What This Policy Covers
This policy applies to this website and the information you provide through it. Its purpose is to say in ordinary language what happens to your details once you hand them over — because a policy nobody can follow protects nobody.
The information collected here is modest: this is an informational website with an enquiry route, not an account-based service, and there is nothing to register for. If any part of what follows does not match your experience of using the site, raise it rather than assuming you have misread it.
The Information Collected When You Enquire
Information reaches us because you choose to send it. There is no hidden collection in the background — the enquiry route is the route.
The fields you fill in are what is collected: your name, an email address, a telephone or mobile number, your postcode, the subject, an indication of what you want to happen, and whatever you write in the description. Where an enquiry covers suitability it may also include your answers about previous whitening, when you would like treatment, and how your teeth currently look.
That last category deserves a note. Information about the condition of your teeth is health-related and is treated as more sensitive than your name or postcode. You are not obliged to write anything about your teeth in a first message — if you would rather discuss it at the pre-consultation, say so and keep your enquiry to the practical questions.
Beyond what you type, the site collects general usage information through analytics, described below. That is separate from your enquiry and not linked to it.
What is not asked for
An enquiry does not require bank or card details, identity documents or a full medical history. If anything purporting to come from us asks for those at the enquiry stage, treat it as suspicious.
Why The Information Is Held, And On What Basis
The purpose is narrow: your details answer the enquiry you sent and arrange treatment if you go on to have it. They are not used to build a marketing profile and are not sold.
Under UK data protection law, holding personal information requires a lawful basis — a specific reason recognised by the law rather than a general good intention. Two ordinarily apply here. Consent covers contacting you back: submitting an enquiry means agreeing your details may be used to reach you about that enquiry, and consent given that way can be withdrawn. Contract covers what follows if you proceed — the details needed to arrange the treatment you asked for.
Practically: sending an enquiry is not a standing invitation to be contacted indefinitely about anything else. If you ask us to stop, that request stands on its own and needs no justification.
Where Your Information Is Stored
Details submitted through the site are stored in this website's own database, and no separate copies are kept elsewhere as a matter of routine. That keeps the number of places your information exists deliberately small.
The site is hosted by a third-party web host, hosting.io, stated to be GDPR certified and compliant. A host holds the servers your data physically sits on, so its standards matter as much as ours.
Cookies And Website Analytics
A cookie is a small file a website places on your device, usually so something is remembered between pages or visits can be counted. Cookies are not programs and cannot read your files.
This site uses Google Analytics to understand how visitors use it — which pages get read, how people arrive, roughly where in the country they are. Google Analytics sets cookies to do this. The data is processed anonymously, the “data sharing” option is switched off, and Google Analytics cookies are not combined with other Google services here.
The purpose is aggregate rather than individual: it answers “is the pricing page useful?” rather than “what did this visitor look at?”. It is not connected to your enquiry.
Controlling cookies yourself
Cookies sit under your control too. Every current browser lets you block them, delete those already stored, or refuse third-party cookies, and most offer a private mode that discards them on closing. Those controls apply to every site you visit, not just this one, and blocking analytics cookies will not stop you reading these pages or sending an enquiry.
Third Parties Who May Handle Your Information
Two categories of third party are involved. The web host holds the infrastructure the site and its database run on; it does not use your enquiry for its own purposes. The analytics provider receives usage data about visits, as described above, and does not receive the contents of your enquiry.
Beyond those, your details are not passed to advertisers, data brokers or unrelated companies. Information may be disclosed where the law requires it — a court order or legal obligation — which is a limit on any policy rather than a choice.
This site also links out to others. Once you follow a link away from here you are under somebody else's privacy policy and this one no longer applies — worth remembering before entering personal details on a page you reached through a link.
How Long Information Is Kept
Personal information should not be kept longer than there is a reason to keep it. An enquiry that went nowhere has a shorter useful life than the record of a treatment carried out, and the two are not held on the same footing.
So enquiries are retained while live and for a reasonable period afterwards, and treatment records for as long as there is a legitimate reason. Rather than print a number of months here that may not match current practice, you are entitled to ask how long your own information will be held — and to ask for it to be deleted sooner.
Keeping Information Secure
Submitted information is held in the website database on hosting stated to be GDPR compliant, and access to enquiry details is limited to those who need them to respond to you.
No website can honestly claim to be impossible to breach, and any that does should be treated with suspicion. What is reasonable to state is that appropriate measures are taken and the amount of information held is kept deliberately small — the most reliable protection for data is not collecting more than necessary.
Your own habits matter too. Use a mailbox you control, be wary of unexpected messages asking you to confirm details you already supplied, and remember a genuine reply will not ask for card details out of the blue.
Your Rights Over Your Information
UK data protection law gives you specific, enforceable rights. They are free to exercise and you do not need to give a reason for most of them. Below is what each one means in practice.
Seeing what is held about you, and getting a copy
You can ask to see the personal information held about you and receive a copy. Such a request is confirmed with you first, typically by an email you must respond to — that step exists to stop somebody else requesting your data by pretending to be you. Data is supplied as a machine-readable file and download links are time-limited, so save it promptly rather than leaving it a week.
Having your information deleted
You can ask for your information to be erased. As with access, the request is confirmed with you before it takes effect. Deletion is not always absolute — a legal obligation to retain certain records overrides it, and you should expect to be told plainly if that applies. Because erasure is permanent, be sure before confirming, and keep any reference or token you are given.
Correcting information that is wrong
If something held about you is inaccurate or incomplete, you can ask for it to be corrected. This is the most commonly needed right and the least used — a mistyped email address is ordinary, and correcting it is routine rather than a complaint.
Objecting, restricting, and withdrawing consent
You can object to a particular use, ask for use to be paused while a dispute is looked into, and withdraw consent previously given. Withdrawing consent stops future use; it does not undo something already lawfully done.
Complaining
You can complain about how your information has been handled and expect it to be reviewed rather than dismissed. Separately, and whether or not you complain to us first, you may complain to the UK's data protection regulator, the Information Commissioner's Office. That route is yours by law and needs nobody's permission.
Children And Young People
This website is aimed at adults and is not directed at children. Cosmetic whitening is not a treatment to arrange for a child through a web form, and enquiries are expected from adults acting for themselves.
Where an adult enquires on behalf of someone under 18, that should be stated openly so it can be handled properly rather than processed as an ordinary adult booking. If you are a parent or guardian who believes a child has submitted personal details here, ask for them to be removed.
Changes To This Policy
This policy may be updated as the law develops or the site changes. The version published on this page is the current one, and continuing to use the site after a change means the updated version applies.
No notification is sent when a policy is revised, so re-read this page if you are about to submit personal details after a long gap — advice that holds for any website, not just this one.
Raising A Privacy Question Or Request
We have to be straightforward here, because it affects how you exercise everything described above.
No direct email address, telephone number or postal address is published anywhere on this website. There is therefore no dedicated privacy contact route to give you. Rather than print an address that does not exist: privacy requests should go through the same written enquiry route as everything else, stating clearly that your message concerns your personal data and which right you are exercising.
Label it explicitly — “request to access my data”, “request to delete my data”, “correction request” — and include the details you originally submitted so your record can be found. The contact page explains how the enquiry route works; the Terms & Conditions cover using the website itself.
If a data request goes unanswered for a reasonable period, the right to complain to the Information Commissioner's Office exists for exactly that situation.