This Privacy Policy explains how In Demand Dental Pty Ltd (“In Demand Dental”, “we”, “us” or “our”) collects, uses, shares and protects personal information. We are a company registered in Australia at Level 1, 63-73 Ann Street, Surry Hills, NSW 2010, Australia, and we provide Google Ads management and advertising audit services to dental practices, primarily in the United States and Canada.
This policy applies when you visit indemanddental.com, contact us, purchase an audit, or engage us to manage advertising for your practice. Because we are an Australian company serving customers in North America, more than one privacy regime applies to us at once. This policy sets out your rights under each: United States, Australia and Canada.
In short: we collect business contact details and website usage data. We use them to respond to enquiries, deliver our services and improve our advertising. We do not sell your personal information for money, and we do not collect patient records.
1. What information do we collect?
Information you give us
When you complete a contact form, purchase an audit, or become a client, we collect the information you provide. This typically includes your name, business email address, business phone number, practice name and address, your website, your treatment focus, your approximate advertising budget, and anything else you choose to tell us.
If you become a client, we also collect the operational details needed to build and run your campaigns: office hours and time zone, service areas, competitor names, current offers, and access to the relevant Google Ads, Google Analytics, Google Tag Manager and Google Business Profile accounts.
Information collected automatically
When you visit our website we automatically collect certain technical information, including your IP address, browser type and version, device type, operating system, referring URL, the pages you view, and the dates and times of your visits. Some of this is collected through cookies and similar technologies — see section 6.
Payment information
Audit purchases and client invoices are processed by third-party payment providers. We do not collect or store your full card number. We receive only a transaction record and confirmation of payment.
2. How do we use your information?
We use personal information to:
- Respond to your enquiry and provide the information you asked for.
- Deliver the services you have purchased, including audits and ongoing campaign management.
- Communicate with you about your account, your campaigns and your results.
- Send you marketing communications about our services, where permitted — see section 15.
- Process payments and maintain financial records.
- Understand how our website is used, and improve it.
- Measure and improve our own advertising.
- Detect and prevent fraud, abuse and security incidents.
- Comply with our legal obligations, and establish, exercise or defend legal claims.
We do not use your personal information to make decisions that produce legal or similarly significant effects about you through automated means alone.
3. Our legal bases for processing
Where a legal basis is required, we rely on the following:
- Performance of a contract — to deliver services you have purchased.
- Legitimate interests — to operate and improve our business, market our services to other businesses, and keep our systems secure. We balance these against your rights.
- Consent — for non-essential cookies and for certain marketing communications. You can withdraw consent at any time.
- Legal obligation — to meet tax, accounting and regulatory requirements.
4. When and with whom do we share information?
We share personal information only in the circumstances below. We do not sell your personal information for money.
- Our advertising delivery partner. Campaign build and management is delivered through a white-label partner. Client and campaign details are shared with them for the purpose of running your advertising.
- Advertising and analytics providers — principally Google. See section 5.
- Service providers — hosting, email delivery, form processing, payment processing and customer communication tools, acting on our instructions.
- Professional advisers — accountants and lawyers, where necessary.
- Legal and safety — where we are required by law, or to protect our rights, property or safety, or that of others.
- Business transfers — in connection with a merger, acquisition or sale of assets, in which case we will notify you.
5. Advertising, analytics and Google
We use Google Analytics to understand how visitors use our website, and Google Ads to advertise our own services. These tools set cookies and may collect identifiers, device information and browsing activity on our site.
Google processes this data as described in its own privacy policy at policies.google.com/privacy. You can opt out of Google Analytics using the browser add-on at tools.google.com/dlpage/gaoptout, and you can manage Google's advertising personalisation at adssettings.google.com.
Some US state privacy laws define “sharing” or “targeted advertising” broadly enough that our use of advertising cookies may fall within it, even though no money changes hands. If you are a US resident, you can opt out — see section 12.
6. Cookies and tracking technologies
We use a small number of cookies and similar technologies:
- Strictly necessary — required for the site to function.
- Analytics — to understand aggregate usage patterns.
- Advertising — to measure our own campaigns and show relevant ads.
Most browsers let you refuse or delete cookies through their settings. Blocking cookies may affect how parts of the site work. We also honour the Global Privacy Control signal — see section 16.
7. Client and patient information
This section matters if you are a dental practice engaging us.
We advertise on behalf of licensed healthcare providers. Advertising campaigns generate enquiries from members of the public, and those enquiries can contain health-related information.
We are not a covered entity under HIPAA, and we do not seek to become a business associate. Our practice is to keep patient-level information out of our systems:
- Leads generated by your campaigns are delivered to the email address and phone number you nominate, under your control.
- We work from aggregate campaign metrics — impressions, clicks, cost, conversion counts and cost per lead — not from patient records.
- We do not request, store or process patient names, contact details, treatment histories or clinical information.
If your circumstances require a Business Associate Agreement or an equivalent arrangement, raise it with us before onboarding so we can put the right terms in place. You remain responsible for your own obligations under HIPAA, your state or provincial dental board's advertising rules, and any applicable health privacy law.
8. International transfers
We are based in Australia. If you are in the United States or Canada, the personal information you provide will be transferred to, stored in and processed in Australia, and may also be processed by our service providers in other countries, including the United States.
Privacy laws in these countries may differ from those in your own. Where we transfer personal information internationally, we take reasonable steps to ensure it is treated securely and in accordance with this policy.
