Privacy Policy

Last updated: April 2026

Who We Are

Best Dentist Penang is a dental clinic comparison directory helping visitors find and compare dental care options across Penang, Malaysia. A large share of our visitors are Singaporean residents researching dental treatment across the border. This policy covers how we handle personal data collected through the website, in line with the Malaysian Personal Data Protection Act 2010 (PDPA) and its subsequent amendments.

Data We Collect

We do not require registration or login. Browsing the directory is fully anonymous unless you choose to contact us. We collect two categories of information. Analytics: Google Analytics 4 gathers anonymised usage statistics (pages visited, session length, approximate country of origin). GA4 operates under Consent Mode v2, so tracking only activates after you accept cookies. Contact submissions: if you use our contact form, we collect the name, email address, and message you provide. We do not collect payment details, health records, or any category of sensitive personal data defined under the PDPA.

How Contact Form Data Is Processed

A Singaporean patient comparing Penang clinic prices who submits an enquiry through our form triggers this process: the form data is sent from your browser to our hosting provider (Vercel), then forwarded to Brevo's transactional email service, which delivers the message to our inbox. We read and reply to your enquiry, then delete the submission within 90 days. Clicking a WhatsApp link on a clinic listing opens a direct conversation between you and that clinic. No WhatsApp message content passes through our servers or systems.

Cookies

Our site uses GA4 analytics cookies (activated only after consent) and a localStorage entry that saves your preferred display currency (SGD, MYR, or AUD). We do not deploy advertising trackers, remarketing pixels, or fingerprinting scripts. Disabling cookies in your browser will not break the site, but your currency choice will reset each visit.

Third-Party Data Processors

Vercel Inc. hosts the website. HTTP requests may include your IP address, retained in Vercel server logs for up to 30 days. Google LLC processes anonymised analytics data under its standard data processing addendum. Brevo (Sendinblue) processes contact form data solely for email delivery. Dental clinic information on the directory comes from publicly available sources: clinic websites, published price lists, and Google Maps listings. We do not share your personal data with any dental clinic listed on this site.

Your Rights Under the Malaysian PDPA

Under the PDPA 2010, you have the right to access personal data we hold about you, to request corrections to inaccurate data, and to withdraw consent for data processing at any time. Withdrawal of consent for analytics means you can decline or revoke cookie consent through your browser. For contact form data, you may request deletion by reaching out through the contact page. We will process your request within 21 days, as prescribed by the Act. Singaporean visitors also retain rights under Singapore's Personal Data Protection Act 2012 (PDPA), including the right to access and correct personal data. Concerns about data handling may be directed to Malaysia's Department of Personal Data Protection or Singapore's data protection authority (PDPC).

International Data Transfers

Our infrastructure spans multiple jurisdictions. Website hosting (Vercel) operates from global edge nodes. Analytics data is processed by Google in the United States. Email delivery (Brevo) routes through European servers. The Malaysian PDPA permits cross-border transfers provided that the receiving jurisdiction maintains adequate data protection standards. We have assessed that the minimal personal data we transfer (limited to voluntarily submitted contact details and anonymised analytics) poses low risk to data subjects.

How Long We Keep Data

Analytics: GA4 data is retained for 14 months before automatic deletion. Contact forms: submissions are deleted from our inbox within 90 days of resolving your enquiry. Server logs: Vercel purges access logs containing IP addresses after 30 days. Browser storage: your currency preference in localStorage persists until you clear site data.

Policy Changes

We revise this policy as needed and post the updated version on this page with a new date. We do not operate a mailing list, so we cannot send direct notifications of changes. Material changes that affect how personal data is processed will be highlighted on this page for 60 days following the update.

Questions

If you have questions about this policy or wish to exercise your data rights, please use the contact page. We aim to respond as soon as possible.