What this policy covers
This policy explains what happens to your personal information when you use this website or send us an enquiry about Teeth Whitening. It is written to be read rather than skimmed past, so each section says what we do and what it means for you in practice, rather than restating the law at you.
It applies to this website and to enquiries made through it. It does not cover other websites you might reach from a link here — those have their own policies, and we have no control over how they handle your information.
The information we collect when you get in touch
We collect information in one place only: the written enquiry route on this website. There is no account to create, nothing to buy, and no login. If you never contact us, you never hand us anything identifying.
When you do send an enquiry, the details asked for are the ones needed to answer you properly:
- Your name, so we know who we are replying to.
- An email address and a contact number, so we can reply by whichever route suits.
- Your postcode, so we can say whether you fall within the area covered and which appointment times are realistic.
- What your enquiry is about — a question, a request for a price, or arranging treatment.
- Anything you tell us in your own words, which may include details about your teeth, previous whitening, staining, sensitivity or existing dental work.
That last category is worth pausing on. If you describe your teeth or your dental history in order to get a useful answer, you are sending us information about your health. We treat that as more sensitive than the rest and use it only to answer the question you asked. You are never obliged to include it — a general enquiry works perfectly well, and we can ask what we need at the consultation stage instead.
We do not buy personal data from anyone, and we do not build a profile of you from other sources.
Why we hold it, and on what basis
The reason is narrow and it does not quietly expand over time. When you contact us you agree that we may reply using the details you supplied, and those details are used only in connection with that specific enquiry. If you go ahead with treatment, the same information supports the arrangements and provides an accurate record of what was discussed beforehand.
In data protection terms, the basis for holding it is your consent, given at the point you send the enquiry, together with our legitimate interest in replying to someone who has asked us a question. Where your message contains health-related detail, we rely on your explicit consent — which is exactly why you choose what to include.
What we do not do with it matters just as much. We do not sell it. We do not pass it to other companies for their marketing. We do not add you to a mailing list because you once asked a question, and we do not treat an enquiry as an invitation to contact you about something unrelated.
Who else your information reaches
As few people and systems as possible. Your enquiry is stored on this website’s own database and is not copied out into other places for convenience.
The unavoidable exception is the company that hosts the website, because storing data on a server means somebody operates that server. A hosting provider handles data on our instructions rather than for its own purposes, and is required to meet UK data protection standards. It does not use your enquiry for anything of its own.
Beyond that we do not share your details with third parties for marketing, pass them to partner businesses, or sell them. Information would only go further if the law required it — a valid legal order, for instance — which is a genuinely rare situation rather than a routine one.
Where it is stored, and how long we keep it
Your enquiry is held on this website’s own database. It is not duplicated into separate systems, and no additional copies are kept elsewhere.
On how long: information is kept only while there is a reason to have it. An enquiry that goes nowhere does not need holding indefinitely, and a record connected to treatment is kept for as long as is sensible and then removed. If you would like your information deleted sooner, you can ask, and the section below explains how.
We would rather say that honestly than publish a fixed number of months we could not stand behind. If you need to know the exact retention period applying to your own enquiry, ask and we will tell you.
Keeping your information secure
Access to enquiry data is restricted to those who need it in order to reply to you, and the website and its database are maintained with security updates applied as they are released.
It would be misleading to claim more than that. No method of sending information over the internet is completely secure, and any business telling you otherwise is overselling. What we can say is that once your enquiry reaches us it is handled carefully and kept to the smallest circle possible. Our own advice is not to send anything highly sensitive through a web form when a general description would do — there is always the option of giving more detail once your appointment is actually being discussed.
Your rights over your information
These are rights you hold under UK data protection law. You do not need to give a reason for exercising most of them, and asking costs nothing.
Asking for a copy of your data
You can ask for a copy of the personal information held about you. Requests are confirmed with you first — that step exists so nobody can request your data by pretending to be you — and the information is then provided in a portable file you can keep or pass to somebody else. Files supplied this way are made available for a limited window rather than left accessible indefinitely.
Asking us to delete it
You can ask for your information to be erased. The request is confirmed with you before anything is removed, and once actioned your details are deleted or anonymised so they can no longer be linked back to you. Worth knowing that deletion means deletion: if you ask us to erase an enquiry and then get in touch again months later, we will be starting from scratch.
Correcting something that is wrong
If we hold something inaccurate about you — a mistyped email address, an old number, a detail that has since changed — you can ask for it to be put right. This is the quickest request to deal with and the most worth using, because an incorrect contact detail is the usual reason somebody never receives a reply.
Objecting, restricting and complaining
You can object to us holding your information, ask us to restrict what we do with it while a query is sorted out, or withdraw consent you previously gave. You can also complain — to us first, which is usually quicker, and to the Information Commissioner’s Office, the UK’s independent data protection regulator, if you are not satisfied with how we handled it. Going to the regulator costs you nothing and does not require our agreement.
Children and this website
This website and its enquiry route are intended for adults. We do not knowingly collect personal information from children, and nothing here is designed for or aimed at them.
If you are a parent or guardian and believe a child has sent us their details, tell us and we will delete the information. Where an enquiry concerns a young person, we would expect it to come from the parent or guardian rather than from the young person directly. Suitability for any treatment is a separate matter, decided at consultation rather than by a web form.
Changes to this policy
This policy is updated when the way we handle information changes. Updates appear on this page rather than being sent out, so the version published here is the one that applies.
If a change is significant — a new category of information, a new reason for holding it, a new organisation involved in processing it — we would not expect you to spot it buried in a paragraph. Changes of that kind are worth checking for if you have an enquiry with us in progress.
Raising a privacy question with us
The honest position: this website does not currently publish a direct email address, telephone number or postal address, including for data protection requests. We would rather say so plainly than print a generic address that nobody monitors.
Privacy requests should therefore go through the same written enquiry route as everything else, described on our contact page. Say clearly in your message that it is a data protection request and what you want — a copy, a correction, or deletion — and include the contact details you originally used, because that is how your enquiry will be found.
If a dedicated privacy contact is published in future, it will appear in this section. Our terms and conditions cover the use of this website itself.