Privacy notice
What personal data we collect as a dental practice, why we hold it, how long we keep it and the rights you have under UK and EU GDPR.
Last reviewed 2026-09-23 · Cadbury Dental Practice, 29 Sycamore Road, Bournville, Birmingham B30 2AA
This notice explains how Cadbury Dental Practice, 29 Sycamore Road, Bournville, Birmingham B30 2AA ("we", "the practice") handles personal data. We are the data controller for the information described here. It covers both this website and the patient records we keep as a dental practice.
The data we collect
| Where it comes from | What it includes | Why we need it |
|---|---|---|
| Website enquiry form | Name, email, phone, treatment interest, your answers to the questions you're asked, and any photos you choose to upload | To answer your enquiry and arrange a consultation |
| Phone, email and in-practice conversations | Contact details and the substance of what you ask us | To respond to you and to record clinically relevant information |
| Clinical care | Dental and medical history, examination findings, radiographs, photographs, treatment plans, correspondence, payment records | To provide safe dental care and to meet our professional record-keeping duties |
| This website's technical logs | IP address, browser type, pages requested — held by our hosting provider | To keep the site available and secure |
Our lawful bases
- Health and clinical records: Article 6(1)(c) legal obligation and Article 6(1)(f) legitimate interests, together with Article 9(2)(h) — processing necessary for the provision of health care by a professional bound by a duty of confidentiality.
- Responding to a website enquiry: Article 6(1)(b) steps taken at your request before entering a contract, and Article 6(1)(a) consent for any photographs you upload.
- Optional marketing emails or texts: Article 6(1)(a) consent. You can withdraw it at any time and every message includes an unsubscribe route.
- Non-essential cookies and third-party embeds: Article 6(1)(a) consent, collected through our cookie banner.
How long we keep it
| Record | Retention |
|---|---|
| Adult dental records | 11 years from the date of the last entry |
| Children's dental records | Until the patient's 25th birthday, or 11 years, whichever is longer |
| Website enquiries that do not become patient records | 24 months, then deleted |
| Photographs uploaded through the enquiry form | Deleted with the enquiry, or moved into your clinical record if you become a patient |
| Marketing consent records | Until you withdraw consent, plus 12 months to evidence the withdrawal |
Who we share it with
We do not sell personal data and we do not share it for advertising. We share only what is necessary, with:
- Clinical partners involved in your care — for example dental laboratories, referral specialists, or your GP where relevant.
- NHS Business Services Authority, where your treatment is delivered under an NHS contract.
- Our software and hosting suppliers, acting as processors under written terms (see the Subprocessors section of our Security page).
- Regulators, insurers or legal advisers where we are required or legally entitled to do so.
International transfers
Our website and enquiry database are hosted within the EU/UK region of our infrastructure provider. Where any supplier processes data outside the UK or EEA, that transfer is covered by UK International Data Transfer Agreement provisions or the EU Standard Contractual Clauses.
Your rights
- Access — ask for a copy of the data we hold about you.
- Rectification — ask us to correct anything inaccurate.
- Erasure — ask us to delete data, subject to our legal duty to retain clinical records.
- Restriction and objection — ask us to pause or stop certain processing.
- Portability — receive data you gave us in a machine-readable format.
- Withdraw consent — for marketing or cookies, at any time, without affecting care.
Making a request
Email reception@cadburydental.co.uk or write to us at the practice address, marking it 'Data protection request'. We respond within one calendar month. There is no charge unless a request is manifestly unfounded or excessive.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) in the UK, or to your local supervisory authority in the EU.