9. How long do we keep your information?
We keep personal information only as long as necessary for the purposes set out in this policy:
- Enquiries that do not become clients — up to 24 months from last contact.
- Client records — for the duration of the engagement and for 7 years afterwards, to meet Australian tax and record-keeping obligations.
- Suppression and unsubscribe records — indefinitely, because we need them to honour your opt-out.
- Website analytics — as configured in the relevant tool, typically 14 months.
10. How do we keep your information safe?
We use reasonable organisational and technical measures to protect personal information, including encrypted connections to our website, access controls on the systems that hold client data, and limiting access to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the relevant regulator as required by law, including under the Australian Notifiable Data Breaches scheme and applicable US state breach notification laws.
11. Information from minors
Our services are sold to dental practices, and our website is directed at business owners and practice managers. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at hello@indemanddental.com and we will delete it.
12. Your privacy rights — United States
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, or any other US state with a comprehensive privacy law in force, you may have some or all of the rights described below. Which rights apply depends on your state.
Categories of personal information we collect
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, business email address, business phone number, practice name and address, IP address. | Yes |
| B. Commercial information | Services enquired about or purchased, audit purchases, billing records. | Yes |
| C. Internet or network activity | Pages viewed, referring URLs, interaction with our site and emails. | Yes |
| D. Geolocation data | Approximate location inferred from IP address (city or region level only). | Yes |
| E. Professional or employment information | Your role at the practice, practice type and treatment focus. | Yes |
| F. Inferences | Whether your practice is likely a fit for our services, based on the above. | Yes |
| G. Sensitive personal information | We do not collect sensitive personal information as defined by US state privacy laws. | No |
| H. Biometric information | Not collected. | No |
| I. Audio, electronic or visual information | Call notes, where you have contacted us by phone. We do not record calls. | Yes |
| J. Education information | Not collected. | No |
| K. Personal information from a health provider (health data) | See section 8 — we work from aggregate campaign metrics, not patient records. | No |
Your rights
- Right to know and access — what personal information we have collected, the sources, the purposes, and who we have disclosed it to.
- Right to delete — ask us to delete personal information we hold about you, subject to legal exceptions.
- Right to correct — ask us to correct inaccurate personal information.
- Right to data portability — receive a copy in a portable format.
- Right to opt out of targeted advertising, sale or sharing — we do not sell personal information for money, but you may opt out of our use of advertising cookies at any time.
- Right to limit use of sensitive personal information — we do not collect sensitive personal information, so there is nothing to limit.
- Right to non-discrimination — we will not deny you services, charge you a different price, or provide a different quality of service because you exercised a privacy right.
- Right to appeal — if we decline your request and you are in a state that provides an appeal right, you may appeal by replying to our decision. We will respond in writing.
How to exercise these rights
Email hello@indemanddental.com with the subject line “Privacy request”. Tell us which right you are exercising and the state you reside in. We will verify your identity, usually by confirming information we already hold, and respond within 45 days. If we need more time we will tell you why, and we may extend by a further 45 days where the law allows.
An authorised agent may submit a request on your behalf with written proof of authorisation. We may still ask you to verify your own identity directly.
13. Your privacy rights — Australia
As an Australian company, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You have the right to access the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete or misleading.
To make a request, or to complain about how we have handled your personal information, contact us at hello@indemanddental.com. We will respond within a reasonable period, usually 30 days.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
14. Your privacy rights — Canada
If you are in Canada, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. You may request access to the personal information we hold about you and ask us to correct it.
In some circumstances we may be unable to provide access — for example where doing so would reveal personal information about another person, or where the information is protected by legal privilege. If we refuse a request we will explain why.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
15. Marketing communications and opt-out
We send business-to-business marketing emails to dental practices. Every marketing email we send identifies us, includes our physical postal address, and contains a working way to opt out.
To stop receiving marketing from us, reply to any of our emails with “unsubscribe”, or email hello@indemanddental.com. We will action it promptly and in any case within the time required by law. We keep a suppression record so the opt-out is not accidentally reversed.
If you have asked us not to telephone you, we record that as a standing do-not-call request and treat it as permanent.
Opting out of marketing does not stop service-related communications about an engagement you have with us, such as billing or campaign reporting.
16. Do Not Track and Global Privacy Control
There is no finalised industry standard for responding to browser Do Not Track signals, and we do not currently respond to them. We do recognise the Global Privacy Control (GPC) signal. If your browser or extension transmits GPC, we treat it as a valid opt-out of targeted advertising for that browser.
17. Updates to this notice
We may update this policy from time to time. The revised version takes effect from the date shown at the top of this page. Where changes are material, we will take reasonable steps to notify you — for example by a notice on this website or by email. We encourage you to review this page periodically.
18. How to contact us
Questions or concerns about this policy, or about how we handle personal information:
- Email: hello@indemanddental.com
- Post: In Demand Dental Pty Ltd, Level 1, 63-73 Ann Street, Surry Hills, NSW 2010, Australia
19. Review, update or delete your information
You have the right to request access to the personal information we hold about you, to have it corrected, or to have it deleted. To make a request, email hello@indemanddental.com with the subject line “Privacy request”.
We will verify your identity before actioning the request, and will respond within the timeframe required by the law that applies to you — 45 days for US state privacy requests, 30 days in Australia. Some requests may be limited by law, for example where we are required to retain financial records. If we cannot fully action a request, we will tell you why.