Privacy Notice

The practice aims to meet the requirements of the Data Protection Act 2018,
the General Data Protection Regulation (GDPR), the guidelines on the
Information Commissioner’s website as well as our professional guidelines
and requirements.

The data controller is Adam Conradi, the information
governance lead is Claire Robson.

This Privacy Notice is available on the practice website at

www.parkstreetdental.co.uk
.
A copy may be requested at reception, by email to
info@parkstreetdental.co.uk
or by calling 01844 215404.

You will be asked to provide personal information when joining the practice.
The purpose of processing your personal data is to provide you with optimum
dental health care and prevention.

Categories of Data We Process

Personal data for the provision of dental health care
Personal data for treatment plans, recall appointments, reminders or estimates
Personal data such as details of family members for child care or emergency contacts
Personal data for team member employment and engagement
Personal data for direct mail, email or text notifications of important announcements or services
Personal data such as IP addresses to understand patients and improve marketing and website experience
Special category data including health records to deliver health care
Special category data to meet legal obligations
Special category data to meet Equality Act 2010 requirements
Special category data relating to criminal record checks for staff

We minimise the data that we keep and do not retain it longer than necessary.

We never pass your personal details to a third party unless they process data
on our behalf under contract. If referring a patient to another practitioner
or secondary care provider, we will obtain permission before sharing data.
Your data will be shared with the NHS in England if you receive NHS treatment.

Personal data is stored in the EU in digital or hard copy format. Personal
data is obtained when a patient joins the practice.

For full details on where your data is stored, please request our
Information Governance Procedures (M 217C).

Lawful Bases for Processing

Personal Data

Legitimate interests of the dental practice
Processing necessary for performance of a contract or entering into one
Consent of the data subject
Compliance with legal obligations

Special Category Data

Processing necessary for health care purposes
Processing necessary to support equality of opportunity and treatment
Consent for processing criminal record checks

Reasons We Process Data

To maintain contemporaneous clinical records
To provide dental treatment, prevention and oral health advice
To carry out financial transactions with you
To send required data to regulatory authorities
To communicate regarding appointments, plans, estimates and treatment
To communicate with next of kin in emergencies
To communicate with parents or carers of patients
To refer you to other health professionals
To obtain criminal record disclosures for staff
For debt recovery
To continually improve our care and service

Personal Data We Process

This includes your name, address, gender, date of birth, NHS number, medical
and dental history, family medical history, family contact details, marital
status, payment details, doctor’s details and treatment details. We may also
process sensitive special category data including ethnicity, race, religion or
sexual orientation to meet equality obligations or adapt treatment to suit your needs.

Data Retention

Special category patient data: minimum of 10 years (longer if required)
Staff records: 6 years
Other personal data: 2 years after last processed

Details of retention periods are available in our
Record Retention (M 215) procedure.

How We Obtain Personal Data

We obtain your personal details when you enquire, join the practice,
subscribe to our newsletter, register online or complete a registration or
medical history form.

Your Data Rights

The right to be informed
The right of access (free copy of your data)
The right to rectification
The right to deletion (subject to clinical record rules)
The right to restrict processing
The right to data portability
The right to object
Rights regarding automated decision-making and profiling

Further details are available in our
Information Governance Procedures (M 217C) or on the ICO website.

Practical Examples

Patients may withdraw consent for newsletters or marketing, request
corrections, restrict communication channels, or receive a free copy of their
records within one month.

Non-patients may also withdraw consent, request deletion, correct details, or
request data copies within one month.

A Privacy Impact Assessment (M 217Q) and Security Risk Assessment (M 217M)
are available upon request.

Comments, Suggestions and Complaints

Please contact the IG Lead for any comment or complaint about your data at
info@parkstreetdental.co.uk,
call 01844 215404 or write to:

Park Street Dental Clinic,
34 Park Street,
Thame, Oxon,
OX9 3HR

If you are unhappy with our response you may contact the ICO at
0303 123 1113 or visit their website.

Related Practice Procedures

Data Protection and Information Security Policy (M 233-DPT)
Consent Policy (M 233-CNS)
Privacy Impact Assessment (M 217Q)
Information Governance Procedures (M 217C)
Record Retention (M 215)

Final Notes

Data used beyond individual care is not shared with insurance companies or
used for marketing without explicit agreement.

Our practice uses your personal health data only to provide individualised care,
and does not disclose it for other purposes. The national data opt-out does not
apply to our usage and we are compliant with this policy.

Monday	8:30 am - 18:30 pm
Tuesday	8:30 am - 18:30 pm
Wednesday	8:30 am - 18:30 pm
Thursday	8:30 am - 18:30 pm
Friday	8:30 am - 16:00 pm
Saturday	Closed
Sunday	Closed

Blog

Aesthetic Dentistry – Gal 4

Aesthetic Dentistry – Gal 3

Aesthetic Dentistry – Gal 2

Aesthetic Dentistry – Gal 1