Privacy Notice
1. Who we are
DoubleCheck AI Ltd (“we”, “the Controller”) is a company registered in the Dubai International Financial Centre (DIFC), United Arab Emirates, under License No. CL10769. We operate the DoubleCheckTPS platform, through which we provide orthodontic treatment planning consultancy services to referring clinicians. Our appointed Data Protection Officer is Dr. Berk Köni, who can be contacted at info@doublechecktps.com.
2. What personal data we process
- Referring clinicians: name, professional contact details, professional credentials and platform account information.
- Patient case data: clinical case request forms submitted to us by referring clinicians, which may include dental and orthodontic records, imaging and treatment-related information. This constitutes special category (health) data under the DIFC Data Protection Law, DIFC Law No. 5 of 2020 (the “DP Law”).
We do not collect personal data directly from patients. All patient case data is provided to us by the patient’s treating clinician.
3. Why we process it and on what legal basis
We process personal data for one purpose only: to assess and respond to orthodontic treatment planning consultation requests submitted by referring clinicians. We do not use personal data for marketing, profiling or any secondary purpose.
- Lawful basis under Article 10(f) of the DP Law: the processing is necessary for our legitimate interests, namely the provision of the consultancy services requested by referring clinicians.
- For special category (health) data, Article 11(i) of the DP Law: the processing is required for the provision of health care and is performed under the responsibility of a licensed health professional subject to an obligation of professional secrecy.
4. Where your data is stored and who can access it
All data is stored on a dedicated Virtual Private Server hosted by Hetzner in Germany (EU), acting as our hosting infrastructure processor under a data processing agreement. Germany is recognised as an adequate jurisdiction under the DIFC Data Protection Regulations. Access to the data is restricted to the Controller. We do not sell, disclose or transfer personal data to any other party.
5. How long we keep it
Patient case data is retained for the duration of our active professional relationship with the referring clinician, as ongoing access to historical case records forms part of the service we provide. Where that relationship ends, the associated case data is deleted within twelve (12) months, or earlier upon written request of the referring clinician, in accordance with our Data Retention and Deletion Policy.
6. Your rights
Under Articles 32 to 40 of the DP Law, data subjects have the right to access, rectify and erase their personal data, to restrict or object to its processing, to data portability, and to withdraw consent where processing is based on consent. Patients may exercise these rights either through their treating clinician or by contacting us directly. Data subjects also have the right to lodge a complaint with the DIFC Commissioner of Data Protection (commissioner@dp.difc.ae).
7. Automated decision-making
We do not carry out any automated decision-making or profiling. All case assessments are performed manually by a qualified orthodontist.
8. How to contact us
- By email: info@doublechecktps.com
- By phone: +971 58 653 9988
- Via the contact form on this website: www.doublechecktps.com/#inquiry
We may update this notice from time to time. The current version will always be available on this page.