An overview of data protection
General
The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy found below.
Data collection on our website
Who is responsible for the data collection on this website?
The data collected on this website are processed by the website operator. The operator’s contact details can be found in the website’s required legal notice.
How do we collect your data?
Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form.
Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site. Hashed version of your personal data is also used for creating Facebook Custom Audiences (details in p. 5 Facebook Custom Audiences).
When you submit health or dental-related data (such as via our treatment assessment or consultation forms), we use this information to evaluate your treatment suitability, respond to inquiries, and recommend appropriate services. This data is considered special category personal data under Article 9 UK GDPR and is processed only with your explicit consent or where required for the provision of healthcare services.
What rights do you have regarding your data?
You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.
Analytics and third-party tools
When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and analytics. The analysis of your surfing behavior is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. Details can be found in our privacy policy under the heading “Third-party modules and analytics.”
You can object to this analysis. We will inform you below about how to exercise your options in this regard.
General information and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.
If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Notice concerning the party responsible for this website
Dentaprime UK Plc
Registration Number: 08654069
10 Orange Street, Haymarket
London
WC2H 7DQ
Telephone: 0203 868 9195
Email: f3t.privacy@dentaprime.com
Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
Right to file complaints with regulatory authorities
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities.
Right to data portability
You have the right to have data which we process based on your consent or in fulfilment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Information, blocking, deletion
You have the right to be provided at any time with information free of charge about any of your personal data that is stored. You also have the right to have this data corrected, blocked or deleted.
Opposition to promotional emails
We prohibit use of published contact data for sending unsolicited advertising. Legal action may be taken in the event of unsolicited promotional material.
Phone calls and video calls
All our calls are recorded for quality and training purposes. Video calls are recorded with video.
Call Tracking and Recording
To improve our services and evaluate the effectiveness of our marketing, we use call tracking technology (e.g., Freespee). When you call us, your call may be routed through a tracking number and may be logged and recorded for analysis purposes.
Purpose and Legal Basis
The purpose of this processing is quality control, booking coordination, and marketing analytics. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. Where required by law, we rely on your explicit consent under Article 6(1)(a) GDPR.
Recipients
Access to call data is limited to our authorized advertising agency personnel and the technical provider Freespee, both of whom act as Data Processors . Data Processing Agreements (DPAs) are in place to ensure compliance.
Retention and Access
Call data (including recordings) are stored only as long as necessary for the stated purposes and are then deleted. Access to these recordings is strictly controlled, logged, and limited to what is necessary.
Your Rights
You have the right to request access to your call data or request its deletion at any time. We have processes in place with our processors to respond to such requests promptly.
Data protection officer
Statutory data protection officer
Email: f3t.privacy@dentaprime.com
Data collection on our website
Cookies
Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are stored pursuant to Art. 6 paragraph 1, letter f of GDPR. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyze your surfing behavior) are also stored, they will be treated separately in this privacy policy.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are:
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
These data will not be combined with data from other sources.
The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.
Contact form
Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.
We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) GDPR. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
Leaving comments on this website
If you use the comment function on this site, the time at which you created the comment and your email address will be stored along with your comment, as well as your username, unless you are posting anonymously.
How long comments are stored
The comments and the associated data (e.g. IP address) are stored and remain on our website until the content commented upon has been completely deleted or the comments are required to be removed for legal reasons (slander, etc.).
Legal basis
The comments are stored based on your consent per Art. 6 (1) (a) GDPR. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
Health and Dental Data Form Submission
When you submit your health or dental status via our online consultation forms, we collect this sensitive information to determine your suitability for dental treatment and to prepare for possible consultations. Your data is processed securely and shared only with authorized personnel involved in your treatment planning. This information is only collected with your explicit consent, which is provided via a checkbox at the end of the form.
Retention of Health and Dental Data
We retain health-related data submitted via our online forms only for as long as necessary to evaluate your needs or provide follow-up consultation. If you do not proceed with treatment, we will delete your submitted health data within 12 months, unless required by law to retain it longer. Data retained for treatment records will be kept according to applicable medical and legal standards.
Data Security for Special Category Data
We implement strict access controls and encryption protocols to protect special category personal data, including health and dental information. Only authorized clinical and administrative staff have access to this data, and it is stored securely in line with UK data protection regulations.
Analytics and Advertising
Google Analytics
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
IP anonymization
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
Browser plugin
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.
For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the UK data protection authorities when using Google Analytics.
Demographic data collection by Google Analytics
This website uses Google Analytics’ demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section “Refusal of data collection”.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.
Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.
Conversion cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
For more information about Google AdWords and Google Conversion Tracking, see the Google Privacy Policy: https://policies.google.com/privacy.
You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).
reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.
The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place.
Data processing is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.
