Legal

Privacy Policy

Last updated: 26 June 2026

This policy explains how Vestadent Clinic ("we", "us", "our") collects, uses, shares and protects your personal information when you visit our practice, contact us, or use this website. We are committed to protecting your privacy and handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Vestadent Clinic is operated by Vestadent Limited, a company registered in England & Wales (company no. 12993512), whose practice is at 230 Church Lane, London, NW9 8SN. For the purposes of data protection law, Vestadent Limited is the "data controller" responsible for your personal information.

We are registered with the Information Commissioner's Office (ICO), registration number ZC111000.

2. The information we collect

Depending on how you interact with us, we may collect:

• Information you give us — your name, date of birth, address, email address, telephone number, and the details you provide when you enquire or book a consultation.
• Health and dental information — your medical and dental history, clinical notes, X-rays and 3D scans, photographs, treatment plans and records of the care we provide. This is "special category" data and is treated with additional care.
• Payment information — details needed to process payment for treatment. Card payments are handled by our payment provider; we do not store full card numbers.
• Information collected automatically — when you use this website we may collect limited technical data such as your device type, browser and pages viewed. See our Cookie Policy for details.
• Information from third parties — for example a referring dentist or specialist, or a person you have authorised to act on your behalf.

3. How and why we use your information

We use your information to:

• provide dental care, plan treatment and keep accurate clinical records;
• manage appointments and communicate with you about your care;
• process payments and keep financial records;
• meet our legal, regulatory and professional obligations (for example to the GDC and CQC);
• respond to enquiries, feedback or complaints;
• maintain the security and proper functioning of our website.

Our lawful bases for processing under the UK GDPR are: contract (to provide the services you request), legal obligation, legitimate interests (to run our practice safely and efficiently), and consent where required. For health information, we also rely on Article 9(2)(h) — the provision of health care and treatment by, or under the responsibility of, a health professional.

4. Who we share your information with

We only share your information where necessary, and we require anyone who handles it to keep it secure. We may share information with:

• dental laboratories and specialists involved in your treatment;
• our trusted service providers (for example IT, secure data hosting and payment processing) acting on our instructions;
• regulators, professional bodies and insurers where we are required or permitted to do so;
• other healthcare providers, such as your GP or a hospital, where this is in your interests and lawful.

We do not sell your personal information. We do not use it for third-party marketing without your consent.

5. International transfers

We keep your information within the UK and do not routinely transfer it outside the UK. If we ever need to, we will put appropriate safeguards in place as required by law — such as relying on UK "adequacy" regulations, or using an International Data Transfer Agreement (IDTA).

6. How long we keep your information

We keep dental records for as long as we are required to under professional guidance and law. As a general guide, adult records are kept for at least 11 years after the last treatment, and records for children are kept until the patient reaches the age of 25 — whichever is the longer period. Other information is kept only for as long as needed for the purpose for which it was collected.

7. Keeping your information secure

We use appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access, and we keep these measures under review.

8. Your rights

Under data protection law you have the right to:

• be informed about how we use your information;
• request a copy of the information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to erase information, or to restrict or object to its use, in certain circumstances;
• request the transfer of your information in certain circumstances;
• withdraw consent at any time where we rely on consent.

Some of these rights are limited where we must keep clinical records for safety and legal reasons. To exercise any right, please contact us using the details below.

9. Cookies

This website uses a small number of cookies and third-party resources. Please see our Cookie Policy for full details.

10. How to contact us or complain

If you have a question about this policy or wish to exercise a right, please contact us:

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the chance to put things right first.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.