Privacy Policy
DentaShop · Last updated 12 September 2026
DentaShop is a marketplace that connects dental professionals in Lebanon and Syria with verified dental supply shops. This policy explains what personal data the DentaShop app collects, why, who it is shared with, and how you can remove it.
It applies equally to users in Lebanon and in Syria. We handle your data the same way in both countries, and the rights described below are available to you wherever you are. Nothing here removes any protection given to you by the mandatory data-protection or consumer law of the country you live in.
The data controller is DentaShop. For any privacy question or request, contact privacy@dentashop.app.
What we collect
| Data | Why we need it |
|---|---|
| First and last name | Identifying you to shops on your orders and reviews |
| Phone number | This is your login identifier, and how a shop or courier reaches you about an order |
| Email address (optional) | Account verification and password reset |
| Password | Stored only as a one-way hash — we never hold your actual password |
| Country (Lebanon or Syria) | Determines which shops and prices you can see and buy from |
| Address and city | Delivering your orders |
| Professional details — registration number, clinic name, specialty | Confirming you are a dental professional. Optional |
| Profile picture, and shop logos and product photos for shop accounts | Displaying your account and listings |
| Orders — items, quantities, prices, delivery name, phone, address, city, postcode and notes | Fulfilling and delivering your order |
| Delivery location (optional) — the approximate coordinates of your device at the moment you choose to attach them to an order | Helping the delivery driver find you, because street addresses in Lebanon and Syria are often hard to follow. You are asked each time and can decline or remove it; orders work exactly the same without it. Read only while the app is open and you tap the button — never in the background |
| Wishlist, ratings and reviews | Features you choose to use. Reviews are public and show your name |
| Shop location pin and opening hours (shop accounts, optional) | The pin is the coordinates of the owner's device at the moment they choose to set it, from inside the shop. It is shown to drivers so they can find the shop and see how far it is, and to buyers. Opening hours are shown to buyers. Both can be changed or removed at any time in Profile |
| Driver position (driver accounts, optional) | When a driver opens the list of available orders and allows location, their current position is sent with that request so orders can be sorted by distance. It is used for that one response and not stored; there is no background tracking and no location history |
| Order money fields — delivery fee, platform fee, shop payout | Working out what the courier pays the shop and collects from the buyer, and DentaShop's weekly statement to each delivery company |
| Device notification token | Sending order-status notifications to your phone |
| IP address | Rate limiting sign-ups, logins and password resets to prevent abuse. Not used to track you |
We do not collect contacts, advertising identifiers or health records, and we do not use analytics or advertising trackers. We do not track anyone's location in the background or build a location history. A buyer's position is read only when they tap the button on an order; a shop's only when the owner sets the pin; a driver's only when they open the available-orders list with location allowed, and that reading is not kept.
Payments
DentaShop is cash on delivery only. We never collect or store card or bank details, and no payment processor receives your data through the app. Shops pay DentaShop a platform fee on delivered orders; it is deducted from what the courier hands the shop and remitted to us by the delivery company. Buyers are never charged it and no buyer payment data is involved.
Who your data is shared with
- The shop you order from receives your name, phone number and delivery address, so it can prepare and dispatch your order.
- The delivery company and the driver handling your order receive the delivery name, phone number and address needed to reach you — and the location pin, if you attached one to that order. The driver also sees the shop's name, address and pin.
- Buyers and shops see the full name and phone number of the driver who takes their order, so the hand-over can be arranged.
- Other users see only your name and the text of any review you post.
- Service providers that operate the app on our behalf: Google Firebase (push notifications), Brevo (verification and password-reset emails), and DigitalOcean and Cloudflare (hosting and security). They process data only to provide these services.
We do not sell your personal data, and we do not share it for advertising.
Where your data is stored
DentaShop's servers and database are hosted in Frankfurt, Germany, on infrastructure provided by DigitalOcean, with Cloudflare providing security and delivery. This means your data is stored outside Lebanon and Syria, in a country with strong data-protection standards. Our email and notification providers, Brevo and Google Firebase, may also process data outside your country in order to deliver messages to you. By using DentaShop you agree to your data being handled this way.
How long we keep it
Your account data is kept for as long as your account exists. When you delete your account, your profile, wishlist, reviews and notification tokens are erased, and every identifying field on your account record is overwritten.
Orders are the exception. A completed order is also the shop's and the delivery company's own sales and delivery record, so the order itself is retained after your account is deleted. Your account record is anonymised and any location pin on the order is erased. The delivery name, phone number and address written on that individual order are kept as part of the shop's record of what it sold and where it sent it. If you want those removed as well, email us and we will deal with it.
Platform-fee records and weekly statements to delivery companies are kept for as long as accounting rules require.
Your rights
- See and correct your data — Profile → Personal Information in the app.
- Delete your account and data — Profile → Delete my account. See how to delete your account.
- Get a copy of your data, or object to how we use it — email us and we will respond within 30 days.
- Turn off notifications — Profile → Preferences, or your device settings.
Security
Passwords are hashed and never stored in readable form. All traffic between the app and our servers uses HTTPS. Sessions use bearer tokens that are invalidated on sign-out and on account deletion, and repeated failed logins temporarily lock an account. No system is perfectly secure, but we take reasonable measures to protect your data.
Children
DentaShop is for dental professionals and suppliers, and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top of this page, and notify you in the app if the change is significant.
Contact
Questions or requests: privacy@dentashop.app