Introduction

At All Smiles Dental Practice, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information in compliance with the Data Protection Act 2018, the General Data Protection Regulation (GDPR), and professional guidelines. By using our services, you agree to the terms outlined in this policy.

Data Controller

The Data Controller for your personal information is Dr. Ashish Deved, who is also our Information Governance Lead.

You can contact us at:

• Website: www.allsmilesdental.co.uk
• Email: info@allsmilesdental.co.uk
• Phone: 0208 460 1065
• Address: 97 High Street, Bromley, BR1 1JQ.

How We Collect Personal Information

When you join our practice, we will ask you to provide certain personal information in order to deliver the best possible healthcare services. We may also collect personal information when you refer a patient, subscribe to our email list, or engage with us for any other reason.

Types of Data We Collect

We process the following categories of data:

1. Personal Data:

   • For managing staff and self-employed team members.
   • For communication purposes (e.g., email, direct mail, text messages).

2. Special Category Data:

   • Health records for providing healthcare services.
   • Criminal record checks for managing employees and contracted team members.

Use of CCTV

We have CCTV cameras installed in public areas (e.g., corridors, waiting areas, and staff rooms) for safety and security purposes. The CCTV does not record audio, and images are not stored for longer than necessary.

Sharing of Personal Data

We will not share your personal information with third parties unless:

• We have a contract with the third party to process data on our behalf.
• You have consented to us sharing your information, for example, if you are referred to another healthcare provider.
• It is necessary for legal or regulatory compliance.

Storage of Personal Data

Personal data is stored securely in England, either in digital or physical format. We ensure that appropriate technical and organizational measures are in place to protect your data from unauthorized access, disclosure, alteration, or destruction.

Retention of Personal Data

We retain personal data for the following periods:

• Patient health records: A minimum of eleven years, or longer in case of complex records to meet legal requirements.
• Staff records: Retained for six years.
• Other personal data: Retained for a minimum of two years after the last processing event.

Further details regarding retention periods can be found in our Record Retention Procedure, available upon request.

Legal Basis for Processing Personal Data

We process personal data and special category data based on the following lawful bases:

1. Consent: Where you have given explicit consent, especially for marketing or communication.
2. Contractual Necessity: To fulfill our contract with you or to take steps to enter into a contract.
3. Legal Obligation: To comply with legal or regulatory requirements.
4. Public Interest or Vital Interests: For providing healthcare services.

Your Rights

As a data subject, you have the following rights:

1. Right to be Informed: You have the right to be informed about the data we hold about you and how we process it.
2. Right of Access: You can request a copy of the personal data we hold about you.
3. Right to Rectification: If your data is incorrect or incomplete, you have the right to request a correction.
4. Right to Erasure: You can request the deletion of your personal data, subject to legal retention requirements (e.g., clinical records).
5. Right to Restrict Processing: You can request the restriction of processing of your personal data.
6. Right to Data Portability: You can request your data in a format that allows you to transfer it to another organization.
7. Right to Object: You can object to the processing of your personal data in certain circumstances.

You can exercise any of these rights by contacting us at info@allsmilesdental.co.uk or by calling us at 0208 460 1065.

Privacy Impact Assessment

We conduct regular Privacy Impact Assessments to ensure compliance with data protection laws. A copy of our latest Privacy Impact Assessment can be requested by contacting us.

Security of Your Data

We take the security of your personal data seriously. Our Security Risk Assessment (M217M) and Information Governance Procedures outline the steps we take to safeguard your data.

Comments, Suggestions, and Complaints

If you have any concerns or complaints regarding how we handle your personal data, please contact Dr. Ashish Deved at info@allsmilesdental.co.uk or call us at 0208 460 1065. You can also visit the practice at 42 High Street, Bromley, BR1 1EA. We take all complaints seriously and will respond promptly.

If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner’s Office (ICO). You can contact the ICO at 0303 123 1113 or visit their website for more information.