Privacy Policy & Doctor Data Protection Framework

At TheDentalHeights ("The Company", "we", "us", or "our"), operating under registered legal entities in Amritsar, Punjab and Jaipur, Rajasthan, we take the privacy, professional credentials, and clinical procurement data of practicing dental surgeons, dental clinics, and hospitals with the utmost professional diligence.

1. Overview & Scope

This Privacy Policy applies to all services, web portals, B2B wholesale portals, and mobile-optimized interfaces operated under TheDentalHeights. By registering a practitioner account, browsing our catalog, or ordering Class A, B, C, or D dental materials under the Medical Devices Rules (MDR 2017), you consent to the data practices described in this document.

2. Practitioner Data Collected

We collect essential professional information necessary to fulfill clinical supply orders:

• Practitioner Identity: Doctor full name, qualification (BDS, MDS), state dental council registration number, and clinic designation.
• Clinic Location: Operating address, pincode, contact phone number, and delivery receiving desk instructions.
• Commercial & Tax Data: Goods and Services Tax Identification Number (GSTIN), PAN, and billing trade entity for statutory Input Tax Credit (ITC) tax invoice creation.
• Procurement Records: Order frequency, material preferences (e.g. composite shades, rotary file tapers), and batch shipment telemetry.

3. DCI Registration Verification

Certain pharmaceutical and high-risk medical devices (such as local anesthetics, prescription endodontic sealers, and bone graft substitutes) require validation of clinical credentials. Practitioner registration numbers are matched against public state dental registries strictly to ensure regulatory compliance with CDSCO guidelines.

4. GSTIN & Tax Invoicing Data

When a clinic enters their 15-digit GSTIN, we transmit the required invoice data to the Goods and Services Tax Network (GSTN) to generate e-way bills and tax invoices. This information is retained for the mandatory statutory period mandated under the Central Goods and Services Tax Act, 2017.

5. Data Storage & 256-Bit SSL Encryption

All electronic transactions, credit/debit card entries, and netbanking authentication occur through PCI-DSS Level 1 certified payment gateways. We do not store raw credit card numbers or CVV codes on our servers. All database records are protected with 256-bit AES encryption at rest and TLS 1.3 in transit.

6. Third-Party Disclosures

We share relevant delivery details strictly with authorized courier partners (e.g., BlueDart Medical Air Express) for cold-chain temperature-monitored dispatches and SMS delivery status broadcasts.

7. Grievance Officer & Inquiries

In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act (DPDP) 2023, you may contact our designated Grievance Officer: