GDPR & Privacy Policy
At St George’s Dental Practice, we are committed to protecting and respecting your privacy. This policy explains when and why we collect personal information, how we use it, when we may share it, and how we keep it secure in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- What Personal Data We Collect
To provide high-quality dental care, we may collect and hold personal information about you, including:
Your contact details (e.g., name, address, telephone number, email)
Medical and dental history and current condition
Treatment details, clinical records, x-rays, photographs and study models
Records of consent to treatment
Correspondence relating to your care, including with other healthcare professionals
Website usage data and online interactions (where applicable)
- How We Collect Your Information
We collect personal data when you:
Register as a patient at the practice
Complete forms in practice or on our website
Contact us by phone, email, post, SMS or social media
Attend appointments with us
- Why We Process Your Data
We process your personal data for the following lawful purposes:
To provide safe and effective dental care
To manage your treatment and appointments
To contact you about treatment, recall and reminders
To respond to enquiries, feedback or complaints
For administrative and practice management purposes
To fulfil legal and regulatory requirements
- Sharing Your Information
We may share your information where necessary to:
Other healthcare professionals involved in your care
Your GP or hospital services
Regulatory bodies when required by law
Dental payment plan administrators or insurers (with your consent)
Third parties providing services on our behalf (e.g., IT support)
We will not share your personal data for marketing purposes without your explicit consent.
- How We Protect Your Data
We take the security and confidentiality of your information seriously. We use appropriate technical and organisational measures to protect your data from unauthorised access, loss or misuse. These measures include secure servers, password protections, encrypted storage, and staff training.
- How Long We Keep Your Information
We retain your dental records and clinical information for at least eleven years after your last appointment, or until age 25 for patients who are minors, whichever is longer. Retention periods may be updated from time to time in line with legal and regulatory requirements.
- Your Rights Under UK GDPR
Under UK GDPR and the Data Protection Act 2018, you have the right to:
Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase data where we no longer have a lawful reason to keep it
Restrict or object to certain processing activities
Data portability – receive your data in a structured format
Withdraw consent where processing is based on consent
To exercise any rights, please contact us in writing or by email (details below).
- Contact & Complaints
If you have any questions about how we use your personal data or wish to raise a concern or complaint about your privacy rights, please contact:
Data Protection Contact
St George’s Dental Practice
Email: privacy@stgeorgesdental.co.uk
Phone: 01273 692444
Address: 109 St George’s Rd, Kemptown, Brighton and Hove, Brighton BN2 1EA
If you are dissatisfied with our response, you have the right to contact the Information Commissioner’s Office (ICO) at ico.org.uk.