Privacy Policy
Privacy Notice – High Street Dental Practice
High Street Dental Practice is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store and protect your personal data when you visit our website, contact us, or receive treatment from us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
High Street Dental Practice
Address: 267 High Street, Burntwood, Staffordshire, WS7 3XJ
Telephone: 01543 685897
Email: info@highstreetdentist.co.uk
Data Protection Lead: J Singh
We are the data controller responsible for your personal data.
2. Personal Data We Collect
We may collect and process the following types of personal data:
a) Website and Enquiry Data
- Name
- Email address
- Telephone number
- Messages submitted via our contact form
- IP address and basic browser information
b) Patient Data (If You Become a Patient)
- Date of birth
- Home address
- Medical and dental history
- Treatment records
- X-rays, photographs and scans
- Appointment and payment information
c) Technical Data
- Browser type and version
- Device type
- Website usage data through analytics tools (e.g. Google Analytics)
3. Lawful Bases for Processing
We only process your personal data where the law allows us to do so. Our lawful bases include:
- Contract – where processing is necessary to provide dental care or to take steps at your request prior to entering into a contract
- Legal obligation – where we must keep records under healthcare law
- Legitimate interests – to manage our practice, respond to enquiries, and improve our services
- Consent – where required, for example for marketing communications
Website Enquiries:
When you submit an enquiry through our website contact form, we process your personal data on the lawful basis of legitimate interests and/or to take steps at your request prior to entering into a contract. We do not rely on consent to process general website enquiries.
We always explain why we need your data at the point of collection.
4. How We Use Your Data
We use your personal data only for legitimate purposes, including:
- Responding to enquiries submitted via our website, email or telephone
- Providing dental care and maintaining accurate clinical records
- Managing appointments, invoicing and payments
- Meeting our legal and regulatory obligations
- Improving our website and services
- Communicating with you about services you have requested
We do not sell your personal data to any third party.
We do not use enquiry data for marketing unless you have given clear, separate consent.
5. Cookies and Analytics
Our website uses cookies to help us understand how visitors use our site and to improve user experience.
We use Google Analytics to collect information such as:
- How visitors reach our website
- Which pages are visited
- How long visitors spend on the website
- How users interact with the site
You can control or disable cookies through your browser settings. More information is available at:
6. How We Store and Protect Your Data
We store your personal data securely using:
- Encrypted IT systems
- Password-protected access
- Restricted staff access
- Secure UK-based servers
- Regular security updates and system monitoring
All staff are trained in confidentiality and data protection.
While no system can be guaranteed to be 100% secure, we use appropriate technical and organisational measures to protect your information against loss, misuse, unauthorised access or disclosure.
7. Who We Share Your Data With
We may share your personal data with trusted third parties where necessary, including:
- Dental laboratories
- Specialist referral practices
- Practice management system and IT providers
- Website hosting providers
- Insurance providers (where applicable)
- HMRC or legal authorities where required by law
All third parties are required to keep your data secure and to use it only in accordance with our instructions and the law.
We do not transfer your data outside the UK unless appropriate legal safeguards are in place.
8. How Long We Keep Your Data
We keep personal data only for as long as necessary:
- Website enquiry data: usually up to 12 months
- Patient clinical records: in line with professional and legal requirements (normally at least 11 years after last treatment, or until age 25 for children)
After this time, data is securely deleted or permanently anonymised.
9. Your Legal Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request erasure (“the right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time (where consent is the lawful basis)
Subject Access Requests are free of charge and will normally be completed within one calendar month.
Requests should be sent to:
info@highstreetdentist.co.uk
10. Complaints
If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://www.ico.org.uk
We would, however, appreciate the opportunity to resolve any concerns directly before a complaint is made.
11. Third-Party Links
Our website may contain links to other websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy notices carefully.
12. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in law or our practices. The most recent version will always be available on our website.