Centre for Implant Dentistry
100 Berkeley Street
At the Centre for Implant Dentistry, our mission is to protect the privacy of all patients’ personal data and store it in a safe and secure environment that maintains confidentiality. We are fully committed to handling your personal data in accordance with General Data Protection Regulations (GDPR). The Centre for Implant Dentistry is the data controller and this privacy notice describes how we collect and use your personal information.
We will only collect information that is necessary to deliver your dental and oral health care. We will protect your data by only sharing it with 3rd party providers that are necessary to improve upon and deliver services and have confirmed that they have the appropriate security measures in place to comply with the GDPR.
Why we collect your data
The Centre for Implant Dentistry collects your personal data in order to provide dental health care, treatment and management to you. Our lawful basis for processing your data is special category; this allows us to carry out the provision of your dental and oral health care, treatment and management as we have previously done.
This is also for us to be able to keep you up to date with the latest services, products, exclusive events and special offers.
How we collect your information
We only collect your information directly from you for you, or if you are making an appointment on behalf of someone including children. We may also receive personal data from the NHS that relates directly to your oral and dental health. We also only receive information from your General Dental Practitioner when they make the referral or have to send us any relevant dental data.
What information we collect
We collect personal information relating to your residential address, contact number, relevant medical and dental history.
Sharing your information
We will only use your data as the law allows.
We may share your data with 3rd service providers that are necessary for us to deliver the services to you. All third-party service providers are required to confirm that they have the appropriate security measures in place to comply with the GDPR and only process your personal information in accordance with our instructions.
Under GDC (General Dental Council – the regulatory body which governs dentists) guidelines, we are required to retain all information on your health record for 12 years or if the patient is a child at the time of treatment until they reach their 25th birthday, whichever one is first. After this, your file will be made inactive or deleted on our computer software system or paper records will be shredded and disposed of appropriately.
Any details that we may hold for you that are not directly related to your health record will be deleted in accordance with our retention policy.
Your right to access
You have the right to receive a copy of the data we hold about you. You should do this in writing and we will need verification that the request has come from you personally. We will endeavour to provide this without delay and within 1 month of your written request however, we reserve the right to extend this by 2 months if the request is complex or numerous.
Your right to rectification
You have the right to rectify any of your personal data if it is inaccurate or incomplete unless this proves impossible or involves disproportionate effort. The Centre for Implant Dentistry will endeavour to allow you the opportunity to review and amend your personal details when you attend an oral health check. You can also make a request to update your personal details via phone or email.
Your right to erasure
The Centre for Implant Dentistry erases your data if you have not attended the clinic for 11 complete years or if you have been treated as a child and have reached your 25th birthday and have not attended. This is in accordance with the GDC Guidelines.
Your right to restriction
You have a right to ‘block’ or suppress your data from being processed. You can make a written request for this. We will continue to store that data under GDC Guidelines, but we will not process it. In this event, we will make your file inactive and prevent any further processing. In the rare event that we need to access your data, we will inform you.
Your right to object
If you object to the Centre for Implant Dentistry processing information required and relevant to carrying out your health care, you may be unable to be a registered patient. The information required but objected to being given may also prevent us from providing accurate information during appointments etc.
Your right to data portability or automated decision making
These are not applicable to The Centre for Implant Dentistry.
Failing to provide the Centre for Implant Dentistry with your personal information
In the event you refuse or fail to provide personal information, the Centre for Implant Dentistry may refuse to see you for your health care as all information we collect is essential to carry out this service.
The Centre for Implant Dentistry may have CCTV installed. If they do it will be clearly displayed via sign. The purpose of the CCTV is to ensure the safety of staff and patients. Notices are displayed in areas where CCTV is in operation.
In the event of a suspected or actual data breach, the Centre for Implant Dentistry will make an assessment of the risk to individual patients and clients. If the breach is assessed as high risk the affected individual will be contacted as soon as possible, and if appropriate, the Information Commissioners’ Office will also be notified in accordance with our notification policy.
Queries and Concerns
If you have a query about any aspect of this policy, a concern about your personal data or suspect a data protection breach please contact the practice.
If you have a concern or complaint that we cannot resolve then you can contact the Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.