Privacy notice

This practice complies with the Data Protection Act 2018, the General Data Protection Regulation (GDPR) and the professional guidelines that apply to dental practices.

Data controller

Amitosh Sahi is the practice's Information Governance Lead and Data Protection Officer.

What data we process

• Personal data used to manage our staff and team members
• Contact information used for direct mail or email
• Special category health records, processed in order to provide dental care
• Employee health data and criminal record information

Sharing your data

We never pass your personal details to a third party unless we have a contract for them to process data on our behalf. Where a referral to another clinician is appropriate, we ask your permission before sharing your records.

Where your data is held, and for how long

Personal data is stored within the EU, in digital or hard copy form. Our retention periods are:

• Patient records — a minimum of 10 years
• Staff records — 6 years
• Other personal data — 2 years after the last processing

Your rights

You have the right to access your data, to have inaccurate data corrected, to request erasure (subject to the exceptions that apply to clinical records), to data portability, and to object to processing. You may also withdraw consent for communications within one month of requesting your records.

Complaints

If you are unhappy with how we have handled your data, please contact Amitosh Sahi at info@matleydental.co.uk or 01733 230066. If we cannot resolve matters, you may raise the issue with the Information Commissioner's Office on 0303 123 1113.