Privacy Policy

Introduction

Luminous Dental Collective ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website or use our dental services.

We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We may collect and process the following categories of personal data:

• Contact details: name, address, email address, and telephone number.
• Dental and medical records: treatment history, X-rays, clinical notes, and relevant medical history necessary for providing safe dental care.
• Billing information: payment method details, insurance provider information, and transaction records.
• Website usage data: IP address, browser type, pages visited, and cookies (see our Cookie Policy for details).

How We Use Your Information

We process your personal data for the following legitimate purposes:

• Providing dental treatment and managing your clinical care.
• Scheduling and managing appointments and communications.
• Processing payments and managing insurance claims.
• Maintaining accurate dental and medical records as required by law and professional regulations.
• Improving our services, facilities, and patient experience.
• Complying with our legal and regulatory obligations as a dental practice registered with the General Dental Council (GDC).

Legal Basis for Processing

We process your personal data under the following legal bases: (a) your consent; (b) the performance of a contract for the provision of dental services; (c) compliance with our legal obligations as a healthcare provider; and (d) our legitimate interests in operating and improving our practice.

Data Sharing and Third Parties

We do not sell your personal data. We may share your information with trusted third parties who support our operations, including: dental laboratories, specialist referral partners, payment processors, our practice management software provider, and IT support services. All third parties are bound by confidentiality obligations and data protection agreements.

We may also disclose your information where required by law, court order, or regulatory authority, or to protect the rights, property, or safety of our patients, staff, or the public.

Data Retention

We retain your dental records in accordance with GDC guidelines and NHS retention schedules. Adult dental records are typically retained for 11 years after the last treatment, and child records until the patient's 25th birthday. Website data is retained for a maximum of 24 months.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• The right to access your personal data and receive a copy.
• The right to rectify inaccurate or incomplete information.
• The right to request erasure of your data (subject to legal exceptions).
• The right to restrict or object to the processing of your data.
• The right to data portability.
• The right to withdraw consent at any time.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include encrypted storage, access controls, regular security reviews, and staff training on data protection.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection Officer at: Luminous Dental Collective, 42 Harley Street, London, W1G 9PL, or email dpo@luminousdental.co.uk.

If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.