In this policy, we explain how we collect and use your personal information when you visit our website, use our services or otherwise communicate with us.
Please note that links from our website may take you to external websites which are not operated by us or covered by this policy. We recommend that you check their privacy policies before submitting any personal information to other sites.
We are The Town Hall Group Ltd (company number 13064086) and we’re based at The Old Town Hall, Thornton Square, Brighouse, West Yorkshire, England, HD6 1EA.
The Town Hall Group Ltd is the controller and responsible for this website for the purposes of the Data Protection Act 2018 and the EU General Data Protection Regulation as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act of 2018 (UK GDPR) which means that we decide how and why we use your personal data within our business.
If you have any questions about your privacy on our website, or our use of your personal data, please contact us.
PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT
You are not required (by law or by any contract with us) to provide personal information to us via our website. We will only require you to provide personal information to us where it is necessary for us to provide you with a service at your request.
Providing our Services
We will collect personal information about you if you enquire about, or purchase, the products and dental services that we offer, and if you subscribe to our newsletter and/or email notifications. This may include:
- Information to identify you, such as your full name, date of birth, age and gender, where relevant.
- Contact information, such as your postal address, email address and telephone number.
- Additional information relevant to your use of our website, services and the resources that you access such as your marketing preferences, survey responses and feedback.
- Information regarding your appointment history.
- Information provided to us when you communicate with us for any reason.
- System information such as browser agent and version, to assist in diagnosing technical problems, time zone setting and location, browser plug-in types and other technical data.
- Payment information (securely collected and processed by our bank or payment provider).
We may also collect special category information from you, which includes information about your health, including medical history (we may get this information from application forms or consent forms you have filled in, from notes and reports about your health and any treatment and care you have received or need from us, or it may be recorded in details of contact we have had with you). We will only process this special category information to the extent that it is necessary for us to do so in order to carry out our health care or treatment services.
We have a legitimate interest in efficiently and effectively managing and operating our business, and improving the services that we offer, to give you the best experience that we can. The information that we collect and store relating to you is primarily used to enable us to provide our services to you. We may use your information so that we can:
- Provide you with information about our products or services.
- Meet our contractual commitments to you.
- Contact you about any changes that we make to our website or services.
- Deal with any complaints you may have.
- Verify your identity.
- Administer our website, including troubleshooting problems, analysing statistics, conducting research and tests and keeping the site secure.
Promoting our Services
We may use the personal information that we hold about you (such as your name and email address) to identify and tell you about our products and services that we think may be of interest to you. This includes our newsletter. If you are a customer or we have provided you with a quote for our products and/or services, we may also contact you with information about similar products and services that we offer.
We have a legitimate interest to use your personal information in this way to promote our services and further our business, but you may contact us at any time to let us know if you do not wish to receive these messages.
If you’re not a customer, we will not use your personal contact details for marketing purposes unless you have given us consent to do so, and you may withdraw your consent or update your preferences at any time by contacting us.
We may use the personal information that we hold about you (such as your medical history and treatment details) to carry out medical research and to prepare case studies, including to demonstrate that particular treatments have quantifiable benefits. We have a legitimate interest to use your personal information in this way to allow us to make improvements to our services and to promote our services and further our business. However, where possible, we will anonymise your information for these purposes.
Information we collect on our website
When you visit our website, we may collect the following information:
- Which pages you view and which links you follow.
- Your IP address and general location.
- Details of the hardware and software that you are using to access the site.
- Any passwords that you use on our website.
- If you choose to log in using a third party, we will record your login provider.
- A device identifier (cookie or IP address) for fraud prevention.
- Details of your visits to our website and the resources that you access, including, but not limited to, traffic data, location data, web logs and other communication data.
Keeping in touch
Information we receive about you from other sources
Sometimes you will have given your consent for other websites, services or third parties (including insurance providers or previous dentists) to provide information to us.
This could include information we receive about you if you use any of the other websites that we operate or the other services that we provide, in which case we will have informed you when we collected that data if we intend to share those data internally and combine it with data collected on this website. We will also have told you for what purpose we will share and combine your data.
It could also include information from third parties that we work with to provide our services, such as your medical doctor or previous dentist, third party clinicians (when sharing treatment opinions), referrals from groups that we work with (such as homeless and refugee groups) in order to provide our services to you, payment processors, delivery companies, technical support companies and advertising companies. Whenever we receive information about you from other third parties, we will let you know what information we have received and how and why we intend to use it.
How else might we use your personal data?
In some cases, we may collect personal information about you from other sources. This may include:
- Publicly available information from sources such as Companies House and the Electoral Roll.
- Information you have shared publicly, including on social media.
- Information from third party databases, such as credit reference agencies.
We may use your information where it is necessary for us to do so in order to meet our legal obligations or to detect and prevent fraud, money-laundering and other crimes. We may also use your information where it is necessary to protect your interests, or the interests of others, or in accordance with our legal obligations. This may include in the event of criminality such as identity theft, piracy or fraud.
We will only use your personal information for the purposes we collected it for (as explained in this policy) unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?
We share the information that you provide to us with our staff and group companies so that we can manage our business and provide our services to you. We may also share your information with selected third parties, such as:
- Our web hosting provider, Crawford Designworks, to host the website and related services and applications.
- Payment service providers, for making and receiving payments.
- Third party couriers for deliveries.
- Our suppliers and distributors.
- Third party dental platforms, such as Powerful Bi
- Contact management systems to send emails, instant messages and SMS messages.
- Our trusted professional advisers such as lawyers and accountants, where appropriate.
- Third party clinicians, such as The Breathe Institute and Dr. Theodore Belfor D.D.S., to obtain professional opinions on patient treatment strategy. We will only do this where you have given your consent, or where we have anonymised the personal data prior to sharing it.
We may disclose your information to other third parties where we believe that the disclosure is:
- Required by the law, or in order to comply with judicial proceedings, court orders or legal or regulatory proceedings.
- Necessary to protect the safety of our employees, our property or the public.
- Necessary for the prevention or detection of crime, including exchanging information with other companies or organisations for the purposes of fraud protection and credit risk reduction.
- Proportionate as part of a merger, business or asset sale (in the event that this happens we may share your information with the prospective seller or buyer involved).
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
We will only store your personal information for as long we need it for the purposes it was collected. For example, payment information will only be held for as long as necessary to process the transaction. Where we provide you with any service, we need to retain the information we hold about you for at least as long as we continue to provide that service to you.
If you are a customer, we may retain the information we hold about you, including your contact details and appointment history, for a period of 11 years.
If you are a user of our website or we have otherwise been in contact with you, we may retain the information we hold about you for a period of up to 3 years.
Thereafter, and in all other circumstances, we will only keep your information for as long as is strictly necessary to allow us to achieve the original purpose for which that information was collected.
PROTECTING YOUR PERSONAL INFORMATION
We put in place appropriate security measures to keep your personal data secure and to prevent unauthorised access.
Information that you provide via our website is hosted with Crawford Designworks on secure third-party servers in the UK. We try to ensure that all information you provide to us via the website is transferred securely but we recommend always checking the padlock symbol in your browser and “https” in the URL before submitting information. However, the transmission of information via the internet is not completely secure and therefore we cannot guarantee the security of your data transmitted to our website and transmission of such data is therefore entirely at your own risk. Where we have given you (or where you have chosen) a password so that you can access certain parts of our site, you are responsible for keeping this password confidential.
WHAT RIGHTS DO YOU HAVE?
You have a number of rights in respect of your personal data. If you would like any further information or to exercise any of your rights, please contact us. In most cases, we will not charge you any fee if you wish to exercise any of these rights.
The right to be informed
We have a legal obligation to provide you with concise, transparent, intelligible and easily accessible information about your personal information and our use of it. We have written this policy to comply with this right, but please contact us if you require further information.
