Privacy

Last updated 30 October 2026

Who we are

dental.holiday is run by Daphne Software LLC, a limited liability company registered in the State of Wyoming, United States (“we”, “us”). For anything about your data, write to privacy@dental.holiday.

The site and its database run on servers of our hosting provider, GoDaddy, in a data centre in Europe.

Our role, and who is responsible for what

• We run the platform. We are the data controller for what is needed to run it: accounts, storing and showing what users post, security records and the visitor statistics described below.
• You decide what you share. The platform does not need your name or contact details, and does not ask for them. What you write in a request or message is your choice and your responsibility.
• Clinics are responsible for their own processing. Each clinic is an independent business and a data controller in its own right. When a clinic reads your request, and above all once you contact it outside dental.holiday (by phone, email, WhatsApp, in person), the clinic decides how it uses your data and must follow the data protection law that applies to it. Your medical records, treatment, payments and travel are matters between you and the clinic. We are not part of them and do not receive that data.
• We do not give medical advice, do not treat patients and do not take part in any agreement between a patient and a clinic.

What we store about patients

• A nickname we generate, a hashed password and a hashed recovery code. We cannot read your password or code.
• The requests you post: treatment, description, questions, budget range, travel window, country, your city if you choose to give it, the regions of Türkiye you want quotes from, and the moment you gave your consent.
• Your messages with clinics and the quotes clinics send you, with sent, delivered and read times.
• Reports you send us and clinics you block.

We do not ask for your name, email address or phone number, and we do not store your IP address with your account or your requests.

What we store about clinics

The clinic's name, city, address, licence or permit number, login email (confirmed by a link we send), a hashed password, the contact details and profile the clinic publishes (logo, photos, prices, packages), its quotes and messages, its email settings, and the name and email of the person who applied. Clinic profiles and contact details are business information and are shown to patients.

Why we use it

• To provide the service you asked for: your account, posting your requests, showing them to the clinics in the regions you chose, and delivering messages and quotes.
• Health information only with your consent. What you write about your teeth is shown to clinics only because you agreed to it when you posted the request. You can withdraw that consent at any time by removing the request or deleting your account.
• To keep the site safe: log-in limits, stopping attacks and spam, the request limit, and handling reports of abuse.
• When the law requires it, for example to answer a court order.
• For clinics: to run the clinic's account and profile, and to check that a clinic is real before patients see it.

We do not sell data, do not show advertising and do not use your data to build profiles or make automated decisions about you.

Who can see what

• Approved clinics in the regions you chose see your request, your country (and city, if given) and your nickname. A clinic sees only its own conversation with you.
• Patients see clinic profiles and the quotes and messages sent to them.
• Our staff have access only as far as their work needs it; see “Messages and moderation” below.
• Service providers who process data on our behalf: GoDaddy (hosting, database, email for clinic accounts). They may use it only to provide their service to us.
• Authorities, only when the law that applies to us obliges us, for example on a valid court order. Daphne Software LLC is a Wyoming company. We check every request and share only what the order requires.

Messages and moderation

Messages travel encrypted between your browser and our servers (HTTPS) and are stored on our servers. They are not end-to-end encrypted: we have to be able to remove abusive or illegal content, and to answer if a court or authority asks.

• Every request and message is checked automatically when it is sent: phone numbers, emails and links cannot be posted, which keeps patients anonymous, and texts with insults or swear words are refused. The check happens on our server; nothing is sent to another company.
• Patients and clinics can report a message or a request to us, and block each other. A report is seen only by our team; the other side is not told who reported.
• We do not read conversations as a matter of routine. Authorised staff open a request or conversation only to handle a report or a warning from our automatic checks, to fix a technical problem, or when the law requires it. Each time staff open one, it is recorded in our internal log.
• We may remove content and suspend accounts that break the terms.

Where your data is

Data is stored on servers in Europe. Daphne Software LLC is based in the United States, so our staff may access the data from outside the EU and outside Türkiye. Access is always over encrypted connections and limited to authorised staff. Clinics are in Türkiye: when a clinic reads your request, it receives that information there.

How long we keep it

Data	Kept
Open requests	Close by themselves after 30 days
Your requests and messages	Until you delete your account
Request-limit fingerprints (see below)	30 days
Reports and blocks	As long as the conversation they belong to; a block until it is lifted
Failed log-ins	1 day
Security events	180 days
Visitor statistics	Without a time limit. They hold no IP address, and the daily visitor code is replaced by a random one once the day is over, so old statistics can't be linked to anyone.
Clinic accounts	While the account exists, then as long as the law requires

Removing a request, deleting your account

Removing a request takes it off your list and stops new replies. The request and its conversations stay stored, because the quotes in them are the clinics' work; they are not linked to anything that identifies you.

Deleting your account (from your dashboard) erases everything you wrote: your requests' descriptions and questions and all your messages, plus your nickname and password. Clinics keep only the quotes they sent, without your nickname. Anything a clinic copied or received outside dental.holiday is the clinic's responsibility.

Security records and the request limit

To stop attacks, failed log-ins and similar security events are logged with a scrambled one-way code of the IP address, not the address itself and not linked to your requests.

Clinics write every quote by hand, so each person can have up to 3 requests at the same time, each for a different region. To check this without knowing who you are, when you post a request we keep three scrambled fingerprints for 30 days: one of your IP address, one of a random token in a cookie on your browser (dh_t) and one of the request text, each with the regions you chose.

Cookies

No advertising cookies, no tracking pixels, no third-party scripts or fonts. We use a session cookie that keeps you logged in, and the dh_t cookie described above (one year). Visitor statistics are counted without cookies, with a code that changes every day, so a visitor can't be followed from one day to the next.

Your rights

You can ask to see your data, correct it, delete it, receive it in a portable form, restrict or object to its use, and withdraw your consent at any time (this does not affect what happened before). You can also ask whether we hold data about you and who we have shared it with.

Because accounts are anonymous, we can only act on a request we can link to your account. Log in and use your dashboard: you can remove requests and delete your whole account there yourself. For anything else, write to privacy@dental.holiday with your nickname, and we will ask you to confirm from inside your account. We answer within one month.

You can also complain to the data protection authority of the country where you live. We would be glad to hear from you first.

Age

dental.holiday is for people aged 18 or older.

Changes

If we change this notice, we update the date above. For important changes, we say so on the site before they apply.