Dental Care Professionals Ltd
t/a 1st-Impressions.dental
Privacy Policy Updated 16 Feb 2022

The type of personal information we collect

We currently collect and process the following information:

·         Personal identifiers, contacts and characteristics (for example, name and contact details).

·         Current and past medical history and record of therapies.

·         Financial transactions with the practice.

·         Clinical assessments and treatment provided.

·         Correspondence with you, and third parties, about your treatment.

·         Aggregated Web site statistics for the purpose of developing our Web site.

·         Staff information for employment and payroll.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

·         For the purposes of obtaining dental treatment.

We may also receive some personal information indirectly, from the following sources in the following scenarios:

·         Medical information including your NHS Number when we refer you to the NHS for treatment

·         Your NHS summary care record (SCR).

·         Clinicians who refer you to us for treatment.

We use the information that you have given us in order to provide dental treatment and any administrative or legal obligations we have in connection with that.

We may share this information with persons or organisations directly involved in the provision of your dental or ancillary care (for example your doctor).

Lawful basis

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

·         Your consent. You can withdraw your consent at any time by contacting the practice in writing.

·         We have a contractual obligation.

·         We have a legal obligation.

·         We have a legitimate or vital interest.

How we store your personal information

Your information is securely stored and backed up at the practice with an additional backup at an off-site location within the UK.

How we dispose of your information

Your information is deleted and is not visible on our system but will remain in our backups.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk