NNikas Lab Tracker

Legal

Privacy Notice

Last updated: 4 October 2026

1 Who we are

Nika laboratory, trading as Nikas Lab Tracker, is the responsible party (data controller) for the personal information described in this notice. We operate the service from South Africa.

2 What we collect and why

Account details

Email address, name, sign-in credentials, password hash

Purpose: Creating and securing your account, signing you in, account support

Legal basis: Performance of the contract between us

Organisation details

Practice or laboratory name, type, contact email, who belongs to it, link invitations

Purpose: Connecting a practice with its laboratory and limiting data to members

Legal basis: Performance of the contract; legitimate interests (correct routing of work)

Case and lab slip content

Patient name, medical aid name and member number, practitioner, device, shade, requirements, due dates, stage history

Purpose: Recording and tracking the dental work you ask us to track

Legal basis: Performance of the contract; you are responsible for holding the necessary patient consents

Messages

The text you and your linked organisation exchange

Purpose: Communication between a practice and its laboratory about a case

Legal basis: Performance of the contract

Financial records

Price lists, estimates, invoice numbers, invoice amounts and lines, paid status

Purpose: Producing estimates and invoices and keeping accounting records

Legal basis: Performance of the contract; legal obligation to keep tax and accounting records

Usage and security data

IP address, device and browser identifiers, pages viewed, timestamps, sign-in events

Purpose: Detecting abuse and fraud, debugging, keeping the service secure

Legal basis: Legitimate interests (security and service improvement)

Support correspondence

Messages you send us and our replies

Purpose: Answering your questions and resolving problems

Legal basis: Legitimate interests (customer support)

Payment card details, billing addresses and tax handling are collected and held by our payment provider, Paddle, as Merchant of Record — not by us.

3 Who we share information with

  • Your linked organisation. A practice and the laboratory it is linked to can see the cases, slips, messages, estimates and invoices that pass between them. Nobody else can.
  • Our service providers who host the database and file storage, deliver transactional email, run our infrastructure, and provide support tooling. They act on our instructions and only for these purposes.
  • Paddle, our Merchant of Record, for the sale of the subscription, subscription management, payments, tax compliance and invoicing.
  • Professional advisers such as our auditors and lawyers, where needed.
  • Authorities or courts, where we are required by law or to protect rights and safety.

4 How long we keep it

We keep your account and organisation information while your account is open, and for a short period afterwards so you can reactivate. Case, slip, message and price-list information is kept while the relevant account is open, and deleted or anonymised within 30 days of the export window after access ends. Invoices and other accounting records are kept for five years, as South African tax law requires.

5 Where it is held

Our hosting providers may store and process information on servers outside South Africa. Where information leaves the country, we require the same level of protection through written contracts and appropriate technical safeguards.

6 How we protect it

Information is encrypted in transit, access is limited to people who need it, and the database enforces which organisation can read which rows, so a practice cannot see another practice's cases and a laboratory cannot see cases it is not linked to. We review our security measures as the service changes.

7 Your rights

You may ask us for a copy of the personal information we hold about you, ask us to correct or delete it, object to processing, withdraw consent where processing rests on consent, and ask for your data in a transferable form. We will respond within 30 days. If you are unhappy with our answer, you may complain to the Information Regulator of South Africa.

8 Cookies and local storage

We use only what is technically necessary to keep you signed in and to remember your view of the app — this is stored on your own device. We do not use advertising or marketing cookies, and we do not sell personal information.

9 Children

The service is for dental professionals. We do not knowingly collect information from children, and patient information must only be entered by practices and laboratories that are entitled to hold it.

10 Contact

For any privacy question, or to exercise a right, contact Nika laboratory through the support address given in your account.

See also our Terms & Conditions and Refund Policy.