At BJS Dental, we are dedicated to safeguarding your privacy and upholding the highest data protection standards. We comply with the Data Protection Act 2018, GDPR, and adhere to the guidelines set by the Information Commissioner’s Office, as well as our professional guidelines.

Who We Are

The data controller for BJS Dental can be identified upon request by contacting our practice directly. This person is also responsible for information governance and, where applicable, serves as the Data Protection Officer.

Our Privacy Notice

A detailed version of our Privacy Notice is available at our practice’s reception, via email, or by calling us. For contact details of specific branches, please visit our website.

Collection and Use of Personal Data

When you join BJS Dental, we collect personal information to provide you with optimal dental care. This includes:

• Personal data for staff and team member management.
• Marketing data for direct mail/email/text/other communications.
• Health records for delivering health care.
• Health records and criminal record checks for managing employees and contracted team members.

We only share your personal data with third parties when necessary and keep it confidential otherwise. Patient referrals to other practitioners or secondary care will always be done with your explicit permission.

When you submit a form on our site, we may contact you to confirm your submission, or follow-up via email or phone.

Data Storage and Security

• Personal data is stored in the EU and in the US under the EU-US Privacy Shield certification.
• Data is collected upon joining the practice, during referrals, or when subscribing to our email list.
• When submitting the NHS Waitlist Form, Consultation Form or other forms on the site, we will store your submission so we can contact you.

Legal Basis for Processing Data

• Special category data like health records are processed for medical diagnosis, health care delivery, or under a contract with a health professional.
• Personal data is processed based on consent or as necessary for fulfilling a contract with you.

Retention of Data

• Patient records are retained for a minimum of 10 years or longer for complex records.
• Staff records are kept for 6 years.
• Other personal data is retained for 2 years after last processing.

Your Rights

You have several rights under GDPR, such as the right to be informed, access, rectification, erasure, and more. Specific examples include withdrawing consent for notifications or correcting personal details. Our Information Governance Procedures provide more details.

Privacy Impact and Security Assessments

Details of our Privacy Impact Assessment and Security Risk Assessment are available upon request.

Feedback and Complaints

For comments, suggestions, or complaints about data processing, please contact the Practice Manager at our local branch. Visit our website for contact details and our comprehensive complaints procedure.

Information Commissioner’s Office (ICO)

If you are unsatisfied with our response or need advice, contact the ICO. Their helpline is 0303 123 1113, and their website offers information on data protection complaints.

Related Practice Procedures

Contact us to request copies of our Data Protection and Information Security Policy, Consent Policy, Privacy Impact Assessment, Information Governance Procedures, and Data Opt-Out Policy.

NHS and Care Services Data Use

BJS Dental and other health/care organizations use your data to improve services, research, disease prevention, safety monitoring, and planning. You can opt-out of your confidential patient information being used beyond individual care at www.nhs.uk/your-nhs-data-matters.

Our Practices’ Data Use

We use your personal health data solely for providing individualized care and are compliant with national data opt-out policies.