Privacy Policy

Last updated: 29 March 2026

1. Who We Are

This website is operated by Medical and Dental Ltd (company registered in England & Wales), trading as Dental Clinic London. We are the data controller responsible for your personal data.

Registered practice addresses:

  • 20 Old Brompton Road, South Kensington, London SW7 3DL
  • 5 Ave Maria Lane, City of London, London EC4M 7AQ

Contact: info@dentalclinic.london | 020 7183 0527

2. Information We Collect

We may collect and process the following categories of personal data:

  • Identity data: name, title, date of birth
  • Contact data: address, email, telephone number
  • Health data: medical and dental history, treatment records, X-rays, clinical photographs and notes (special category data under UK GDPR)
  • Financial data: payment details and billing history
  • Technical data: IP address, browser type, pages visited and cookies (see our Cookie Policy)

3. How We Use Your Data

We process your personal data for the following purposes:

  • Providing dental care and managing your treatment
  • Booking and managing appointments
  • Processing payments and issuing invoices
  • Communicating with you about your care, including appointment reminders
  • Complying with our legal and regulatory obligations (CQC, GDC, NHS)
  • Improving our services and website

4. Legal Basis for Processing

We rely on the following lawful bases under the UK General Data Protection Regulation (UK GDPR):

  • Contract: to provide the dental services you have requested
  • Legal obligation: to meet our regulatory duties (e.g. CQC, GDC record-keeping requirements)
  • Vital interests: in medical emergencies
  • Legitimate interests: to run and improve our practice and website
  • Explicit consent: for processing special category health data where required, and for marketing communications

5. How We Store & Protect Your Data

Your personal and medical data is stored securely in compliance with UK GDPR and NHS data security standards. We use encrypted systems, role-based access controls, and secure cloud-based dental software.

Medical records are retained for a minimum of 10 years after your last treatment (or until age 25 for children), in accordance with GDC and NHS guidelines. Financial records are retained for 7 years to comply with HMRC requirements.

6. Who We Share Your Data With

We may share your data with third parties only where necessary and lawful, including:

  • Dental laboratories for the fabrication of appliances and restorations
  • Specialist practitioners to whom you are referred
  • Regulatory bodies (CQC, GDC) upon lawful request
  • Payment processors for billing purposes
  • IT service providers who maintain our practice management systems

We will never sell your personal data to third parties.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you (Subject Access Request)
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Object to or restrict certain types of processing
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@dentalclinic.london.

8. Cookies

Our website uses cookies to improve your experience. For full details, please see our Cookie Policy.

9. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date. We encourage you to review this policy periodically.