Privacy Policy

CEMDRA ("we", "us", "our") operates a cloud-based clinic practice management platform that enables clinics to manage patient records, appointments, billing, and staff operations. This Privacy Policy explains how we collect, use, store, and protect information submitted through our platform by clinic administrators, healthcare staff (including dentists and practitioners), and patients.

By using CEMDRA, you agree to the practices described in this policy. This policy applies to all users of the platform, including platform administrators, clinic administrators, staff members, and patients.

Clinic Information: Clinic name, owner details, contact information, address, branding assets (logos, colors), and operational configuration provided during onboarding.

Staff Information: Names, email addresses, license numbers, specializations, and contact numbers of dentists and clinic staff registered on the platform.

Patient Information: Names, email addresses, contact numbers, age, sex, address, medical visit records, procedure history, and uploaded files related to treatments.

Financial Information: Credit balances, rebate balances, payment transactions, payment methods, and commission records associated with clinic operations.

Usage Data: Authentication logs, activity timestamps, and device information collected automatically when you access the platform.

We use the collected information to:

• Provide and maintain the CEMDRA platform and its features;
• Manage clinic onboarding, approvals, and administration;
• Facilitate appointment scheduling and patient care coordination;
• Track financial transactions, credits, and commission calculations;
• Generate analytics and operational reports for clinic administrators;
• Communicate with you regarding your account and platform updates;
• Ensure platform security and prevent unauthorized access.

CEMDRA is designed with strict data isolation. Each clinic's data — including patient records, staff information, and financial data — is segregated and accessible only to authorized users within that clinic. We do not share clinic data with other clinics or third parties.

We may disclose information when required by law, court order, or to protect the rights, property, or safety of CEMDRA, our users, or others. We never sell your data to third parties.

We implement industry-standard security measures to protect your data, including encrypted authentication, role-based access control, and row-level security policies that enforce data isolation at the database level. Access to patient financial records is restricted and managed through authenticated backend processes.

Each user role (platform admin, clinic admin, dentist, patient) has defined access scopes. Sensitive operations such as credit deductions and payment processing are handled exclusively through server-side functions to ensure data integrity.

We retain your information for as long as your account is active or as needed to provide our services. Clinic and patient records are retained in accordance with applicable healthcare data retention regulations. Upon request, clinic administrators may request data deletion, subject to legal and regulatory obligations.

You have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your data, where legally permissible;
• Withdraw consent for data processing where applicable.

Clinic administrators can manage patient and staff data directly through the platform. For other requests, please contact us through the channels listed below.

CEMDRA uses essential cookies and authentication tokens to maintain your session and ensure secure access to the platform. We do not use tracking cookies for advertising purposes.

CEMDRA is designed for healthcare professionals and clinic operations. We do not knowingly collect personal information from children under 13. Patient records for minors are managed by authorized clinic staff and guardians.

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or your data, or if you wish to exercise your data rights, please contact us through our Facebook Messenger: