Winchmore Hill Dental Practice

Privacy Policy

Who We Are

Our website address is: https://winchmorehilldental.co.uk.


Our Data Protection Principles

The protection and security of your personal data is of paramount importance to us. Your personal data is used strictly in compliance with EU General Data Protection Regulations (GDPR) 2018. We aim to make you feel secure regarding the collection, use, and protection of your personal data.

It is important that you are aware of:

  • Which personal data is collected during your visit or use of our services.

  • How we use your personal data.

  • How we protect your personal data from manipulation, loss, destruction, or improper use.


Collection and Use of Personal Data

Personal data is any information that allows for your identification, such as your name, address, phone number, or email address (“Personal Data”). We collect and use Personal Data only if permitted by law or with your explicit consent.

We collect data from our patients primarily to provide dental treatment. This data is stored securely on our server and may be shared with our third-party practice management provider, strictly for operational purposes.

a. Contact Requests

Your personal data is used exclusively to respond to contact requests.

b. Patient Registration

Without your explicit consent, we only use your personal data to carry out your registration at our practice.

c. Online and Offline Advertising

With your express consent, we may send surveys, service updates, oral health education messages, and newsletters. Marketing communications may be sent via email, phone, or print.

d. Right to Object

You can withdraw consent or object to marketing at any time by contacting us via email, phone, or in person.

e. Online Applications

When you apply online for jobs, training, or internships, your information is used solely to process your application and is deleted once it is no longer needed.


Comments

When visitors leave comments, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to help with spam detection.

An anonymized string (hash) of your email may be sent to the Gravatar service to check if you are using it. After your comment is approved, your profile picture is visible publicly. You can view Gravatar’s privacy policy here.


Media

If you upload images, avoid including embedded location data (EXIF GPS), as visitors can extract such information from the images.


Cookies

  • When leaving a comment, you may opt-in to save your name, email, and website in cookies for convenience. These cookies last one year.

  • Visiting the login page sets a temporary cookie to check if your browser accepts cookies, discarded upon closing the browser.

  • Login cookies save your login information and preferences; they last two days (screen options) or two weeks if “Remember Me” is selected.

  • Editing or publishing articles sets an additional cookie for one day, which only stores the post ID.


Embedded Content from Other Websites

Articles may include embedded content (e.g., videos, images). Embedded content behaves as if the visitor accessed the other website directly. These third-party websites may collect data, use cookies, or monitor interactions if you are logged in.


Who We Share Your Data With

  • Password reset requests include your IP address in the email.

  • Third-party providers (e.g., practice management systems) may have access to personal data strictly for operational purposes.


Data Retention

  • Comments and metadata are retained indefinitely to allow for automatic approval of follow-up comments.

  • Registered users’ personal data is stored in their profile, which can be viewed, edited, or deleted by the user. Administrators can also manage this information.


Your Rights

You may request:

  • An exported copy of your personal data.

  • Erasure of your personal data, except data retained for administrative, legal, or security purposes.


Data Security

We implement technical and organizational measures to protect personal data against manipulation, loss, destruction, or unauthorized access. Our security protocols are continuously updated to stay aligned with technological advancements.


Where Your Data is Sent

Visitor comments may be checked through automated spam detection services.