The right to access your personal data
You have the right to ask us to confirm whether or not we hold any of your personal data. If we do, you have the right to access a copy of your data, as well as information about how, and why, we use it. In order to prevent your data being disclosed to someone who is not authorised to access it, we may have to verify your identity before we provide you with a copy of the data that we hold.
The first copy of your information that you request from us will be provided free of charge, if you require further copies we may charge an administrative fee to cover our costs. Please contact us if you wish to request access to our data.
The right to correct any inaccurate or incomplete personal data
If the information that we hold about you is inaccurate or incomplete, you have the right to require us to correct that data (or complete it by supplementing it with other information).
The right to be forgotten
You have the right to require us to delete or destroy your personal data in the following circumstances:
- The information is no longer needed for the purposes we collected it for.
- Where we rely on your consent, and you withdraw that consent.
- You object to us using your information for marketing purposes, or for our legitimate interests, and we have no overriding reason to keep using it.
- We have used your information unlawfully.
- We are required by law to delete your information.
If these situations apply, you may contact us to request that we erase your data from our systems.
The right to have your data transferred to you or a third party in a common format
Where your personal data is processed by automated means, you may have the right to obtain a copy of your personal data in a structured, commonly used and machine-readable format, and to ask us to transfer this data to another organisation in a safe and secure way.
You have the right to object to direct marketing
You can ask us at any time to stop using your information for direct marketing purposes, even if we do not rely on your consent to do this. You may exercise this right by following the instructions in any of the emails that we send to you, or by contacting us.
The right to object to us using your information for our own legitimate interests
Sometimes, we use your personal information to achieve goals that will help our business – these are our legitimate interests, and they are explained in more detail in this policy.
We aim to always ensure that your rights and information are properly protected. If you believe that the way we are using your data is not justified due to its impact on you or your rights, you have the right to object to our use of your data in these ways. If you do object to this, unless we have a compelling reason to continue we will stop using your personal data for these purposes.
You have the right to restrict how we use your personal data
You have the right to ask us to stop using your personal data in any way other than simply keeping a copy of it. This right is available where:
- You have informed us that the information we hold about you is inaccurate, and we have not yet been able to verify or update this.
- You have objected to us using your information for our own legitimate interests and we are in the process of considering your objection.
- We have used your information unlawfully, but you do not want us to delete it.
- We no longer need to use the information, but you need it for a legal claim.
This version was last updated on 6th April 2021 and historic versions can be obtained by contacting us.
If you wish to make a complaint about our collection or use of your personal data, please contact us in the first instance so that we may seek to resolve your complaint.
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the statutory body which oversees data protection law in the UK. Please visit the ICO website if you wish to lodge a complaint with the ICO. If you are based in another European Union member state, you may instead lodge a complaint with the supervisory authority in your country.
What is this notice about?
If your parent or guardian books a dental appointment for you with us, in person, over the phone or via our website, then we will need to know a bit of information about you in order to arrange your appointment and provide our dental services to you (for example, when you need a check-up appointment or a specific dental treatment).
We respect and are committed to protecting your personal privacy, and we have made this notice to explain to you how we use your personal information.
What sort of information do we need?
We will ask your parent or guardian for the following personal information about you:
- Your full name
- Your address
- Your date of birth
- Your medical history and appointment history
- Information about the dental treatment(s) you will be receiving
What do we use this information for?
We will only use this personal information to provide our dental treatments and services to you.
We may need to share your information with third parties such as: (i) our third party dental platform provider; (ii) our trusted professional advisers such as lawyers and accountants (where appropriate); and (iii) other clinicians, to obtain professional opinions on your treatment strategy, but we will not give your information to anyone else without telling you (or your parent or guardian) first.
Where can I find more information?
You can ask us at any time to explain in more detail how we use your personal information, and you can ask us to provide you with a copy of the information about you that we hold.
You can also ask us to correct or delete the information that we hold about you and you may object to us using your information in certain circumstances.
You should talk to your parent or guardian if you have any questions about your privacy, or, if you wish to speak to us directly, you can contact us by clicking on this link or by emailing: firstname.lastname@example.org.