)
- IP address (stored temporarily for rate limiting and security purposes)
3. How We Use Your Information
We use the information we collect to:
- Operate the clinic directory and display clinic profiles to the public
- Process and manage appointment requests between patients and clinics
- Facilitate chat conversations between patients and clinics
- Send appointment confirmations, reminders, and status updates via email
- Allow clinics to manage their patient relationships (CRM, Pro plan only)
- Verify clinic accounts and process subscription payments
- Provide aggregate analytics to clinic owners (no personally identifiable data)
- Improve the platform and prevent fraud or abuse
We do not sell your personal information to third parties. We do not use your data for advertising profiling.
4. Data Sharing
Your information is shared only in the following circumstances:
- With the clinic you book or message: Your name, contact details, and appointment notes are shared with the clinic you interact with so they can respond to your request.
- Service providers: We use trusted third-party services (email delivery via EmailJS) that may process your data on our behalf under confidentiality obligations.
- Legal obligations: We may disclose information when required by law or to protect the rights, safety, or property of NgipenHub or its users.
5. Cookies and Local Storage
NgipenHub uses session cookies to keep you logged in and to maintain your browsing state (e.g., appointment form data).
When display advertising is active, Google AdSense may use cookies, device identifiers, and similar technologies to serve, measure, and improve ads. Google and its partners may use information from visits to NgipenHub and other websites for personalized or non-personalized advertising, depending on your settings and applicable consent requirements.
You can learn how Google uses advertising cookies and control ad personalization through Google's ad settings and privacy controls.
You can disable cookies in your browser settings, but this may prevent you from logging in to your clinic account.
6. Data Retention
- Clinic accounts: Retained for the duration of your account. Deleted upon written request.
- Patient booking data: Retained for 1 year after the appointment date, then deleted. Clinics with CRM access (Pro) may retain their own patient notes.
- Chat messages: Retained for 6 months from the last message.
- Reviews: Retained indefinitely as part of the public clinic profile unless removed by an administrator.
- Session and IP logs: Automatically purged within 30 days.
7. Data Security
We implement reasonable technical and organizational measures to protect your personal information, including:
- HTTPS encryption on all pages (TLS via Cloudflare)
- Passwords stored as bcrypt hashes — never in plain text
- Access to patient data restricted to the clinic they belong to
- Server-side input validation and HTML sanitization on all user-submitted content
No method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your clinic account.
8. Your Rights Under the Data Privacy Act
As a data subject under RA 10173, you have the right to:
- Be informed — know what personal data we hold about you
- Access — request a copy of your personal data
- Correct — update inaccurate information in your account
- Erase — request deletion of your personal data (subject to legal retention requirements)
- Object — opt out of specific processing activities
- Data portability — receive your data in a structured format
- File a complaint — lodge a complaint with the National Privacy Commission (privacy.gov.ph)
To exercise any of these rights, email us at [email protected] with the subject line "Privacy Request". We will respond within 15 business days.
9. Children's Privacy
NgipenHub is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted data to our platform, please contact us immediately so we can remove it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of NgipenHub after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy, please contact: