Denflare Privacy Policy

1. Who we are and what this policy covers

Denflare (“Denflare,” “we,” “us”) is based in Calgary, Alberta. Denflare helps patients find and book same-day and emergency dental appointments at partner dental clinics.

This policy explains how we collect, use, disclose, and protect personal information when you use denflare.com, book an appointment, contact us, or work with us as a partner clinic.

We handle personal information in accordance with Alberta's Personal Information Protection Act (PIPA) and, where it applies, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). By using Denflare, you agree to the practices described here.

Denflare is a booking service. We do not provide dental care, diagnosis, or treatment. Your dental clinic is responsible for the care you receive and for your clinical records.

2. Information we collect

From patients who book an appointment:

• Full name, email address, and phone number
• Whether you are a new patient at the clinic
• Your reason for visit, which may include information about your dental symptoms or condition
• Your dental insurance provider, if you choose to share it
• Appointment details, including the clinic, date, and time you booked

From dental clinics and their staff:

• Contact names, business email addresses, and phone numbers
• Clinic name, address, and appointment availability

Collected automatically when you visit denflare.com:

• Device and browser information, IP address, and general location (such as city)
• Pages viewed, links clicked, and how you arrived at our site, including the ad or search that brought you there
• Information collected through cookies and similar technologies (see section 7)

We only collect the personal information we reasonably need for the purposes described in this policy. Please do not include more health detail than needed in the “reason for visit” field; your clinic will discuss your condition with you directly.

3. How we use your information

We use personal information to:

• Book your appointment and send your booking details to the clinic you chose
• Send you appointment confirmations, reminders, and updates
• Contact you about your booking, including if a clinic needs to reschedule or we help you find another opening
• Respond to your questions and provide customer support
• Manage our relationships with partner clinics, including onboarding, scheduling, and billing
• Operate, secure, and improve denflare.com, and understand how visitors use it
• Measure the performance of our advertising
• Meet our legal and regulatory obligations

We do not sell your personal information. We will not use it for a new purpose without first telling you and, where required, getting your consent.

4. Consent

When you book an appointment, you consent to us collecting your information and sharing it with the clinic you selected so they can see you. Your reason for visit and insurance details are sensitive, and we ask for your express consent before you submit your booking.

You can withdraw your consent at any time by contacting us (see section 10), subject to legal or contractual limits and reasonable notice. If you withdraw consent, we may not be able to complete or manage your booking. Withdrawing consent does not affect information already shared with a clinic for an appointment you booked; you can contact that clinic directly about its records.

We may collect, use, or disclose information without consent only where PIPA permits or requires it, such as to comply with a law or court order or in an emergency that threatens someone's life, health, or safety.

5. How we share information

We share personal information only as described below:

• The dental clinic you book with. We send the clinic your name, contact details, new-patient status, reason for visit, insurance, and appointment time so they can prepare for and provide your care. Once received, the clinic handles your information under its own privacy obligations.
• Service providers. We use trusted companies to help run Denflare, such as website hosting, databases, email delivery, analytics, and advertising platforms. They may access personal information only to perform services for us, and we require them by contract to protect it.
• Legal and safety reasons. We may disclose information if required by law, court order, or a regulator, or where needed to protect someone's safety or our legal rights.
• Business transfers. If Denflare is involved in a merger, sale, or similar transaction, personal information may be transferred to the other party, who must use it for the purposes described in this policy.

We do not sell, rent, or trade personal information.

6. Service providers outside Canada

Some of our service providers store or process personal information outside Canada, including in the United States. This includes providers for website hosting, email delivery, analytics, and advertising.

When information is stored or processed outside Canada, it is subject to the laws of that country and may be accessed by its courts, law enforcement, or national security authorities.

You can contact our Privacy Officer (section 10) to get written information about our policies and practices for service providers outside Canada, or to ask questions about how they collect, use, disclose, or store your personal information.

7. Cookies, analytics, and advertising

We use cookies and similar technologies to keep denflare.com working, remember your preferences, understand how visitors use the site, and measure how well our ads perform.

We may use tools such as Google Analytics, Google Ads, and Meta (Facebook and Instagram) advertising tools. These tools may collect information about your visit, such as pages viewed and whether you completed a booking, and may use it to show you relevant ads on other sites.

We do not share your name, contact details, reason for visit, or insurance information with advertising platforms.

You can block or delete cookies in your browser settings, though some parts of the site may not work properly. You can also manage ad personalization through your Google Ad Settings and your Facebook or Instagram ad preferences.

8. Emails, texts, and calls

We send transactional messages, such as booking confirmations and appointment updates, because they are needed to provide the service you requested.

We send promotional emails or texts only where we have your consent or are otherwise permitted under Canada's Anti-Spam Legislation (CASL). Every promotional message includes our contact information and a way to unsubscribe. We will process unsubscribe requests within 10 business days.

For partner and prospective clinics, we may contact you at your published business email or phone number about services relevant to your practice, as CASL permits. You can opt out at any time by replying or using the unsubscribe link.

9. How long we keep information and how we protect it

Retention. We keep personal information only as long as reasonably needed for the purposes in this policy, or as required for legal or business reasons. Booking records are kept for 5 years after your appointment, then securely deleted or anonymized. If we use your information to make a decision that directly affects you, we keep it for at least one year after that decision so you have a chance to request access to it.

Safeguards. We use reasonable security measures to protect personal information from unauthorized access, use, disclosure, copying, changes, or destruction. These include encrypted connections (HTTPS), access controls that limit information to people who need it, and requiring our service providers to protect it. No online service is completely secure, so we cannot guarantee absolute security.

Privacy breaches. If a breach creates a real risk of significant harm to you, we will notify the Office of the Information and Privacy Commissioner of Alberta without unreasonable delay and, as the Commissioner requires, notify you directly.

10. Your rights and how to contact us

Access and correction. You can ask to see the personal information we hold about you, how we have used it, and who we have shared it with. You can also ask us to correct information that is inaccurate or incomplete. Send your request in writing to our Privacy Officer. We will respond within 45 days, as PIPA requires, or tell you if we need more time. We may ask you to verify your identity, and in limited cases permitted by law we may decline or charge a reasonable fee, which we will tell you about in advance.

Minors. Denflare is intended for adults. A parent or legal guardian should book appointments for anyone under 18.

Changes to this policy. We may update this policy from time to time. We will post the updated version on this page with a new effective date and, for significant changes, notify you by email or on our website.

Complaints. If you have a concern, please contact us at info@denflare.com.

Effective date: September 27, 2026