Privacy Policy
Last updated: 28 August 2026
1. Introduction
This Privacy Policy explains how JL Dental Consultancy Limited, the developer and operator of the Katy Craft dental consultancy service, collects, uses, stores and protects personal information when you visit this website, request our services, or communicate with our team. We are committed to handling your information responsibly and transparently, in line with applicable data protection laws including the Personal Data (Privacy) Ordinance of Hong Kong and, where relevant, the General Data Protection Regulation of the European Union.
Please read this Privacy Policy carefully before using our website or services. By accessing this website or contacting us through any channel listed here, you acknowledge that you have reviewed and understood the practices described in this policy. If you do not agree with any part of this policy, we ask that you do not use our website or submit personal information through it.
We keep this policy under regular review to reflect changes in our services, technology and legal obligations. Any material changes will be communicated on this page, and the date at the top of the document will be updated accordingly.
2. The Developer Behind This Service
The services described on this website, including all consultation programs, advisory content and digital tools, are developed and operated by the developer JL Dental. The legal entity responsible for the operation of this website and for the processing of personal information collected through it is JL Dental Consultancy Limited, a company established and operating in Hong Kong.
Our registered and principal business address is Rm 1503 15/F M Place, 54 Wong Chuk Hang Road, Wong Chuk Hang, Hong Kong (HK). You can reach our team by email at info@katycraft.hair or by telephone at +14849935886 during our published business hours.
When we refer to we, us or our in this document, we are referring to JL Dental Consultancy Limited. When we refer to you or your, we are referring to the individual who visits this website or engages our services.
3. Information We Collect
We collect information that is reasonably necessary to provide our consultancy services, respond to enquiries, and improve the quality of this website. The information we collect falls into two broad categories: information that you provide to us directly, and information that is collected automatically when you browse this website.
We only collect information that is relevant, adequate and not excessive in relation to the purpose for which it is used. We make every effort to limit the collection of sensitive information such as health data, and we only request such data when it is essential for delivering a specific consultancy engagement under a separate agreement.
The categories described in the following sections give you a clear picture of what we hold, why we hold it, and how long we keep it. We do not collect information by deceptive or misleading means, and we never sell personal information to third parties.
4. Information You Provide Directly
When you interact with our website or contact our team, you may choose to provide us with personal information. The most common examples include your full name, your email address, your telephone number, the name of your practice or clinic, and the details you share in a message about your needs or enquiry.
This information is typically provided through the enquiry form on our contact page, by email to info@katycraft.hair, by telephone at +14849935886, or during the initial discovery discussion with one of our consultants. We use this information to understand your enquiry, provide a tailored response, and, where you wish to proceed, to prepare a proposal for consultancy services.
If we enter into a consultancy engagement, we may collect additional information such as your practice address, your role within the practice, and information about your clinic operations that is relevant to the project. This information is collected under the terms of our separate service agreement and is governed by both that agreement and this Privacy Policy.
5. Information Collected Automatically
When you browse this website, certain technical information may be collected automatically. This includes your Internet Protocol address, the type and version of the browser you are using, the type of device you are using, the operating system, the pages you visit, the time and date of your visit, the length of your visit, and the address of the website that referred you to this site.
We collect this information to understand how visitors use the website, to diagnose technical problems, to protect the security of our systems, and to improve the layout, content and performance of our pages. This information is generally aggregated so that it cannot be used to identify an individual visitor.
Automatic information is retained in server logs for a limited period and is then deleted or anonymised. We do not combine automatic data with your personal information to build a profile of you without your consent, except where necessary for security or legal compliance purposes.
7. How We Use Your Information
We use the personal information we collect for the following purposes: to respond to your enquiries and communicate with you; to provide, manage and improve our consultancy services; to prepare proposals, quotations and service agreements; to schedule consultations and training sessions; to maintain records of our professional relationship; to meet our legal, regulatory and professional obligations; and to protect the security and integrity of our website and systems.
We also use information to understand the needs of the dental community we serve, so that we can develop new programs and improve existing ones. Where we analyse information for these purposes, we take steps to aggregate or anonymise the data wherever possible.
We will not use your personal information for purposes that are incompatible with those described in this policy. If we intend to use your information for a new purpose that is not described here, we will notify you and obtain your consent where the law requires it.
8. Legal Basis for Processing
Where the General Data Protection Regulation or equivalent laws apply, we rely on a number of lawful bases for processing your personal information. The most relevant bases are the performance of a contract, legitimate interests, legal obligations, and consent.
When you request a quotation or engage our consultancy services, we process your information to take steps at your request prior to entering a contract and to perform that contract. When we improve our website and services, secure our systems, and respond to routine enquiries, we rely on our legitimate interests, balanced against your rights and expectations.
