City Dental GDPR Policy
Introduction
City Dental is a dental company situated in Sunderland, United Kingdom. We are committed to protecting the privacy of our patients and clients and to ensure that their personal data is collected, processed, and stored in accordance with the General Data Protection Regulation (GDPR) and all applicable data protection laws. This policy outlines the measures we have put in place to ensure that we comply with GDPR, and to provide our clients with confidence in our approach to data protection.
Scope of this Policy
This policy applies to all personal data processed by City Dental, including data collected through our website, in our clinics, or through other means. This policy applies to all employees and contractors of City Dental and all third-party service providers who process personal data on behalf of City Dental.
Data Processing Principles
City Dental will process personal data in accordance with the following principles:
Fair, lawful and transparent: we will only collect, process and store personal data where we have a lawful basis for doing so and where we are transparent with our clients about how their data will be used.
Purpose limitation: we will only collect personal data for specified, explicit and legitimate purposes and we will not process it further in a manner that is incompatible with those purposes.
Data minimization: we will only collect and store the minimum amount of personal data necessary for the purposes for which it is processed.
Accuracy: we will take all reasonable steps to ensure that personal data is accurate and kept up to date.
Storage limitation: we will not store personal data for longer than is necessary for the purposes for which it was collected.
Integrity and confidentiality: we will take appropriate technical and organizational measures to ensure that personal data is treated securely and with an appropriate level of confidentiality.
Lawful Bases for Processing Personal Data
City Dental will process personal data in accordance with one or more of the following lawful bases:
Consent: where the individual has given their explicit consent to the processing of their personal data for a specific purpose.
Contractual necessity: where the processing of personal data is necessary for the performance of a contract with the individual or to take steps at the request of the individual prior to entering into a contract.
Legal obligation: where the processing of personal data is necessary for City Dental to comply with a legal obligation.
Vital interests: where the processing of personal data is necessary to protect the vital interests of the individual or another person.
Public interest: where the processing of personal data is necessary for the performance of a task carried out in the public interest.
Collection of Personal Data
City Dental will collect personal data in a fair and transparent manner and only for specified, explicit and legitimate purposes. Personal data may be collected from the following sources:
Directly from the individual, through our website or in our clinics
From third-party sources such as dental records, referrals, and insurance companies.
Types of Personal Data Collected
City Dental may collect the following types of personal data:
Contact information such as name, address, email address, and telephone number
Demographic information such as date of birth, age, and gender
Medical information such as dental history, current dental conditions, and treatment plans
Payment information such as credit card or bank details
Marketing preferences such as communication preferences and marketing opt-ins.
Use of Personal Data
City Dental will use personal data for the following purposes:
To provide dental services to our clients, including booking appointments, treating dental conditions, and maintaining dental records.
To communicate with our clients regarding their dental care and to provide them with information and updates on their treatment plans and appointments.
To process payments and manage billing and insurance claims.
For internal record-keeping and to improve our services.
To carry out market research and to send promotional and marketing materials, such as newsletters and special offers, to clients who have consented to receive such communications.
Disclosure of Personal Data
City Dental will not disclose personal data to third parties, except in the following circumstances:
With the explicit consent of the individual.
To comply with a legal obligation.
To protect the vital interests of the individual or another person.
To third-party service providers who process personal data on behalf of City Dental, such as payment processors or IT service providers.
Marketing and Re-Marketing
City Dental may use personal data for marketing and re-marketing purposes, including sending promotional and marketing materials, such as newsletters and special offers, to clients who have consented to receive such communications. Clients have the right to opt-out of receiving marketing communications at any time by contacting us or using the opt-out mechanism provided in the marketing materials.
Storage and Security of Personal Data
City Dental will store personal data in a secure manner and will take appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction or damage.
Retention of Personal Data
City Dental will only retain personal data for as long as is necessary for the purposes for which it was collected. After this, personal data will be securely deleted or anonymized.
Data Subject Rights
Individuals have the following rights in relation to their personal data:
The right to be informed about the processing of their personal data.
The right of access to their personal data.
The right to rectification of inaccurate personal data.
The right to erasure of their personal data in certain circumstances.
The right to restrict the processing of their personal data in certain circumstances.
The right to data portability, which allows individuals to receive their personal data in a commonly used format and to transmit that data to another data controller.
The right to object to the processing of their personal data in certain circumstances.
The right to object to automated decision-making, including profiling.
Responsibilities of Employees and Contractors
All employees and contractors of City Dental are responsible for ensuring that they comply with this policy and all applicable data protection laws. Any breach of this policy by an employee or contractor may result in disciplinary action.
Contact Us
If you have any questions or concerns about this policy or the processing of your personal data, please contact us at [Insert Contact Information].
Changes to this Policy
City Dental may update this policy from time to time to reflect changes in the law or to our data protection practices. Any changes will be posted on our website and communicated to our clients as appropriate.
Date of Last Revision
This policy was last revised on Friday 17th March 2023
