Privacy Policy
DentaShop · Last updated 5 October 2026
DentaShop is a marketplace that connects dental professionals in Lebanon and Syria with verified dental supply shops. This policy explains what personal data the DentaShop app collects, why, who it is shared with, and how you can remove it.
It applies equally to users in Lebanon and in Syria. We handle your data the same way in both countries, and the rights described below are available to you wherever you are. Nothing here removes any protection given to you by the mandatory data-protection or consumer law of the country you live in.
The data controller is DentaShop. For any privacy question or request, contact [email protected].
What we collect
| Data | Why we need it |
|---|---|
| First and last name | Identifying you to shops on your orders and reviews |
| Phone number | This is your login identifier, and how the courier reaches you about an order |
| Email address (optional) | Account verification and password reset |
| Password | Stored only as a one-way hash — we never hold your actual password |
| Country (Lebanon or Syria) | Determines which shops and prices you can see and buy from |
| Address and city | Delivering your orders |
| Professional details — registration number, clinic name, specialty | Confirming you are a dental professional. Optional |
| Profile picture, and shop logos and product photos for shop accounts | Displaying your account and listings |
| Orders — items, quantities, prices, delivery name, phone, address, city, postcode and notes | Fulfilling and delivering your order |
| Delivery location (optional) — the approximate coordinates of your device at the moment you choose to attach them to an order | Helping the delivery driver find you, because street addresses in Lebanon and Syria are often hard to follow. You are asked each time and can decline or remove it; orders work exactly the same without it. Read only while the app is open and you tap the button — never in the background |
| Delivery day and receiving hours | The day you ask for (or "as soon as possible") and the hours your clinic can receive the order, so the courier can plan the delivery. The courier's chosen day, and its reason if it differs, are shown back to you |
| Wishlist, ratings and reviews | Features you choose to use. Reviews are public and show your name |
| Questions you ask about a product, and the shop's answers | Passing your question to the shop and its answer back to you. Answered questions are public on the product page without your name — you are shown only as "a dentist". The shop is not told who asked. We keep which account asked so the answer reaches you |
| Brand protection proof (shop accounts) — a photo of a trademark registration or an exclusive agency letter | Deciding a shop's claim to be the only seller of a brand. Stored outside the public website and seen only by DentaShop staff; never shown to other users |
| Listing reports — which product you reported and what you wrote | Checking whether a product sells a protected brand under another name. The shop is not told who reported it |
| Shop location pin and opening hours (shop accounts, optional) | The pin is the coordinates of the owner's device at the moment they choose to set it, from inside the shop. It is shown to drivers so they can find the shop and see how far it is, not to buyers. Opening hours are shown to buyers. Both can be changed or removed at any time in Profile |
| Driver position (driver accounts, optional) | When a driver opens the list of available orders and allows location, their current position is sent with that request so orders can be sorted by distance. It is used for that one response and not stored; there is no background tracking and no location history |
| Order money fields — delivery fee, platform fee, shop payout, and when the shop was paid and confirmed it | Working out what the courier collects from the buyer and pays the shop after delivery, reminding a courier who has not paid, and DentaShop's weekly statement to each delivery company |
| Device notification token | Sending order-status notifications to your phone |
| IP address | Rate limiting sign-ups, logins and password resets to prevent abuse. Also recorded, with your app or browser identifier, each time you accept our terms, as proof of which version you agreed to and when. Not used to track you |
We do not collect contacts, advertising identifiers or health records, and we do not use analytics or advertising trackers. We do not track anyone's location in the background or build a location history. A buyer's position is read only when they tap the button on an order; a shop's only when the owner sets the pin; a driver's only when they open the available-orders list with location allowed, and that reading is not kept.
Payments
DentaShop is cash on delivery only. We never collect or store card or bank details, and no payment processor receives your data through the app. Shops pay DentaShop a platform fee on delivered orders; it is deducted from what the courier pays the shop after delivery and remitted to us by the delivery company. Buyers are never charged it and no buyer payment data is involved.
Who your data is shared with
- The shop you order from receives only your name and city, so it can prepare your order. It does not receive your phone number, street address or location pin — those go only to the delivery company and driver.
- The delivery company and the driver handling your order receive the delivery name, phone number and address needed to reach you, the day and receiving hours you asked for — and the location pin, if you attached one to that order. The driver also sees the shop's name, address and pin. A delivery company may receive these details in its own computer system, connected to DentaShop through our API, and keep them there as its delivery record. It may use them only to deliver your order, and it is responsible for how it holds them.
- Buyers and shops see the full name and phone number of the driver who takes their order, so the hand-over can be arranged.
- Buyers see a shop's name, city, description, products and opening hours. A shop's street address, phone number and location pin go only to the delivery company and driver collecting its orders.
- Other users see only your name and the text of any review you post. A question you ask about a product is shown without your name.
- Service providers that operate the app on our behalf: Google Firebase (push notifications), Brevo (verification and password-reset emails), and DigitalOcean and Cloudflare (hosting and security). They process data only to provide these services.
We do not sell your personal data, and we do not share it for advertising.
Where your data is stored
DentaShop's servers and database are hosted in Frankfurt, Germany, on infrastructure provided by DigitalOcean, with Cloudflare providing security and delivery. This means your data is stored outside Lebanon and Syria, in a country with strong data-protection standards. Our email and notification providers, Brevo and Google Firebase, may also process data outside your country in order to deliver messages to you. By using DentaShop you agree to your data being handled this way.
How long we keep it
Your account data is kept for as long as your account exists. When you delete your account, your profile, wishlist, reviews, the questions you asked and notification tokens are erased, and every identifying field on your account record is overwritten.
A shop's brand protection proof is kept while its claim or protection exists and afterwards as evidence in case the protection is disputed; email us to have it removed once that no longer applies.
Orders are the exception. A completed order is also the shop's and the delivery company's own sales and delivery record, so the order itself is retained after your account is deleted. Your account record is anonymised and any location pin on the order is erased. The delivery name, phone number and address written on that individual order are kept with the order as the record of what was sold and where it was delivered. If you want those removed as well, email us and we will deal with it.
A delivery company that receives your order through its own system keeps its copy under its own responsibility. If you want it removed, email us and we will pass your request on to that company.
Platform-fee records and weekly statements to delivery companies are kept for as long as accounting rules require.
The record of each time you accepted our terms — the version, the time, the IP address and the app or browser identifier — is kept after your account is deleted, as evidence of the agreement in case of a dispute.
Your rights
- See and correct your data — Profile → Personal Information in the app.
- Delete your account and data — Profile → Delete my account. See how to delete your account.
- Get a copy of your data, or object to how we use it — email us and we will respond within 30 days.
- Turn off notifications — Profile → Preferences, or your device settings.
Security
Passwords are hashed and never stored in readable form. All traffic between the app and our servers uses HTTPS. Sessions use bearer tokens that are invalidated on sign-out and on account deletion, and repeated failed logins temporarily lock an account. No system is perfectly secure, but we take reasonable measures to protect your data.
Children
DentaShop is for dental professionals and suppliers, and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top of this page, and notify you in the app if the change is significant.
Contact
Questions or requests: [email protected]