Privacy policy

Dene Dental Practice complies with Data Protection Act 2017 and the General Data Protection
Regulation (GDPR). This Privacy Notice explains what personal data the practice holds, why we hold and
process it, who we might share it with and your rights under the Law.
To provide patients with a high standard of dental care and attention, we need to hold their personal
data.

What personal data do we store?

• Past and current medical and dental condition; personal details such as age, address, telephone
  number and general medical practitioner.
• Radiographs, clinical photographs and study models
• Information about your treatment that we have provided or proposed and its costs
• Notes of conversations or incidents that might occur for which a record needs to be kept
• Records of consent to treatment
• Any correspondence relating to you and other health care professionals.

Why do we hold information about you?
We need to keep comprehensive and accurate personal data about patients to provide you with safe,
appropriate and high quality dental care. We also hold Staff data in order to process it in accordance
with Employment, Taxation and Pension law.

How long is the Personal Data stored for?
We will store patient data for as long as we are providing care, treatment or recalling patients for
further care. We will archive (that is, store it without further action) data as per GDPR Regulations.
Patient data is retained for a minimum of 11 years for adults and for children 11 years or up to their
25th birthday, whichever is the longer. We store employment data for 6 years after an employee has
left.

Security of information

Personal data about you is held in the practice’s computer system. The information is only accessible to
authorised team members. Our computer system has secure audit trails and we back up information
routinely.
We use secure host servers for our website (HTTPS) with SSL certificate in and our website visitors /
patients can be certain that our data / content is secure.

Disclosure of information
To provide proper and safe dental care we may need to disclose personal information about you to:

• Your general medical practitioner
• Other health professionals caring for you (for example if we refer you to a specialist or need laboratory work undertaken).
• Private dental schemes of which you are a member
• Agents and third parties as required by law

Disclosure will take place on a ‘need-to-know’ basis. Only those individuals/organisations who need to
know to provide care for you and for the proper administration of Government (whose personnel are
covered by strict confidentiality rules) will be given the information.

If you do not wish personal data that we hold about you to be disclosed or used in the way that is
described in this Privacy Notice, please discuss the matter with our Data Protection Officer, Mrs. Shah.

Your rights:
You have the right to:

• Be informed about the personal data we hold and why we hold it.
• Access a copy of your data that we hold by contacting us directly: we will acknowledge your request
  and supply a response within one week.
• Check the information we hold about you is correct and to make corrections if not.
• Have your data erased in certain circumstances.
• Transfer your data to someone else if you tell us to do so and it is safe and legal to do so.
• Tell us not to actively process or update your data in certain circumstances.

You have a right to withdraw your consent at any time, however this will not be retrospective.

What if you are not happy or wish to raise a concern about our data processing?
You can complain in the first instance to our Data Protection Officer, Mrs. Shah and we will do our best to resolve the matter. If this fails, you can complain to the Information Commissioner at www.ico.org.uk/concerns or by calling 0303 123 1113