Privacy and data protection at Nilda

1. What information may be received?

Depending on the interaction, this may include your name, contact number, contact details, reason for visiting, message content, preferred appointment time, and ordinary technical information such as IP address and browser type.

2. Why do we receive this information?

It may be used to respond to you, coordinate appointments, follow up requests, improve the website experience, support system security, and meet related administrative requirements.

3. Health information and clinical records

Health information, treatment images, and clinical documents are sensitive data. Send them only through the route specified by reception or the clinical team for your case. Sending a document through a messaging service does not establish a diagnosis or confirm a treatment plan.

4. WhatsApp and third-party services

For English-speaking and international patients, WhatsApp is Nilda’s primary messaging channel. If you use WhatsApp, map services, or social networks, part of the data processing will also be subject to the policies of those services. Telephone contact with reception remains available as a secondary communication route.

5. Cookies, technical data, and referral attribution

The website may use cookies or similar technologies for technical operation, security, user preferences, and general measurement of site use. To understand how a visit reached the site, technical and marketing identifiers may be recorded, including campaign source and medium, campaign name, campaign content, campaign term, advertising click identifier, landing page, referring domain, and an anonymous attribution identifier. The current attribution layer is designed not to place names, phone numbers, reasons for visiting, form content, or health information inside the attribution cookie. Browser settings and deleting cookies can limit or remove these technical data earlier.

6. Sharing information

Personal information is not offered for sale to third parties. Access is limited to what is needed for operational, clinical, technical, or legal purposes and to authorized people or service providers.

7. Retention and protection

Information is retained only for as long as needed for the purpose for which it was received, follow-up, or administrative or legal requirements. In the referral-attribution layer, First Touch may remain in the browser for up to 90 days, Last Touch for up to 30 days, and the anonymous Attribution identifier for up to 90 days. Deleting cookies or browser settings may shorten these periods. These periods apply to attribution cookies and are not the same as the retention period for an appointment request or clinical record. Access controls and standard security measures are used to reduce unauthorized access, although no online system is risk-free.

8. User requests

For questions about recorded information, correction of contact details, or a request to review deletion of data that is not required to be retained, contact the clinic. Some information may not be immediately deletable because of record-keeping, financial, legal, or safety requirements.

9. Children’s information

A child’s information should be submitted by a parent or legal guardian. Avoid sending unnecessary information about a child through public forms.

10. Privacy contact

For questions about this policy, use the WhatsApp-first appointment and contact pathway. Last reviewed: September 2026.