Privacy & Cookie Policy

Important notice
Personal Data we may collect and why
Cookies
How we use your personal data
Disclosure
Who we share your personal data with
How long we keep your personal data for
Your rights
How to contact us
Links to other websites
Changes to this Privacy Policy

(1) Important notice

Redhill Dental Care is committed to ensuring the privacy and confidentiality of your personal information and to protect it from unauthorised access and disclosure.

The purpose of this Privacy Policy is to clearly communicate to you how Redhill Dental Care handles your personal information to provide you with services and to comply with legal obligations.

Redhill Dental Care complies with the Data Protection Act 2018 and the General Data Protection Regulation (“GDPR”).

This Privacy Policy describes how we obtain and use your personal data.

Please review it carefully.

We take your privacy seriously and use your personal data as further explained in this Privacy Policy. We are the “Data Controller” of the personal data you provide to us.

You have the right to object to us processing your personal data for our legitimate business interests or for direct marketing purposes (including any related profiling). For more information about your rights and how you can exercise them, please see the section Your rights.

(2) Personal Data we may collect and why

Personal data is any information which identifies you personally whether directly (for example, your name) or indirectly (for example, information about your use of our products and services).

We may collect the following data about you:

Contact details: your name, email address, and telephone number so that we can contact you in response to an enquiry you make via our web site in relation to the products and services that we offer or for the purpose of registering as a patient with us;
Correspondence: we collect any additional personal data you may provide to us from time to time if you contact us by email, letter or telephone; through our web site, by submitting a comment on our web site.
Details of visits and use of our web site via a third party service, Google Analytics.

(3) Cookies

A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.

We may use both “session” cookies and “persistent” cookies on the website. Session cookies will be deleted from your computer when you close your browser. Persistent cookies will remain stored on your computer until deleted, or until they reach a specified expiry date.

We will use the session cookies to: keep track of you whilst you navigate the website; keep track of items in your shopping basket; prevent fraud and increase website security; We will use the persistent cookies to: enable our website to recognise you when you visit; keep track of your preferences in relation to your use of our website.

We use Google Analytics to analyse the use of this website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers. The information generated relating to our website is used to create reports about the use of the website. Google will store this information. Google’s privacy policy is available at: http://www.google.com/privacypolicy.html.

We use Google Adwords (including remarketing, interest categories, similar audiences) to advertise our company online. Google Adwords serves advertisements suited to audience interest with ads it deems appropriate. These advertisements are displayed on Google search results and third party websites which are enrolled in the Google Adsense network by means of cookies. Google will store this information. You can opt out of Google’s use of cookies by visiting the Ads Preferences Manager at: https://www.google.com/ads/preferences/.

Most browsers allow you to reject all cookies, whilst some browsers allow you to reject just third party cookies. For example, in Internet Explorer (version 9) you can refuse all cookies by clicking “Tools”, “Internet options”, “Privacy”, and selecting “Block All Cookies” using the sliding selector. Blocking all cookies will, however, have a negative impact upon the usability of many websites, including this one.

(4) How we use your personal data

We use your personal data for the following purposes:

To contact you in response to a specific enquiry via our contact page; make an enquiry or phone; email; post

To register you as a new patient

To respond to an enquiry about a product or service we offer

To provide and improve customer support

To respond to enquiries, complaints and disputes
We use the personal data we hold about you to help us respond to any enquiries or complaints you have made, or deal with any dispute which may arise in the course of us providing our products and services to you, in the most effective manner.

Direct marketing
If you have provided your consent, we may use your contact details to send you direct marketing and keep you informed of promotional offers by email, SMS, post or phone relating to our products and services.

You can unsubscribe from our direct marketing at any time by contacting us via email; phone or post.

To track your usage of our website, communications, products and services
We use cookies and similar technologies to track your activity on our web site so that we can provide important features and functionality on our web site and monitor its usage.

To maintain our records and improve data accuracy
We process personal data in the course of maintaining and administering our internal records. This includes processing your personal data to ensure that the information we hold about you is kept up to date and accurate.

To investigate, detect and prevent fraud and comply with our legal obligations
In certain circumstances, we use your personal data only to the extent required in order to enable us to comply with our legal obligations, including for fraud detection, investigation and prevention purposes. This may require us to provide your personal data to law enforcement agencies if they request it.

