Privacy Policy – AD Dentistry LTD

Effective Date: 23/05/2025

Last Updated: 23/05/2025

This privacy policy explains how AD Dentistry LTD collects, uses, and protects your personal information in accordance with the General Data Protection Regulation (GDPR).

1. Who We Are

AD Dentistry LTD is a private limited company registered in the UK, operated by a self-employed dentist providing endodontic and general dental services across multiple practices in Central Dorset.

Data Controller:

• Aleksandra Dunlop

• AD Dentistry LTD

• Email: _____

• Company Number: 16319949

2. Personal Data We Collect

We may collect and hold the following types of personal data:

• Full name, date of birth, address, telephone number, email address

• Appointment dates and times

• Any information given within the "Message / Inquiry" section of the Contact Us Form.

3. How We Collect Your Data

Your personal data is collected through:

• Any information given within the "Message / Inquiry" section of the Contact Us Form.

• Direct communication via phone or email

4. Why We Collect Your Data

We process your data to:

• Provide safe and effective dental treatment and recommendations

• Comply with legal regulations

• Communicate with you and/or referring practices

• Maintain accurate medical records

• Process payments and manage appointments

5. Lawful Basis for Processing

Under the GDPR, we rely on the following lawful bases:

• Consent (for communication and marketing, if applicable)

• Legal obligation (medical records retention)

• Vital interests (in urgent cases)

• Public task (when providing NHS care)

• Contract (to deliver agreed services)

6. Data Sharing

We may share your data with:

• Dental practices, which I work at, where treatment is recommended

• NHS bodies (if applicable)

• Laboratories for treatment planning

• Medical professionals (only where necessary)

• Accountants or legal advisors (only for compliance)

We do not sell your data or share it for marketing purposes.

7. Data Storage and Retention

All patient records are stored securely, either digitally or on paper, and only accessible by authorised individuals. Data is retained in line with UK dental record guidelines (usually 11 years or until a patient reaches age 25, whichever is longer).

8. Your Data Rights

Under GDPR, you have the right to:

• Access your personal data

• Request correction of incorrect data

• Request deletion (in some cases)

• Object to or restrict processing

• Data portability (if applicable)

• Withdraw consent (for optional uses)

To exercise your rights, contact: __________

9. Data Security

We implement appropriate technical and organisational measures to safeguard your data, including secure email systems, password protection, and locked physical storage (where paper records exist).

10. Complaints

If you have concerns about how your data is handled, please contact us first. You can also lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk

11. Changes to This Policy

This policy is reviewed regularly and may be updated to reflect changes in the law or practice.