You will be asked to provide personal information when joining the practice. This is to allow us to provide appropriate healthcare and ensure your safety.

Categories of data we process:

• Contact data (name, address, email, telephone number) – for communication and appointments, and for marketing where consent is given

• Special category data (health data) (medical history, treatments, medication, etc.) – for safe delivery of healthcare

• Treatment data (photos, X-rays, moulds, clinical findings) – to support treatment

• Financial data (payment details, credit information, etc.) – for processing payments

• Usage data (website usage and interaction data) – to improve our services

Directly from you

• Forms on our website

• Phone calls, emails, or in person

• When registering, booking, or subscribing to communications

Automatically

• Technical data (IP address, browser, device, etc.)

• Website usage data (pages visited, clicks, time spent, etc.)

From third parties

• Referrals from providers such as Invisalign

• Analytics and service providers

• Other organisations we work with (e.g. payment or technical services)

We process your personal data to:

• Provide healthcare and treatments

• Manage appointments and communication

• Process payments

• Improve services and website performance

• Obtain feedback and reviews

• Carry out marketing (with consent)

• Ensure safety and compliance

We may share your data with:

• Healthcare professionals involved in your care

• Payment providers and finance companies

• Laboratories and equipment providers

• IT, storage, and CRM systems

• Marketing, analytics, and communication providers

• Legal, accounting, and compliance professionals

• Insurance companies (where applicable and with your request)

Key third-party providers include:

• Boxly (our CRM and practice management system)

• Payment providers such as Stripe

• Email marketing and communication providers

• Analytics providers such as Google

• Advertising platforms including Meta (Meta Ads) and Google

• Other technology and service providers required to deliver our services

We only share data where necessary and under strict contractual and confidentiality obligations.

We process your personal data based on:

• Your consent

• Contractual necessity

• Legal obligations

• Healthcare provision requirements

Special category health data is processed under strict legal and professional confidentiality rules.

• Patient health records: minimum of 11 years

• Other personal data: up to 2 years after last use

Marketing communications continue until you opt out.