Website Privacy Policy
Last update: 30 August 2024
We take data protection seriously, and this Privacy Notice has been written to give you a detailed overview of how we may process your personal data when using and interacting with our website. Make sure to read it carefully, as this notice contains important information on how we process your personal data, as well as what your rights are, how to contact us, and how to make a complaint if you have one.
UK General Data Protection Regulation (UK GDPR), UK DPA 2018, UK PECR, and EU General Data Protection Regulation (EU GDPR)
Patient Records
Our Practice is registered with the Care Quality Commission (CQC). Details of our registration can be seen at www.cqc.org.uk. Our practice must comply with the CQC data protection policy for patient records, both offline and online.
Our Website
This privacy notice relates to your use of our website, see www.kaadentals.co.uk.
Throughout our website, we may link to other websites owned and operated by certain trusted third parties to make additional products and services available to you. These other third-party websites may also gather information about you in accordance with their own separate privacy notices.
For privacy information relating to these other third-party websites, please consult their privacy notices.
Definitions
Personal data: means any information that can be linked to an individual and identify them, no matter if on its own or when combined with other data. Examples of personal data are name, ID number, location data, health information, political or economic interests, online identifiers, and IP addresses.
Data Controller: means the natural or legal person, which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data Processor: means a natural or legal person, or body that processes personal data on behalf of the controller.
Data Protection Act 2018: controls how your personal information is used by organisations, businesses, or the government. The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR), also called DPA18.
Data Protection Regulation: are the legislations that set guidelines for the collection and processing of personal data from individuals, such as GDPR.
Data subject: means an identified or identifiable natural person to whom the data in question belongs.
GDPR: General Data Protection Regulation (EU GDPR) – Regulation (EU) 2016/679.
UK GDPR: means the Data Protection Act 2018, which is the UK’s implementation of the General Data Protection Regulation (GDPR).
Household: means a group, however identified, of consumers who cohabitate with one another at the same residential address and share use of common devices or services.
PECR: the PECR (Privacy and Electronic Communications (EC Directive) Regulations 2003) is a UK law that is derived from the EU’s ePrivacy Directive (Directive 2002/58/EC) and gives people specific rights to electronic communications.
Personal information: means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
Processing: are any activities where we use personal data, both through electronic and manual means. This includes (without limitation) collecting, recording, storing, organising, adapting, altering, using, disclosing, and erasing personal data.
Sell: means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration.
Sharing: means “disclosing, disseminating, making available, transferring, a consumer’s personal information by the business to a third party for cross-context behavioural advertising, whether or not for monetary or other valuable consideration.
You: means the user or potential user of the website.
We, us: means our practice.
Our collection and use of your personal data
We may collect your personal data when you access our website, register with us, contact us, or send us feedback.
We collect this personal data from you either directly, such as when you register with us, or contact us, or indirectly, such as your browsing activity while on our website (see ‘Cookies’ below).
The personal data we collect about you depends on the activities carried out through our website. This information includes:
- Your name, email, and phone number
- Details of any feedback you give us by phone, email, post, or via social media
- Chat history if you contact us on social media
We use this personal data to:
- Customise our website and its content to your preferences
- Notify you of any changes to our website or to our services that may affect you
- Improve our services
Our legal basis for processing your personal data
When we use your personal data, we are required to have a legal basis for doing so. There are various legal bases on which we may rely, depending on what personal data we process and why.
The legal bases we may rely on include:
- Consent: where you have given us clear consent for us to process your personal data for a specific purpose.
- Contract: where our use of your personal data is necessary for a contract we have with you, or because you have asked us to take specific steps before entering a contract.
- Legal obligation: where our use of your personal data is necessary for us to comply with the law (not including contractual obligations).
- Legitimate interests: where our use of your personal data is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal data which overrides our legitimate interests).
Who we share your personal data with
We share personal information from our customers and users with third parties under the very limited circumstances and specific purposes below:
Vendors: We may share personal data with third-party vendors, such as email providers (e.g., Microsoft, Mailchimp), analytics software (e.g., Sentry, Firebase, Amplitude Analytics), social media (e.g., WhatsApp, Facebook, Instagram), and consultants and vendors that perform tasks on our behalf like Marketing Agencies (e.g., Wati).
