Privacy Policy

Last updated: 31 August 2026

1. Introduction

This Privacy Policy explains how MyTPDSO L.L.C-FZ, a company incorporated in the United Arab Emirates and established in Meydan Free Zone, Dubai, UAE ("MyTreatPlan", "we", "us" or "our"), collects, uses, stores and shares personal data through this website.

We are committed to protecting personal data and processing it responsibly and in accordance with applicable data protection laws in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data.

This website is intended for dental professionals, clinics, businesses and other prospective commercial partners.

For questions concerning this Privacy Policy or the processing of personal data, you may contact us at: gdpr@mytreatplan.com

2. Personal Data We Collect

This website is informational. It does not include contact forms, registration, newsletter sign-up or e-commerce functionality, and it does not use cookies, analytics or tracking technologies.

Information collected automatically

The website hosting infrastructure may generate and retain standard server log information. Depending on the server configuration, this may include:

• IP address
• browser type and version
• operating system and device information
• pages requested
• date and time of access
• referring website

These logs are generated by the hosting infrastructure for technical operation and security purposes. They are not used to identify or profile individual visitors.

Information you send to us

If you write to an email address published on this website, we process the contact details, message content and any attachments you choose to send.

You must not send patient information, treatment plans, clinical records, medical images or other identifiable health information to the general contact addresses published on this website.

3. Purposes and Legal Grounds for Processing

Under the UAE Personal Data Protection Law, consent is the primary ground for processing personal data unless a specific statutory exception applies. We do not rely on a general "legitimate interests" ground.

Website operation and security

We process server log information where necessary to operate and secure the website, detect and prevent misuse, establish or defend legal claims and comply with applicable legal requirements, relying only on the relevant exceptions expressly available under Article 4 of the UAE Personal Data Protection Law.

Correspondence

We process the content of emails you send us in order to respond to your enquiry and take any steps you request in connection with a possible commercial relationship. Where applicable, this processing is necessary to take steps requested by you under Article 4; where that exception does not apply, we rely on your consent.

We will not use personal data for materially incompatible purposes without providing appropriate information and obtaining consent where required.

4. Cookies, Analytics and Tracking Technologies

This website does not place cookies and does not use analytics, advertising, pixels or similar tracking technologies.

If such technologies are introduced in future, they will not be activated until visitors have been informed and, for non-essential technologies, have given prior affirmative consent, and this Privacy Policy will be updated beforehand.

5. Hosting and Remote Access

The website is hosted on infrastructure located in the United Arab Emirates.

Personal data may be accessed remotely from outside the United Arab Emirates, including from the European Union, by authorised MyTreatPlan personnel and by external service providers acting as processors on documented instructions.

Remote access from outside the country in which personal data is hosted constitutes cross-border processing for the purposes of this Privacy Policy even where the hosting location and the underlying record do not change.

Access is limited to authorised persons who require it for the relevant stated purpose and is subject to appropriate contractual, organisational and technical safeguards.

6. Recipients and Service Providers

The following recipients and providers process personal data under the purposes, instructions and safeguards described in this Privacy Policy:

• our hosting provider - website hosting and server log information; processing in the United Arab Emirates.
• our email service provider - email correspondence sent to the addresses published on this website; where that provider processes data outside the United Arab Emirates, under the safeguards described in Section 7.
• IT and website service providers — remote access to the hosting environment from outside the United Arab Emirates, under the safeguards described in Section 7.

We disclose only the personal data reasonably required for the relevant service.

7. International Transfers and Remote Access

Personal data may be processed outside the United Arab Emirates where email correspondence is stored or processed abroad, or where an authorised service provider accesses personal data remotely from outside the country.

Where personal data is transferred to or accessed from outside the United Arab Emirates, MyTreatPlan applies the safeguards and transfer conditions required by Articles 22 and 23 of the UAE Personal Data Protection Law, as applicable to the relevant destination and circumstances. These may include appropriate contractual safeguards binding the recipient to the provisions, measures, controls and requirements of that law, or another transfer basis expressly permitted by applicable law.

MyTreatPlan maintains records of each destination, recipient, purpose, data category, access arrangement and transfer agreement.

8. Data Retention

We retain personal data under documented retention controls and delete or irreversibly anonymise it when the relevant purpose has been fulfilled, unless continued retention is required by law or for a documented legal claim.

The period for which personal data is retained depends on the purpose for which it was collected. Server and access logs are kept for the period applied by our hosting provider for technical and security purposes, and longer only where a security incident requires it. Email correspondence is kept for as long as needed to deal with the matter it concerns and, where it relates to a customer or partner relationship, for the duration of that relationship and the applicable legal recordkeeping period.

Documented retention periods for each category of personal data are recorded internally and applied by MyTreatPlan.

Deletion and anonymisation actions are applied across active systems and, subject to technical and legal constraints, backup cycles.

9. Data Security and Breach Response

We implement technical and organisational measures appropriate to the processing risks, including access controls, authentication, supplier controls, secure transmission, backup and recovery measures, monitoring and periodic review.

Access to personal data is restricted to authorised employees, contractors, group companies and providers who require access for a stated purpose.

If a personal data breach occurs, we will assess the incident and take appropriate containment and remedial measures. Where required by applicable law, we will notify the competent UAE authority and affected individuals in accordance with the applicable requirements and timeframes. We maintain an internal record of incidents, decisions and measures taken.

10. Your Rights

Subject to the conditions and exceptions of the UAE Personal Data Protection Law, you have the right to:

• request information about the processing of your personal data and obtain access to it
• receive personal data you have provided in a structured, machine-readable format and, where technically feasible, have it transmitted to another controller, where processing is based on consent or on a contract and carried out by automated means
• request rectification of inaccurate or incomplete personal data
• request erasure of your personal data, subject to legal restrictions
• request restriction of processing in the cases provided by law
• object to or stop processing, including processing for direct marketing purposes
• object to decisions based solely on automated processing that produce legal or similarly significant effects; we do not make such decisions through this website
• withdraw consent at any time, without affecting processing carried out before withdrawal

To exercise any of these rights, contact us at gdpr@mytreatplan.com. We may need to verify your identity before responding. We will respond without undue delay and within the period applicable under UAE law.

If you consider that your rights have not been respected, you may submit a complaint to the competent UAE Data Office.

11. Health and Patient Information

This website is not intended to receive patient or health information. Such information must not be sent through the contact addresses published on this website.

Personal health data that is subject to specific UAE legislation governing its protection and processing, including Federal Law No. 2 of 2019 concerning the use of information and communication technology in health fields, may fall outside the scope of the UAE Personal Data Protection Law and is subject to the applicable sector-specific requirements.

If health information is received through this website, we will restrict access to it, assess the incident and delete or redirect the information to the appropriate secure channel.

12. Children

This website is directed at professional users and is not intended for children. We do not knowingly collect personal data relating to children through this website.

13. Changes to this Privacy Policy

We may update this Privacy Policy where our processing activities, service providers or legal requirements change. The revision date appears at the beginning of this document. Where a change materially affects how personal data is processed, we will take appropriate steps to inform the individuals concerned.

14. Contact

MyTPDSO L.L.C-FZ
Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
gdpr@mytreatplan.com