Where we ask for your consent to a particular type of processing, such as a specific marketing communication, we will explain what you are consenting to, and you may withdraw that consent at any time by contacting us. Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.
10. International Data Transfers
JL Dental Consultancy Limited operates from Hong Kong, and the information we collect is generally stored and processed in Hong Kong and, in some cases, in secure facilities located in other jurisdictions. Some of our service providers may process data outside of Hong Kong.
Where personal information is transferred to a jurisdiction outside Hong Kong, we take reasonable steps to ensure that the information is protected to a standard comparable to that required under Hong Kong law and, where applicable, the General Data Protection Regulation. This may include reliance on standard contractual clauses or other recognised transfer safeguards.
By using our website and services and providing us with personal information, you acknowledge that your information may be transferred to and processed in jurisdictions other than your own, and that those jurisdictions may have data protection laws that differ from those in your country of residence.
11. Data Retention
We retain personal information only for as long as it is necessary to fulfil the purposes described in this policy, to meet our legal and professional obligations, or to defend against potential claims. The retention period for each category of information depends on the nature of the information and the purpose for which it was collected.
Enquiry correspondence is typically retained for a period of twenty-four months after the last meaningful contact, unless the enquiry develops into an engagement. Records relating to completed consultancy engagements are retained for the period required by our professional indemnity arrangements and any applicable legal requirements.
Automatic data such as server logs is retained for a shorter period, generally up to twelve months, after which it is deleted or anonymised. When personal information is no longer required, we delete it securely or render it anonymous so that it can no longer be linked to you.
12. Data Security Measures
We take the security of your personal information seriously and apply appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure or destruction. These measures are reviewed regularly and updated as technology and risks evolve.
Our technical safeguards include secure and encrypted connections where sensitive information is transmitted, restricted access to systems that hold personal information, secure storage of records, and up to date software and security practices across the devices we use. Access to personal information is limited to the members of our team and our service providers who need it to perform their duties.
While we work hard to protect your information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information, and we encourage you to protect your own devices and accounts with strong passwords and updated software.
13. Your Rights and Choices
Depending on your jurisdiction, you may have a number of rights in relation to the personal information we hold about you. These may include the right to access your information, the right to request correction of inaccurate data, the right to request deletion of your data, the right to restrict or object to processing, the right to data portability, and the right to withdraw consent.
To exercise any of these rights, please contact us using the details in the Contact Information section of this policy. We will respond to valid requests within the timeframes required by applicable law, and we may ask you to verify your identity before we process your request to protect your information from unauthorised disclosure.
We will not discriminate against you for exercising your rights. If you believe your information has been handled in a way that does not comply with applicable law, you also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
14. Privacy for Children
Our website and services are intended for adults and are not designed for children under the age of sixteen. We do not knowingly collect personal information from children, and we do not direct any part of our website or marketing to children.
If you are a parent or guardian and you believe that your child has provided personal information to us without your consent, please contact us as soon as possible. We will take reasonable steps to delete the information from our records and to prevent any further collection.
If we become aware that we have collected personal information from a child without verified parental consent, we will delete that information promptly. We encourage parents and guardians to supervise their children online and to discuss safe internet use with them.
15. Third Party Links and Services
This website may contain links to external websites and services that are not operated by us. When you follow a link to a third party website, the privacy practices of that website apply, and we are not responsible for the content or the data handling practices of those sites.
We encourage you to review the privacy policy of every website you visit, including those you reach through links on our pages. The inclusion of a link on our website does not imply an endorsement of the linked website or its practices.
Any third party tools we integrate into our website, such as analytics or communication services, are selected carefully, and we seek to use providers that apply reasonable privacy and security standards. Where a third party processes data on our behalf, the relationship is governed by appropriate data processing terms.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our technology, or legal and regulatory requirements. When we make changes, we will revise the last updated date at the top of this page and post the updated policy on this page.
For material changes that affect how we use your personal information, we will take reasonable steps to notify you, which may include displaying a notice on our website or, where appropriate, contacting you directly. We encourage you to review this page periodically to stay informed about how we protect your information.
Your continued use of our website and services after the updated policy is posted constitutes your acceptance of the revised policy. If you do not agree with the changes, you should stop using our website and services and contact us to discuss your options.
17. Contact Information
If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal information, you are welcome to contact us at any time. Our team will respond to your enquiry as promptly as possible and, in any event, within the timeframes required by applicable law.
You can reach JL Dental Consultancy Limited by email at info@katycraft.hair or by telephone at +14849935886. Our principal address is Rm 1503 15/F M Place, 54 Wong Chuk Hang Road, Wong Chuk Hang, Hong Kong (HK).
Thank you for taking the time to understand how we handle your information. Protecting your privacy is an important part of the professional service we provide, and we appreciate the trust you place in our team.