(5) Disclosure

We take your privacy seriously and we will only ever collect and use information which is personal to you where it is necessary, fair and lawful to do so. We will collect and use your information only after obtaining your consent to do so for the purposes of:

registering you as a new patient e.g. name, date of birth, address, doctor, email, phone numbers
answering an enquiry about a product or service we offer
sending you information about products/services we offer
meeting our legal or regulatory obligations
carrying out dental care/treatment
sharing with other healthcare professionals who need to be involved in your care e.g. if you need to be referred to a Consultant
sharing with Dental Laboratories

If you choose not to give some or all of the aforementioned information to us, this may affect our ability to provide our products and services to you.

Where we think there is a risk that one of your interests or fundamental rights and freedoms may be affected we will not process your personal data unless there is another legal ground for us to do so (either that we have obtained your consent to the processing or it is necessary for us to perform our contract with you or to comply with our legal obligations).

We will not disclose your personal information to any other third parties in the UK unless we have a legal basis for it and we have the appropriate measures and safeguard in place to ensure its protection.

(6) Who we share your personal data with and where is it processed

We may provide your personal data to other healthcare professionals; dental laboratories and service providers, who act as “processors” of your personal data on our behalf. In addition, we may disclose your personal data if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to protect the rights, property, or safety, of our business, our patients or others. This includes, in specific cases, exchanging information with other organisations for the purposes of fraud protection.

The majority of your personal data is processed in the UK and European Economic Area (EEA).

In some cases, the personal data we collect from you may, for the purposes set out above, be transferred outside the European Economic Area (EEA) and such destinations may not have laws which protect your personal data to the same extent as in the EEA. We are required by data protection law to ensure that where we or our “processors” transfer your personal data outside of the EEA, it is treated securely and is protected against unauthorised access, loss or destruction, unlawful processing and any processing which is inconsistent with the purposes set out in this Privacy Policy.

(7) How long we keep your personal data for

We retain your personal data for no longer than is necessary for the purposes(s) for which it was provided.

We will store patient data for as long as we are providing care, treatment or recalling patients for further care. We will archive patient records for at least eleven years or in the case of children until they reach the age of 25 which ever is longer.

We may also keep your information after this period, but only where required to meet our legal or regulatory obligations. The length of time we keep your information for these purposes will vary depending on the obligations we need to meet.

(8) Your rights

You have the following rights regarding your personal data:

Rights	What does this mean?
1. Rights to be informed	You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this Privacy Policy.
2. Right of access	You have the right to obtain access to your personal data (if we are processing it) and certain other information (similar to that provided in this Privacy Policy). This is so you are aware and can check that we are using your personal data in accordance with data protection law.
3. Right to rectification	You are entitled to have your personal data corrected if it is inaccurate or incomplete.
4. Right to erasure	This is also known as ‘the right to be forgotten’ and, in simple terms, enable you to request the deletion or removal of your personal data where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
5. Right to restrict processing	You have the right to ‘block’ or supress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further.
6. Right of data portability	You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.
7. Right to object to processing	You have the right to object to us processing your personal data for our legitimate business interests or for direct marketing purposes (including in each case any related profiling).
8. Right to withdraw consent to processing	If you have given your consent to us to process your personal data for a particular purpose (for example, direct marketing), you have the right to withdraw your consent at any time (although if you do so, it does not mean that any processing of your personal data up to that point is unlawful).
9. Right to make a complaint to the data protection authorities	You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data or believe our processing of your personal data does not comply with data protection law.

(9) How to contact us

If you would like to exercise your data protection rights or if you are unhappy with how we have handled your personal data, please feel free to contact us by using the details set out on our website.

If you’re not satisfied with our response to any enquiries or complaint or believe our processing of your personal data does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) by:

writing to: Information Commissioner’s Officer, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF;
calling: 0303 123 1113; or
submitting a message through the ICO’s website at: ico.org.uk

(10) Links to other websites

Our website may contain hyperlinks to websites owned and operated by third parties. This Privacy Policy does not apply to those other websites. We encourage you to read the privacy statements on the other websites you visit, as they will govern the use of any personal data you provide when visiting those websites. We do not accept any responsibility or liability for the privacy practices of such third party websites and your use of such websites is at your own risk.

(11) Changes to this Privacy Policy

This Privacy Policy was last updated on 25 May 2018.

This Privacy Policy may be updated from time to time, so you may want to check it each time you provide personal data to us.