For more information about Google reCAPTCHA and Google’s privacy policy, please visit the following links: https://policies.google.com/privacy and https://www.google.com/recaptcha/intro/android.html.
Facebook Pixel
Our website measures conversions using visitor action pixels from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
These allow the behavior of site visitors to be tracked after they click on a Facebook ad to reach the provider’s website. This allows an analysis of the effectiveness of Facebook advertisements for statistical and market research purposes and their future optimization.
The data collected is anonymous to us as operators of this website and we cannot use it to draw any conclusions about our users’ identities. However, the data are stored and processed by Facebook, which may make a connection to your Facebook profile and which may use the data for its own advertising purposes, as stipulated in the Facebook privacy policy. This will allow Facebook to display ads both on Facebook and on third-party sites. We have no control over how this data is used.
Facebook Custom Audiences
We use Facebook Custom Audiences to improve our targeting capabilities and thus enhance our advertising activities. The process includes uploading lists of emails, phone numbers and other data of existing customers. This data is hashed locally in advance, cross-referred against the Facebook existing users’ hashed IDs, and then the matches are added to our Custom Audiences. Please note that hashing turns all your data into short fingerprints that can’t be reversed. It happens before your data is sent to Facebook.
For more information on Custom Audiences, please visit: https://www.facebook.com/business/help/341425252616329
Check out Facebook’s privacy policy to learn more about protecting your privacy: https://www.facebook.com/about/privacy/.
You can also deactivate the custom audiences remarketing feature in the Ads Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You will first need to log into Facebook.
We also use visitor action pixels from the EU based companies Salesforce.com and Adroll.com.
If you do not have a Facebook account, you can opt out of usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/uk/your-ad-choices.
Offline Conversion Tracking with Google Ads
We may from time to time upload certain limited information—such as a hashed version of your email address or telephone number—to Google Ads in order to attribute offline interactions (for example, appointments booked by phone or in-clinic) to our digital advertising campaigns. This helps us measure the effectiveness of our marketing and improve the services we offer.
Before sharing any such data, we apply industry-standard pseudonymisation techniques (including secure hashing via SHA-256) and limit all data to only what is necessary for matching purposes. We do not share any raw personal identifiers.
These transfers may involve processing by Google LLC in the United States. We rely on the European Commission’s Standard Contractual Clauses (SCCs), as implemented by Google’s Ads Data Processing Terms, to ensure an adequate level of protection for your personal data in accordance with UK data protection law.
You have the right to object to this type of processing at any time by contacting us using the details set out below or adjusting your cookie and privacy preferences.
You may opt out of our use of your data for advertising attribution (Offline Conversion Tracking) by contacting us at f3t.privacy@dentaprime.com
Advertising Attribution and Google Ads
When you interact with our website or book an appointment, we may use your contact details (e.g. email address or phone number), in a pseudonymised (hashed) format, to measure the effectiveness of our advertising campaigns. This allows us to determine whether a Google Ads campaign resulted in an offline booking or treatment request.
We only do this where you have given consent through our cookie banner or booking form, or where a legitimate interest applies and we believe the impact on your privacy is minimal.
Data used for this purpose is pseudonymised using secure hashing (SHA-256) and retained for no longer than 90 days. You may withdraw your consent or object to this processing at any time by contacting us.
Third-party platforms used in our data processing and marketing activities
We work with the following providers and share certain categories of personal data with them for marketing, automation, and tracking purposes:
- Meta (Facebook & Instagram): Receives personal and technical data (e.g. name, email, phone, IP address, browser metadata, treatment interest, and URL/page titles mentioning treatment) for analytics and custom audience creation.
- Google: Receives similar data as Meta for tracking and ad performance evaluation including hashed email or phone data in certain cases.
- GetResponse: Stores personal information (title, name, phone, email) for communication and marketing automation.
- JotForm: Collects personal information (title, name, phone, email), technical details (UTM/page URL), as well as health information and responses to treatment interest questions. Includes confirmation of policy consent.
- Make Automation: Receives data captured through JotForm and processes it for automation purposes. Please note that this provider may process data in the United States. We use appropriate safeguards such as Standard Contractual Clauses.
Make: A no-code automation platform that receives and processes data captured through forms and other digital systems for the purposes of automation, analytics, and campaign attribution. This may include personal data such as name, contact details, treatment interest, and technical metadata. Make is operated by Celonis SE and may process data on servers located outside the UK/EU. Where applicable, we rely on Standard Contractual Clauses (SCCs) or other safeguards to ensure lawful international data transfers.
These tools and processors support our ability to respond to inquiries, schedule appointments, and manage digital marketing. Data transfers outside the UK or EU are protected by appropriate legal mechanisms
Legal Basis for Processing Sensitive Personal Data
We may collect and process special category personal data—specifically related to your dental and general health—when you fill out a consultation form or health assessment.
