Privacy Policy

[[PLACEHOLDER — client to supply their existing privacy policy, or confirm we should use a standard dental-practice template. This file is a stub.]]

Data Controller: [[PROVIDER NAME]]
CQC Registration: [[CQC NUMBER]]
Address: 86 Crostwick Lane, Spixworth, Norwich, NR10 3AF
Contact for data enquiries: [email protected]

What this policy covers

This policy explains what personal data we collect from patients and website visitors, why we collect it, how we use it, how long we keep it, and the rights you have over your data under UK GDPR and the Data Protection Act 2018.

[[Full policy to be inserted]]

Sections typically required:
– Data we collect (contact details, medical history, dental records, images, payment details)
– Lawful basis for processing (consent, contract, legal obligation, legitimate interest, vital interests)
– How long we keep records (NHS dental records minimum retention = 11 years or until patient is 25, whichever is longer)
– Who we share data with (NHS BSA, labs, specialists, tax authorities)
– Cookies & website analytics
– Your rights (access, rectification, erasure, objection, portability)
– How to complain to us or to the ICO

Last reviewed: [[DATE]]