Privacy notice

Introduction

This notice applies to all five TG’s Dental Suite practices: Higham Ferrers, Earls Barton, Ashby-de-la-Zouch, Scraptoft/Leicester and Rugby. We aim to meet the requirements of the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), the guidance published by the Information Commissioner’s Office (ICO), and our professional guidelines and obligations. The data controller is TG’s Dental Care Limited, registered in England & Wales under company number 07743679, with a registered office at Pickford House, 18 High View Close, Vantage Park, Hamilton, Leicester, Leicestershire, LE4 9LJ.

Dawn Arthurs, Group Manager, is responsible for data protection across the group on the company’s behalf, and is the first point of contact for any question about how we use your data or to exercise your rights. You can reach her through our Higham Ferrers practice on 01933 318481 or at higham@tgsdentalsuite.com.

Day to day, the Information Governance Lead for each practice is the practice manager:

• Higham Ferrers — Dawn Arthurs
• Earls Barton — Rachel Algar
• Ashby-de-la-Zouch — Lydia Bullock
• Scraptoft/Leicester — Karen McClelland
• Rugby — Georgia McHugh

What we collect and why

You may be asked to provide personal information when you join or contact one of our practices, use our website, register online, subscribe to communications, or are referred to us. We process your personal data so that we can provide dental care, manage our relationship with you, meet legal and professional obligations, and improve our services.

The categories of personal data we may process include:

• Personal details needed to provide dental care, such as your name, address, date of birth, contact details, NHS number, medical history, dental history and treatment records;
• Information needed to provide treatment plans, estimates, appointment bookings, recalls, reminders and other practice communications;
• Details of family members, parents, carers or emergency contacts where relevant to your care or the care of a child or dependent;
• Marketing and communication preferences, where you’ve chosen to receive updates about important announcements, new treatments or services;
• Website information, such as IP addresses and usage information, to help us understand how visitors use our website and improve the online experience; and
• Special category data, including health records, where needed to provide healthcare and meet legal, regulatory and professional obligations.

We minimise the personal data we collect and don’t keep it for longer than necessary.

Our lawful bases

We rely on: our legitimate interests as a dental practice; performance of a contract with you (or steps to enter one); your consent, where required; and compliance with our legal obligations. For special category data, including health information, we rely on processing that’s necessary for healthcare purposes, necessary to meet legal, regulatory or equality obligations, or your consent where required.

How long we keep it

Patient records are retained for a minimum of 10 years, and may be kept for longer where required for complex records or to meet legal or professional requirements. Other personal data is retained only for as long as necessary for the purpose it was collected — details are available in our Record Retention procedure, which you can request from your practice.

Who we share it with

We don’t share your personal details with third parties unless there’s a lawful reason to do so, such as where we have a contract with a supplier to process data on our behalf, where sharing is required by law, or where it’s necessary for your care. If we need to refer you to another practitioner or to secondary care, such as a hospital, we’ll explain this before the referral is made and the personal data is shared. Your data will be shared with the NHS in England if you’re receiving NHS treatment. Named third-party processors we use on this website include Resend, which sends our transactional emails (account emails and messages submitted through our contact form), and postcodes.io, which looks up UK postcodes on our server to help you find your nearest practice when booking. Any further call-tracking/analytics processor is still being confirmed with the practice’s data-protection lead ahead of launch. If you send us a message through the contact form, it is emailed to the practice you choose and the website itself keeps no copy.

Your rights

You have the right to:

• be informed about how your data is collected and used;
• access a copy of the data we hold about you;
• have inaccurate or incomplete data corrected;
• ask for your data to be deleted, subject to our clinical record-keeping obligations;
• restrict or object to certain processing;
• have your data transferred to someone else (data portability), where applicable; and
• raise concerns about automated decision-making and profiling, where it applies to you.

If you’re a patient, you can ask us to correct errors in your personal details, request a copy of your patient records, or withdraw consent for optional communications such as newsletters, surveys or marketing. If you’re not a patient, you can ask us to correct, delete or provide a copy of the personal data we hold about you, and you can withdraw consent for optional communications such as telephone, email or text messages. Contact the Information Governance Lead at your practice to exercise any of these rights (details above, and on our Areas We Serve pages).

How the NHS and care services use your information

TG’s Dental Suite is one of many organisations working in the health and care system to improve care for patients and the public. Information collected about you when you use NHS or care services can also be used and shared with other organisations for purposes beyond your individual care — for example to improve quality and standards of care, support research into new treatments, prevent illness and disease, monitor safety, or plan services. This only happens where there’s a clear legal basis, and most research and planning uses anonymised data so you can’t be identified.

You have a choice about whether your confidential patient information is used this way. If you’re happy with this, you don’t need to do anything. If you’d rather opt out, your confidential patient information will still be used to support your individual care — visit nhs.uk/your-nhs-data-matters to find out more or register your choice, and you can change your mind at any time. Data being used or shared for purposes beyond individual care never includes sharing with insurance companies or use for marketing, and would only happen with your specific agreement.

If you’re not satisfied

Please contact the Information Governance Lead at your practice first — we take concerns about data handling seriously. If you remain unhappy, or want advice, you can contact the Information Commissioner’s Office (ICO) — call 0303 123 1113, use their online live chat, or visit ico.org.uk. The ICO can investigate your complaint and take action against anyone who has misused personal data.