This policy is a working template. The operating entity's details must be completed and the whole document reviewed by a qualified adviser before publication, so that it reflects actual data practices and current UK data protection law.
This policy explains how personal information is handled when you make an enquiry about Teeth Whitening or use this website. It is written to be read, rather than to be technically complete and practically unintelligible.
Last updated: [to be confirmed]. Data controller: [to be confirmed]. Contact for data protection matters: [to be confirmed].
Information Collected
Information You Provide
When you make an enquiry you may provide your name, contact details, postcode, and information about your dental history or the treatment you are asking about. Where you describe dental history, symptoms or medical circumstances, that constitutes health information and is treated with the additional care that category requires.
Information Collected Automatically
Standard technical information may be recorded when you visit, such as browser type, device type, approximate location derived from IP address, pages viewed and time of visit. Details of any analytics or cookies in use: [to be confirmed].
How Information Is Used
- To respond to your enquiry and provide the information you have asked for
- To arrange, prepare for and carry out a consultation or appointment
- To maintain clinical records where treatment is provided
- To provide aftercare guidance and respond to follow-up questions
- To meet legal, regulatory and professional record-keeping obligations
Your information is not sold. It is not used for marketing unrelated to your enquiry without your consent, and any consent given can be withdrawn at any time.
Legal Basis
Personal information is processed on the basis of your consent where you have given it, the performance of a contract where treatment is arranged, compliance with legal obligations, and legitimate interests in responding to enquiries and operating the service. Health information is processed on the additional basis applicable to the provision of health and social care by or under the responsibility of a professional bound by a duty of confidentiality.
Sharing and Retention
Information may be shared with service providers who support operations, such as IT and communications suppliers, each bound to protect it; with regulators or other bodies where there is a legal obligation to do so; and with other healthcare professionals where necessary for your care and with your knowledge. Categories of third-party processors in use: [to be confirmed].
Enquiries that do not proceed to treatment are retained only as long as needed to deal with them. Clinical records are retained in line with professional requirements. Specific retention periods: [to be confirmed].
Your Rights
Under UK data protection law you have the right to access the information held about you, to have inaccurate information corrected, to request erasure in certain circumstances, to restrict or object to processing, to data portability where applicable, and to withdraw consent at any time. To exercise any of these rights, use the contact route above.
If you are not satisfied with how a request has been handled, you may complain to the Information Commissioner's Office, the UK supervisory authority for data protection.
Security and Changes
Appropriate technical and organisational measures are used to protect personal information against unauthorised access, loss or disclosure, including restricted access, secure storage and staff confidentiality obligations. No transmission over the internet can be guaranteed completely secure, and information sent to us is sent at your own risk.
This policy may be updated from time to time. The date at the top of the page indicates when it was last revised.