Privacy Policy

This policy explains how personal information is handled when you use this website or make an enquiry about Teeth Whitening. It is written to be read rather than skimmed, and it sets out what is collected, why, how long it is kept, and what rights you have over it.

Information Collected

Information is collected only where you provide it or where it is necessary to deliver a service you have asked for.

Information You Provide Directly

When you make an enquiry about Teeth Whitening, you may supply your name, contact details, the address at which a home visit would take place, and a description of what you would like to achieve. You choose what to include, and only the information relevant to answering your enquiry is needed.

Health Information

Where treatment is arranged, information relevant to suitability is recorded. This may include previous dental treatment, existing restorations, any history of sensitivity, relevant medical history, and the findings of the pre-treatment assessment. Health information is classed as special category data under UK data protection law and is treated with corresponding care.

Treatment Records

Where a Teeth Whitening session takes place, records are kept of the assessment findings, the shade recorded before and after treatment, any photographs taken, the product and protocol used, any sensitivity reported, the aftercare given, and your documented consent.

Technical Information

Standard server logs may record the internet protocol address of visiting devices, the pages requested, and the date and time of the request. This information is generated automatically by web hosting and is used for security and for maintaining the availability of the site.

How Information Is Used

Personal information is used for the following purposes and no others.

• Responding to enquiries about Teeth Whitening
• Assessing whether treatment is suitable for you
• Arranging, confirming and delivering appointments
• Maintaining accurate clinical and treatment records
• Providing aftercare guidance and answering follow-up questions
• Meeting legal, regulatory and insurance obligations
• Maintaining the security and availability of this website

Information provided in an enquiry is not used for unrelated marketing, is not sold, and is not passed to third parties for their own purposes.

Lawful Bases for Processing

UK data protection law requires a lawful basis for processing personal information. The bases relied on are as follows.

• Consent. Where you contact us voluntarily and ask for a response, and where you consent to treatment being carried out.
• Contract. Where processing is necessary to arrange and deliver a treatment you have booked.
• Legal obligation. Where records must be kept to satisfy legal, regulatory or insurance requirements.
• Legitimate interests. For maintaining the security of this website and keeping accurate business records, balanced against your rights and interests.

For special category health information, the additional condition relied on is your explicit consent, together with the provision of health or social care treatment where applicable.

Sharing Information

Personal information is not sold, rented or traded.

Information may be shared in a limited set of circumstances: with service providers who process data on our behalf under a written agreement, such as hosting or email providers; with insurers or professional advisers where necessary in connection with a claim; with a dental professional where you have asked for a referral or where onward care is required; and where disclosure is required by law or by a regulator.

Any organisation processing information on our behalf is required to act only on documented instructions and to apply appropriate security measures.

How Long Information Is Kept

Information is kept only as long as there is a reason to keep it.

• Enquiries that do not lead to treatment are retained for a short period to allow follow-up and are then deleted.
• Treatment records, including consent and photographs, are retained for the period required by legal, regulatory and insurance obligations. This period is typically measured in years rather than months, because records may be needed to demonstrate what was assessed, agreed and carried out.
• Server logs are retained for a short period for security purposes.

Where information is no longer needed it is securely deleted or destroyed.

Security

Appropriate technical and organisational measures are used to protect personal information against unauthorised access, loss, alteration and disclosure. These include restricting access to those who need it, using secure storage for records and photographs, and applying access controls to any device on which information is held.

No method of transmission or storage is completely secure, and no absolute guarantee can be offered. Where a personal data breach occurs that is likely to result in a risk to your rights and freedoms, it will be reported to the Information Commissioner's Office within the required timeframe, and you will be informed where the risk is high.

Cookies

This website is built as a set of static pages and does not set cookies for advertising, profiling or cross-site tracking.

If analytics, embedded content, or any similar technology is added in future, this section will be updated to describe what is used and why, and an appropriate consent mechanism will be provided before any non-essential cookie is set. Most browsers also allow you to block or delete cookies through their own settings.

Your Rights

Under UK data protection law you have the following rights in relation to your personal information.

• Access. To be told whether your information is held and to receive a copy of it, including treatment records and photographs.
• Rectification. To have inaccurate information corrected and incomplete information completed.
• Erasure. To ask for information to be deleted, subject to any legal or regulatory obligation to retain clinical records.
• Restriction. To ask that processing be limited in certain circumstances, such as while the accuracy of information is being verified.
• Objection. To object to processing carried out on the basis of legitimate interests.
• Portability. To receive information you provided in a structured, commonly used and machine-readable format where processing is based on consent or contract and carried out by automated means.
• Withdrawal of consent. To withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

Exercising these rights is free of charge in ordinary circumstances, and a response is provided within one month. Verification of identity may be requested before information is released, which protects you rather than obstructing you.

Complaints

If you are concerned about how your personal information has been handled, raising it directly is usually the quickest route to resolution.

You also have the right to complain to the Information Commissioner's Office, which is the United Kingdom's independent supervisory authority for data protection. The Information Commissioner's Office publishes guidance for individuals on its website, including how to raise a concern and what to expect from the process. Complaining to the regulator does not require you to have raised the matter directly first, although doing so is often faster.

Changes to This Policy

This policy may be updated to reflect changes in the service, in the technology used by this website, or in the law. Material changes will be reflected on this page, and the date below records when the policy was last revised.

Related information is available in the terms and conditions, and the contact page explains how enquiries and the information within them are handled in practice.