Legal
Privacy Notice
Last updated: 4 October 2026
1 Who we are
Nika laboratory, trading as Nikas Lab Tracker, is the responsible party (data controller) for the personal information described in this notice. We operate the service from South Africa.
2 What we collect and why
Account details
Email address, name, sign-in credentials, password hash
Purpose: Creating and securing your account, signing you in, account support
Legal basis: Performance of the contract between us
Organisation details
Practice or laboratory name, type, contact email, who belongs to it, link invitations
Purpose: Connecting a practice with its laboratory and limiting data to members
Legal basis: Performance of the contract; legitimate interests (correct routing of work)
Case and lab slip content
Patient name, medical aid name and member number, practitioner, device, shade, requirements, due dates, stage history
Purpose: Recording and tracking the dental work you ask us to track
Legal basis: Performance of the contract; you are responsible for holding the necessary patient consents
Messages
The text you and your linked organisation exchange
Purpose: Communication between a practice and its laboratory about a case
Legal basis: Performance of the contract
Financial records
Price lists, estimates, invoice numbers, invoice amounts and lines, paid status
Purpose: Producing estimates and invoices and keeping accounting records
Legal basis: Performance of the contract; legal obligation to keep tax and accounting records
Usage and security data
IP address, device and browser identifiers, pages viewed, timestamps, sign-in events
Purpose: Detecting abuse and fraud, debugging, keeping the service secure
Legal basis: Legitimate interests (security and service improvement)
Support correspondence
Messages you send us and our replies
Purpose: Answering your questions and resolving problems
Legal basis: Legitimate interests (customer support)
Payment card details, billing addresses and tax handling are collected and held by our payment provider, Paddle, as Merchant of Record — not by us.
3 Who we share information with
- Your linked organisation. A practice and the laboratory it is linked to can see the cases, slips, messages, estimates and invoices that pass between them. Nobody else can.
- Our service providers who host the database and file storage, deliver transactional email, run our infrastructure, and provide support tooling. They act on our instructions and only for these purposes.
- Paddle, our Merchant of Record, for the sale of the subscription, subscription management, payments, tax compliance and invoicing.
- Professional advisers such as our auditors and lawyers, where needed.
- Authorities or courts, where we are required by law or to protect rights and safety.
4 How long we keep it
We keep your account and organisation information while your account is open, and for a short period afterwards so you can reactivate. Case, slip, message and price-list information is kept while the relevant account is open, and deleted or anonymised within 30 days of the export window after access ends. Invoices and other accounting records are kept for five years, as South African tax law requires.
5 Where it is held
Our hosting providers may store and process information on servers outside South Africa. Where information leaves the country, we require the same level of protection through written contracts and appropriate technical safeguards.
6 How we protect it
Information is encrypted in transit, access is limited to people who need it, and the database enforces which organisation can read which rows, so a practice cannot see another practice's cases and a laboratory cannot see cases it is not linked to. We review our security measures as the service changes.
7 Your rights
You may ask us for a copy of the personal information we hold about you, ask us to correct or delete it, object to processing, withdraw consent where processing rests on consent, and ask for your data in a transferable form. We will respond within 30 days. If you are unhappy with our answer, you may complain to the Information Regulator of South Africa.
8 Cookies and local storage
We use only what is technically necessary to keep you signed in and to remember your view of the app — this is stored on your own device. We do not use advertising or marketing cookies, and we do not sell personal information.
9 Children
The service is for dental professionals. We do not knowingly collect information from children, and patient information must only be entered by practices and laboratories that are entitled to hold it.
10 Contact
For any privacy question, or to exercise a right, contact Nika laboratory through the support address given in your account.
See also our Terms & Conditions and Refund Policy.