About This Policy
This policy explains what personal information is collected through this website and in connection with Teeth Whitening enquiries and appointments, why it is collected, how it is stored, how long it is kept, and what rights you have over it.
It is written to be read rather than to be technically compliant while remaining incomprehensible. Where something is genuinely uncertain, it is marked as outstanding rather than described vaguely.
Data controller name and legal entity: TO BE SUPPLIED
Registered address: TO BE SUPPLIED
Contact point for data protection enquiries: TO BE SUPPLIED
ICO registration number, if applicable: TO BE SUPPLIED
Date this policy takes effect: TO BE SUPPLIED
This draft should be reviewed by a suitably qualified adviser before it is relied upon. It sets out a sound structure and honest defaults, but it is not legal advice and it has not been tailored to any specific business or jurisdiction.
What Information Is Collected
Information You Provide Directly
- Your name, and the contact details you choose to give when making an enquiry
- The content of your enquiry, including any questions you ask
- Where relevant to a Teeth Whitening appointment, information about previous whitening, existing dental work, sensitivity history, and any medical circumstances you consider relevant
- Appointment details, including location where a home visit is arranged
Information Recorded During Treatment
Where an appointment takes place, a record is made of the assessment, the shade recorded before and after treatment, the treatment applied, and any relevant observations. This is a treatment record and exists to make your care safer and any subsequent session more precise.
Information Collected Automatically
Standard technical information may be recorded when you visit this website, such as approximate location derived from an IP address, browser type, device type, pages viewed and time of visit. This is used to understand how the site is used and to keep it working, not to identify you individually.
Health Information
Some of the information relevant to a Teeth Whitening assessment concerns your health, and information of that kind is treated as a special category requiring additional protection. It is collected only where it is genuinely needed to determine whether treatment is safe and appropriate, and it is not used for any other purpose.
How Information Is Used
Information is used for the following purposes and no others.
- To answer your enquiry. Responding to what you asked is the primary and often the only purpose.
- To assess suitability. Determining whether Teeth Whitening is appropriate for you, and which approach suits your circumstances.
- To deliver treatment safely. Adjusting the approach according to sensitivity history, enamel condition and existing dental work.
- To arrange and manage appointments. Including confirming, rescheduling or cancelling.
- To provide aftercare support. Answering questions that arise following a session.
- To meet legal and insurance obligations. Including retaining treatment records for the period required.
Your information is not sold, not rented, and not passed to third parties for their own marketing. You will not be added to a marketing list as a side effect of making an enquiry.
Lawful Basis
Information is processed on the basis of taking steps at your request before entering into a contract and performing that contract, on the basis of legitimate interests in operating and improving the service, and on the basis of legal obligation where record retention is required. Health information is processed on the basis of your explicit consent, which you may withdraw.
Photographs and Treatment Records
Photographs taken as part of shade documentation are treatment records. They exist to provide an objective baseline against which a result can be measured, and they are stored with the same protection as any other record.
Using any photograph publicly — on this website, in printed material, or anywhere else — requires your separate, specific and freely given consent. Consent to treatment is never treated as consent to publication, and the two are not bundled together in any document you are asked to sign.
Consent to publication may be withdrawn at any time and without giving a reason. Where withdrawal is requested, the image is removed from any material within the operator's control as promptly as is practical. Material already distributed in printed form cannot always be recalled, which is worth knowing before consenting.
Cookies and Website Analytics
Cookies are small files placed on your device by a website. Some are necessary for a site to function; others are used to measure how a site is used or to support advertising.
The cookies actually in use on this website must be audited and listed before publication rather than described generically, because an inaccurate cookie notice is worse than none: COOKIE AUDIT AND LIST TO BE SUPPLIED
Where non-essential cookies are used, consent should be obtained before they are set, and it should be as easy to decline as to accept. Most browsers also allow cookies to be blocked or deleted through their own settings, though blocking necessary cookies may prevent parts of a site from working.
Note that this website loads fonts from a third-party provider, which means a request is made to that provider when a page loads. That is a technical necessity of the current design rather than a tracking mechanism, but it should be disclosed accurately in any cookie or privacy notice.
Retention, Sharing and Security
How Long Information Is Kept
Enquiries that do not lead to an appointment are kept only for as long as there is a reason to hold them, and are deleted on request without needing a justification. Treatment records are retained for the period required by insurance and professional obligations. The specific retention periods applying here must be confirmed: RETENTION PERIODS TO BE SUPPLIED
Who Information Is Shared With
Information may be shared with service providers who process it on the operator's behalf — for example, secure record storage or appointment scheduling — under contracts requiring them to protect it and to use it only as instructed. Information may also be disclosed where there is a legal obligation to do so. It is not shared for any other purpose.
How Information Is Protected
Records are held securely, access is limited to those who need it to deliver the service, and information is not stored on unsecured personal devices. No system is entirely immune from compromise, and any claim to the contrary should be treated with suspicion. Where a breach occurs that is likely to affect your rights, you will be informed.
Transfers Outside the UK
Where any provider used stores information outside the UK, appropriate safeguards must be in place. The providers used and any international transfers involved must be identified before publication: PROCESSORS AND TRANSFERS TO BE SUPPLIED
Your Rights Over Your Information
Under UK data protection law you hold the following rights, and exercising any of them will not affect the service you receive.
- Access. To ask what information is held about you and to receive a copy of it.
- Rectification. To have inaccurate information corrected and incomplete information completed.
- Erasure. To ask for information to be deleted where there is no longer a proper reason to hold it.
- Restriction. To ask that processing be limited while a concern is investigated.
- Objection. To object to processing based on legitimate interests, and to object to direct marketing at any time.
- Portability. To receive information you provided in a commonly used format, or to have it transferred.
- Withdrawal of consent. Where processing relies on consent, to withdraw it at any time without giving a reason.
Requests are answered within one month. You will not be charged for making a request, and you do not need to explain why you are making one.
Children
This website and service are directed at adults. Information is not knowingly collected from anyone under eighteen. Where a young person's information has been provided, it should be raised so that it can be deleted.
If You Are Not Satisfied
Concerns should be raised directly in the first instance, as most issues are resolved quickly that way. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, and you may do so without raising the matter directly first.
Changes to This Policy
This policy may be updated as the service changes or as legal requirements develop. The version in force is the one published on this page, and material changes should be dated so that it is clear what applied at any given time.
The terms governing use of this website are set out separately on the terms and conditions page. Details of how to raise a question are on the contact page.