We rely on the following legal bases under the UK GDPR:
- Article 6(1)(a): The data subject has given explicit consent.
- Article 9(2)(a): The data subject has given explicit consent for the processing of such data.
- Article 9(2)(h): Processing is necessary for the provision of healthcare or treatment.
You can withdraw consent at any time using the contact details provided.
Newsletter
Newsletter data
If you would like to receive our newsletter, we require a valid email address as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.
We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1) (a) GDPR. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the “unsubscribe” link in the newsletter. The data processed before we receive your request may still be legally processed.
The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. email addresses for the members area) remain unaffected.
This website uses the services of Service OS to manage and send newsletters.
Important Notice: Service OS is a cloud-based platform that is not certified under the EU-US Privacy Shield or an equivalent adequacy mechanism. Therefore, any international transfer of data to Service OS (if applicable) is safeguarded through standard contractual clauses and other legally permitted mechanisms under UK GDPR.
Plugins and tools
YouTube
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.
If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.
Further information about handling user data, can be found in the data protection declaration of YouTube under https://policies.google.com/privacy.
Vimeo
Our website uses features provided by the Vimeo video portal. This service is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
If you visit one of our pages featuring a Vimeo plugin, a connection to the Vimeo servers is established. Here the Vimeo server is informed about which of our pages you have visited. In addition, Vimeo will receive your IP address. This also applies if you are not logged in to Vimeo when you visit our website or do not have a Vimeo account. The information is transmitted to a Vimeo server in the US, where it is stored.
If you are logged in to your Vimeo account, Vimeo allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.
For more information on how to handle user data, please refer to the Vimeo Privacy Policy at https://vimeo.com/privacy.
Google Web Fonts
For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
When you call up a page of our website that contains a social plugin, your browser makes a direct connection with Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.
If your browser does not support web fonts, a standard font is used by your computer.
Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/.
Google Maps
This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.
Further information about handling user data, can be found in the data protection declaration of Google at https://policies.google.com/privacy.
JotForm
Our website uses plugins from JotForm, which is operated by JotForm Inc. The operator of the pages is JotForm Inc, 111 Pine St. Suite 1815, San Francisco, CA 94111, USA
If you visit one of our pages featuring a JotForm plugin, a connection to the Jotform servers is established. Here the Jotform server is informed about which of our pages you have visited.
JotForm tools are used to help us collect users information when a user wants to submit a request. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.
Further information about handling user data, can be found in the data protection declaration of JotForm at https://www.jotform.com/privacy
Cross-Border Advertising and Treatment Offers to U.S. Residents
Dentaprime UK PLC may from time to time provide information or treatment offers to individuals located outside the United Kingdom, including residents of the United States, who have expressed interest in our dental services or have provided their contact and health information through marketing channels, consultation forms, or referral from affiliated providers.
If you are a U.S. resident and have opted in to receive communications from Dentaprime UK PLC, we may collect and process your personal data — including name, contact details, health-related responses, and marketing preferences — for the purpose of evaluating your suitability for treatment, providing you with promotional offers, and arranging consultation or appointment scheduling. Such data may originate from forms you complete on our website or through partnerships with clinics operating outside the UK (such as Dentaprimary Office NYC PLLC).
All such data is processed only:
- With your explicit consent, which you may withdraw at any time, and
- In accordance with Article 6(1)(a) and Article 9(2)(a) of the UK GDPR, and
- Using appropriate security, access control, and encryption protocols
We treat all international patient data with the same level of protection as required by UK data protection law.
We do not sell or rent personal information. Any data shared with third-party marketing or automation platforms is strictly controlled, and protected through Standard Contractual Clauses or equivalent safeguards where data is transferred internationally.
Payment Information & Third-Party Processing
We use Stripe Payments Europe, Ltd. (“Stripe”) to securely process card payments. Stripe is a PCI DSS Level 1 certified payment processor. When you make a payment, your card details are processed directly by Stripe on our behalf. We do not store or have access to your full card number or CVV.
Stripe may retain tokenised card details (i.e., a secure reference to your card) to allow for staged treatment payments, deposits, or follow-up care charges, in accordance with your signed consent.
We rely on the lawful basis of performance of a contract (UK GDPR Article 6(1)(b)) to process this payment data, as it is necessary to provide you with dental treatment services.
You can view Stripe’s privacy policy at: https://stripe.com/gb/privacy
Concerns and Questions
Dentaprime UK Plc
10 Orange Street, Haymarket
London
WC2H 7DQ
f3t.privacy@dentaprime.com
If your inquiry relates to your submitted dental or health data, please clearly indicate this in your communication so that we may handle your request with the necessary level of confidentiality and data protection required for special category data.
Privacy Policy – Version 2.0
Effective Date: 16 July 2025
Last Updated: 16 July 2025