National Security Authorities or Law Enforcement: We may share personal data to comply with laws and protect our rights and the rights of others. We may disclose your information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order, or a subpoena. We may also disclose your information to prevent or investigate a possible crime; to protect the security of the Services; to enforce or apply our online Terms of Use or other agreements; or to protect our own rights or property or the rights, property, or safety of our users or others.
We are responsible for background-checking our vendors to ensure that such companies process your personal information in conformity with the applicable data privacy regulations, information security standards, and our own standards.
For how long we keep your data
The period for which data is retained varies according to the purpose for which the data is processed. Personal data is kept only for the time necessary to fulfill the processing purpose. In addition, there may be legal requirements that determine certain data to be retained for a minimum period.
Cookies and other tracking technologies
A cookie is a small text file that is placed onto your device (e.g., computer, smartphone, or another electronic device) when you use our website. We use cookies on our website. These help us recognize you and your device and store some information about your preferences or past actions.
For further information on cookies, our use of cookies, when we will request your consent before placing them, and how to disable them, please see our Cookie Policy.
Analytics
We use third-party analytics services (such as Google Analytics) as well as self-hosted data collection services on our Services to collect and analyze usage information through cookies and similar technologies; engage in auditing, research, or reporting; assist with fraud prevention; and provide certain features to you. To prevent Google Analytics from using your information for analytics purposes, you may install the Google Analytics Opt-out Browser Add-on.
Advertising
We may work with several companies that assist in marketing our services to you on third-party websites, mobile apps, and online services. These third parties may use cookies, web beacons, or other tracking technologies to collect information about your use of certain parts of the Services and your activities across other websites and online services, which they may associate with persistent identifiers.
Their activities and your choices regarding their use of your information to personalize ads to you are subject to and set out in their own policies. We neither have access to, nor does this Privacy Policy govern, the use of cookies or other tracking technologies by third parties.
Marketing
We would like to send you information about our services, as well as other services in which you may be interested. We will ask whether you would like us to send you marketing messages when you first register with us.
If you have previously agreed to being contacted in this way, you can unsubscribe at any time by:
- Contacting us at the email address or postal address below
- Using the ‘unsubscribe’ link in emails or ‘STOP’ number in texts
It may take up to 5 business days for this to take place.
For more information on your rights in relation to marketing, see ‘Your rights’ below.
Your rights
Under the UK General Data Protection Regulation (UK GDPR), you have several important rights free of charge. In summary, those include rights to:
- Access: the right to be provided with a copy of your personal data (the right of access).
- Rectification: the right to require us to correct any mistakes in your personal data.
- Erasure: the right to require us to delete your personal data—in certain situations.
- Restriction of processing: the right to require us to restrict processing of your personal data—in certain circumstances, e.g., if you contest the accuracy of the data.
- Data portability: the right to receive the personal data you provided to us, in a structured, commonly used, and machine-readable format and/or transmit that data to a third party—in certain situations.
- Object: the right to object to your personal data being processed for direct marketing (including profiling) and in certain other situations to our continued processing of your personal data, e.g., processing carried out for the purpose of our legitimate interests.
- Withdraw consent: the right to withdraw your consent, where we are relying on it as a legal basis for processing your data.
If you would like to exercise any of those rights, please:
- Email, call, or write to us.
- Provide enough information to identify yourself.
- Provide proof of your identity and address (a copy of your driving license or passport and a recent utility or credit card bill).
- Provide the information to which your request relates.
Verifying your identity
When exercising the rights described above, we will request specific information from you to help us confirm your identity and ensure your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
Keeping your personal data secure
We have appropriate security measures in place to prevent personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those who have a genuine business need to access it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Changes to this website Privacy Notice
We may change this Privacy Notice from time to time—when we do, we will inform you via our website.
How to contact us
Please contact us if you have any questions about this privacy notice or the information we hold about you.
If you wish to contact us, please send an email to contact@kaadentals.co.uk or call 01443474441.
Do you need extra help?
If you would like this Privacy Notice in another format (e.g., audio, large print), please contact us using the details above.