Privacy and cookie policy
Website notice updated 10 November 2026.
Hayat Dental respects your privacy. This policy explains personal information collected through hayatdental.com.au, our online enquiry forms and links to external services. For information about clinical records or a particular service provider, contact the practice before providing sensitive details.
Who collects your information
Hayat Dental, Shop 1/180–182 Broadway, Chippendale NSW 2008. Contact our practice team about privacy, access, corrections or complaints at info@hayatdental.com.au or 02 9030 0247.
Enquiries and appointment requests
Our forms ask for your name, email, phone number, postcode, preferred appointment date and time, appointment type and a short message. They also include technical fields used to process the request, such as the page and referring address. Information you enter about symptoms or treatment may be health information. Please provide only what is needed for the enquiry; do not upload medical records or send detailed medical histories through the website. You can call us instead.
We use these details to respond, arrange appointments and provide or coordinate care you request. By confirming the collection consent on the form, you permit us to use the information you choose to provide, including any health information, for these purposes. This consent is separate from optional cookies and marketing. If you do not provide the required contact details or collection consent, we cannot process that online request; you can still phone the practice.
Enquiries are processed by our WordPress website using Forminator and the configured email delivery service. Information needed to deliver and support the service may be handled by authorised practice staff and our website, hosting, email, booking and communications providers. An online appointment request is subject to confirmation.
Website visits and optional tracking
Our hosting service processes information necessary to serve and protect the website, such as IP addresses, request times and browser information. Optional measurement is blocked until you choose Allow optional cookies. Choosing Reject optional cookies leaves it blocked. Neither choice prevents you from using our enquiry forms or booking links.
After an affirmative choice, Google Tag Manager loads Google Analytics and Google Ads measurement. They may receive the pages you view, referrer and campaign information, device/browser information, an IP address and interaction events such as a phone click, booking link click or successful enquiry. A dental page or interaction can indicate an interest in a health service. Form field contents, patient names, email addresses, phone numbers and message text are not deliberately included in our measurement events. Advertising personalisation and Google consent for advertising user data remain disabled.
If you allow optional cookies, Microsoft Clarity helps us understand how people use the site by recording browsing sessions on eligible pages, including clicks, scrolling and page changes. Microsoft may receive the page address, device and browser details, IP address and an identifier for that page view. A page address can indicate interest in a dental service. Enquiry forms are masked, and replay stops when you begin using a form or open chat. Replay is excluded from dedicated booking, contact and confirmation pages, patient case studies, pages aimed at children and URLs with query parameters. Clarity is used to improve the site. It runs without Clarity cookies, so recordings do not join visits across pages. Microsoft advertising storage is denied. See Microsoft’s privacy statement.
Cookies and browser storage
Cookies are small values saved by your browser. Some services also use local or session storage. The following describes the site’s configured storage; third-party cookie names can vary. Optional cookies are only enabled after acceptance.
| Storage / provider | Purpose | Duration |
|---|---|---|
hayat_consent — Hayat Dental |
Essential record of accepted/rejected choice, notice version, date and random receipt identifier. | Up to 180 days; then we ask again. |
_ga, _ga_* — Google Analytics |
Optional visit and interaction measurement. | Configured for up to 12 months. |
_gcl_* — Google Ads |
Optional advertising click and conversion measurement. | Usually up to 90 days; related local storage may also be used. |
| Google call measurement storage, including a conversion-label/phone key | Optional call attribution and number replacement. | Provider-controlled expiry stored with the value. |
hayat_verified_enquiry_v1 — session storage |
Short-lived technical marker used to avoid duplicate successful enquiry events; contains an opaque event ID and form ID, not entered details. | Consumed after redirect; measurement validation limit 30 minutes; cleared when the browser session ends. |
| Form, booking, security and requested external services | Process a request, prevent abuse or deliver a map, video or chat you choose to open. | Depends on the requested service or browser session; see provider notices below. |
Our own consent cookie uses Secure and SameSite=Lax. Google cookie settings request those flags too. We cannot change cookies set on another provider’s domain. Some third-party cookies legitimately use SameSite=None together with Secure for cross-site services.
Your choice and consent records
Use in the footer or here to change your choice. Accepting applies to optional analytics, advertising measurement and session replay together. You may reject all optional cookies. When you withdraw consent, we clear the known first-party tracking cookies and browser storage we control and reload the page to stop the loaded measurement scripts. Withdrawal applies to future collection and cannot recall information already sent to providers. To clear provider-owned cookies as well, use your browser’s cookie controls.
We retain anonymous choice receipts containing a random receipt ID, accepted/rejected choice, notice version and server time for up to 180 days, with daily cleanup. These receipts do not contain form contents, names, raw IP addresses or user agents. Delivery can fail if connectivity or browser controls block the request. A receipt records the visitor’s selection; it does not identify a patient or prove every aspect of privacy compliance. If your browser blocks storage, your choice may apply only to the current page and we ask again on the next visit.
External services you choose to use
- Principle Dental: Book online links take you to Principle’s booking portal. That portal processes booking and health details under its own privacy settings. The cookie choice on this website does not automatically control the separate portal; review its notice before entering information.
- Podium: Choosing Chat or text us loads Podium’s communications service. It receives connection/browser information and the contact details and messages you provide. See Podium’s privacy policy. Do not use chat for urgent care or detailed medical records.
- Google Maps and YouTube: Embedded maps/videos are withheld until you select their load button. Loading sends connection information, including your IP address, to Google and may allow provider cookies. Directions and video links also take you to external services. See Google’s privacy policy.
- Google measurement: When you accept optional cookies, Google’s processing is described in how Google uses information from sites that use its services. You can also use Google’s browser and advertising privacy controls.
- Reviews: Google reviews are withheld until you select Load Google reviews. Loading them connects to Trustindex and may request profile images from Google. See Trustindex’s privacy policy for processing when its external resources are requested.
Storage, security and overseas processing
Website enquiries may be stored in the website’s form records and delivered to the practice through its email system. Access is intended for authorised staff and service providers supporting your request. We use HTTPS and website security controls to reduce risk, but no website or email channel is risk-free. Please contact the practice to discuss a suitable channel for sensitive clinical information.
Some providers, including Google, Microsoft and Podium, operate internationally and may process information outside Australia. Their processing locations and retention depend on the service and account arrangements. Contact us for details relevant to your information; this website notice does not claim all providers process information only in Australia. Clinical records, enquiry/email records and backups may be subject to different operational and legal retention requirements. Ask the practice about the applicable retention or deletion options; deleting a cookie does not delete an enquiry or clinical record.
Access, correction and complaints
Contact the practice team using the details above to request access to or correction of your personal information, ask about deletion, or make a privacy complaint. We may need to verify your identity and understand the request before responding. Avoid sending identity documents or detailed health information in an initial email. Access or deletion may be limited where records must be retained or another lawful exception applies.
If we cannot resolve your concern, you can contact the Office of the Australian Information Commissioner on 1300 363 992. The OAIC provides information about making a privacy complaint.
Changes to this notice
We may update this policy when website services or practices change. The date above identifies this version. A material change to optional tracking requires a new choice before it is enabled.