data protection policy

At evergreen dentist we are totally committed to both protecting and respecting your privacy.

This Data Protection Statement explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. 

This Data Protection Statement outlines how we collect, use, disclose, and manage your personal data in compliance with English data protection laws, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. 

By using our dental services, and the associated public facing websites you consent to the practices described in this Data Protection Statement. If you do not agree with the terms outlined herein, please refrain from using our services. 

1. Data control

The Evergreen Dental Centre & Castle Hill Dental Care Ltd ("we," "us," or "our") located at 448 Wokingham Road, Earley RG6 7HX and 1c Tilehurst Road, Reading RG1 7TW act as the data controllers for the personal data you provide to us. If you have any questions about your data or this statement, you can contact us at admin@evergreen.dentist 

2. Personal information

We collect and process personal information for various purposes, including but not limited to providing dental services, managing appointments, billing, and maintaining patient records. The types of personal data we may collect include: 

• Name, address, and contact details 

• Date of birth 

• Medical history and dental records 

• Treatment information and notes 

• Records of your communications with us, including emails and other correspondence 

• Payment and insurance details 

• Information related to your use of our website, such as IP address,
  browser type, device information, and website analytics 

3. Processing personal data

Our lawful basis for processing personal data includes: 

• The necessity of processing for the performance of a contract (providing dental services)

• Compliance with a legal obligation (maintaining accurate records),
  and legitimate interests (managing appointments and sending reminders). 

• Providing and improving our website's functionality and user experience. 

• Legitimate interests pursued by us or a third party 

4. Patient records

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this statement, unless a longer retention period is required by law. Patient records will be kept for a minimum of 11 years after the last contact, in accordance with guidelines from the General Dental Council. 

5. Third parties

We may share your personal data with third parties as necessary for the provision of dental services and to fulfil legal obligations. This may include: 

• Service providers and suppliers assisting us in running our dental clinics,
   website and business operations. 

• Dental laboratories, 

• Membership schemes as administered by Practice Plan, insurance companies,
  regulatory authorities. Legal authorities or other third parties if required by law
  or to protect our rights and interests. 

We ensure that any third parties with access to your data are compliant with data protection regulations. 

6. Marketing Communications 

We may send you appointment reminders and important practice updates. If you wish to receive marketing communications, we will ask for your explicit consent before doing so. 

7. Data Transfers 

Your personal data may be transferred to, and stored at, destinations outside the European Economic Area (EEA) for the purposes described in this statement. We will take all steps necessary to ensure that your data is treated securely and in accordance with this statement. 

8. Security 

We take the security of your personal data seriously. We implement appropriate technical and organizational measures to safeguard your information against unauthorised access, loss, or destruction.

9. Your Rights 

You have the following rights with respect to your personal data: 

• Access: Request access to the personal data we hold about you. 

• Rectification: Request correction of inaccuracies in your personal data. 

• Erasure: Request the deletion of your personal data, subject to legal obligations. 

• Restriction: Request restriction of processing in certain circumstances. 

• Data Portability: Request a copy of your personal data in a commonly used format. 

• Objection: Object to the processing of your personal data for certain purposes. 

• Withdrawal of Consent: If processing is based on your consent, you can withdraw it at any time. 

To exercise these rights, please contact us using the details provided above. 

Last updated September ‘23 
Next review September ‘24