Privacy Policy

1. Who we are

enFoyer is a patient-communications platform operated by Tooth-Tastic Dental Clinic LLC (“enFoyer”, “we”, “us”, or “our”), a company registered in Dubai, United Arab Emirates. enFoyer helps clinics manage conversations with their patients over WhatsApp and related channels. This Privacy Policy explains what personal data we collect, how we use it, and the rights available to you.

If you have any questions about this policy or how we handle your data, contact us at privacy@enfoyer.com.

2. Scope of this policy

This policy applies to the enFoyer staff dashboard (hosted at app.enfoyer.com), the WhatsApp messages and other communications processed through the platform on behalf of our clinic customers, and any related services we provide. Each clinic that uses enFoyer is responsible for its own relationship with its patients; where enFoyer processes patient data on a clinic’s behalf, we act as a service provider (data processor) to that clinic.

3. Information we collect

• Staff account data — name, email address, and a securely hashed password for clinic staff who sign in to the dashboard.
• Patient and contact data received via WhatsApp — phone number, name (as provided), message content, and any media or attachments a patient sends to a clinic.
• Clinic operational data — appointment, reminder, offer, and finance information that clinic staff enter or that is generated through use of the platform.
• Technical and usage data — log files, device and browser information, IP address, and session/cookie data used to keep you signed in and to keep the service secure.

4. How we use information

• To provide, operate, and maintain the enFoyer platform.
• To enable clinics to receive, read, and respond to patient inquiries.
• To support appointment booking, reminders, and follow-up messages.
• To generate analytics and insights for the clinic about its own communications.
• To secure the service, prevent abuse, and meet our legal obligations.

5. WhatsApp and Meta

enFoyer is built on the WhatsApp Business Platform provided by Meta Platforms, Inc. When a patient messages a clinic over WhatsApp, the message is transmitted and processed in accordance with Meta’s and WhatsApp’s terms and policies. Meta acts as a processor for the delivery of those messages. We do not control Meta’s own processing of data; please review Meta’s and WhatsApp’s privacy policies for details.

6. Legal basis and consent

We process personal data where it is necessary to provide the service requested, to perform a contract, to comply with a legal obligation, or on the basis of consent. Our processing is intended to be consistent with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Patients initiate contact with a clinic over WhatsApp, which forms the basis for the clinic responding through enFoyer.

7. How we share information

We do not sell personal data. We share data only with:

• Service providers — including hosting providers and Meta/WhatsApp, strictly to operate the platform.
• The relevant clinic — patient messages are made available to the clinic the patient chose to contact.
• Legal and regulatory authorities — where required by applicable law or to protect our rights and the safety of others.

8. Data retention

We retain personal data for as long as needed to provide the service to the relevant clinic, to comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymise it. See our Data Deletion instructions for how to request removal of your data.

9. Data security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and hashed credentials. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.

10. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, email privacy@enfoyer.com. If your data is processed by enFoyer on behalf of a clinic, we may direct your request to that clinic. See also our Data Deletion instructions.

11. International transfers

Your data may be processed in countries other than your own, including where our hosting and messaging providers operate. Where data is transferred internationally, we take steps intended to ensure it remains protected in line with this policy and applicable law.

12. Children’s data

enFoyer is intended for use by clinics and adult patients. Where a clinic communicates about a minor (for example, a parent booking a child’s appointment), the clinic is responsible for obtaining any consent required from the parent or guardian.

13. Cookies

The dashboard uses essential cookies and similar technologies to keep staff signed in and to keep the service secure. We do not use these cookies for third-party advertising.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the service where appropriate.

15. Contact us

Tooth-Tastic Dental Clinic LLC — Dubai, United Arab Emirates.
Email: privacy@enfoyer.com