Privacy policy

This website is run by Regent Dental Ltd, trading as Regent Dental, on behalf of Dr Naeem Ashfaq, cosmetic and implant dentist. Regent Dental Ltd is the data controller for the personal information described in this policy.

• —Address: Regent Dental, 2a Regent Road, Ilkley, LS29 9EA
• —Phone: 01943 661331
• —Email: admin@regent-dental.co.uk
• —Company number: [company number], registered in England and Wales
• —ICO registration number: 00014537933

If you have any questions about this policy or how we use your information, please contact us using the details above.

We only collect the information we need. Depending on how you use our website and services, this may include:

• —Contact details: your name, phone number and email address.
• —Enquiry details: the treatment you are interested in and anything you tell us in your message.
• —Health information: details about your teeth, oral health or medical history that you choose to share with us in an enquiry, or that a referring dentist shares with us.
• —Referral information: if a dentist refers you to us, your name, date of birth, contact details, clinical notes and radiographs (X-rays), along with the referring dentist's name, practice, GDC number and contact details.
• —Technical information: your IP address, browser and device type, and how you use our website, collected through cookies. Please see our cookie policy for details.

Health information is a special category of personal data under UK data protection law, and we take extra care to protect it.

We collect information when you:

• —complete the consultation form or contact us by phone or email
• —are referred to Dr Naeem by another dentist
• —apply for finance through us
• —browse our website (through cookies, where permitted)

We use your information to:

• —respond to your enquiry and arrange your consultation
• —process referrals, and keep the referring dentist updated about your care
• —provide, plan and manage your dental treatment
• —help you apply for finance, if you ask us to
• —improve our website and understand how visitors use it
• —meet our legal, regulatory and professional obligations

We will not use your information for marketing unless you have given us permission. You can withdraw your permission at any time.

We only use your personal information where the law allows us to:

Where we use health information, we rely on the condition that processing is necessary for the provision of health care or treatment, carried out by or under the responsibility of a health professional bound by a duty of confidentiality. Where you choose to include health information in an enquiry, we will use it only to respond to you and plan your care.

We never sell your personal information. We only share it where necessary, with:

• —Referring dentists: updates and reports about the treatment they referred you for.
• —Dental laboratories: information needed to make crowns, veneers, aligners or other appliances.
• —Specialists and other healthcare professionals: where needed for your care, with your knowledge.
• —Finance providers: if you apply for finance, Regent Dental Ltd shares your details with Chrysalis Finance Limited and its lending partners to process your application.
• —Service providers: companies that help us run our website and practice, such as our website host, email provider, form provider and practice management software. They act only on our instructions and must keep your information secure. This includes Dentally, the practice management software we use to manage appointments and patient records.
• —Regulators and authorities: where we are legally required to, for example the General Dental Council, the Care Quality Commission or law enforcement.

Some of our service providers may store data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as a UK adequacy decision or the International Data Transfer Agreement, so your information receives the same level of protection.

We keep your information only for as long as we need it:

• —Enquiries that do not lead to treatment: up to [12 months] after our last contact with you.
• —Patient and referral records: in line with NHS and professional record-keeping guidance, usually at least 11 years after your last treatment, or until age 25 for children (whichever is longer).
• —Finance applications: as required by the finance provider and financial regulations.
• —Website analytics data: up to [14 months].

We use appropriate technical and organisational measures to protect your information from loss, misuse or unauthorised access. These include secure, encrypted website forms, access controls, staff confidentiality training and secure storage of clinical records.

Under UK data protection law, you have the right to:

• —Access: a copy of the personal information we hold about you
• —Rectification: ask us to correct information that is inaccurate or incomplete
• —Erasure: ask us to delete your information, where we are not legally required to keep it
• —Restriction: ask us to limit how we use your information
• —Objection: object to us using your information based on our legitimate interests, or for marketing
• —Data portability: ask us to transfer information you gave us to another organisation
• —Withdraw consent at any time, where we rely on your consent

To use any of these rights, contact us using the details above. We will respond within one month. Please note that we may not be able to delete clinical records, as we are legally required to keep them.

If you are unhappy with how we have handled your information, please contact us first so we can try to put things right. We will acknowledge your complaint within 30 days and let you know the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.