Privacy Notice

Who we are

The Ashcroft Clinic, 14 Ashcroft House, Montpellier Parade, Harrogate, HG1 2TJ, is the data controller for the information described here. Questions and requests go to privacy@ashcroftclinic.co.uk or by post to the address above, marked for the attention of the practice manager.

What we collect

• From the enquiry form: your name, email address, an optional telephone number, which clinic and treatment area you selected, and whatever you type in the message box.
• If you become a patient: your date of birth, address, GP details, medical history, clinical notes, radiographs, photographs and scans, and a record of payments.
• From this website: nothing beyond what your browser sends to load the page. There is no analytics, no advertising pixel and no third-party script on this site, so there is nothing that requires a cookie banner.

Why we hold it, and on what basis

Enquiry details are processed on the basis of our legitimate interest in answering people who contact us. Clinical records are processed because we need them to provide health care and because we are legally required to keep them; the special-category basis is the provision of health treatment by a professional bound by a duty of confidentiality.

How long we keep it

• Enquiries that do not become appointments: twelve months, then deleted.
• Adult clinical records: eleven years from the date of the last treatment.
• Records for children: until their twenty-fifth birthday, or eleven years from last treatment, whichever is later.
• Financial records: seven years, as required for tax.

Who we share it with

Only where it is necessary for your care or required by law: the dental laboratory that makes your crown or denture, a specialist we refer you to, your own dentist or GP where you have asked us to write to them, and our indemnity provider if a claim arises. We do not sell data, and we do not share it for marketing.

Where it is stored

Clinical records are held in practice management software hosted in the United Kingdom. Backups are encrypted and held in the UK. Nothing is transferred outside the UK or the European Economic Area.

Your rights

You can ask for a copy of what we hold, ask us to correct anything inaccurate, ask us to delete information we no longer have a reason to keep, object to processing, or ask us to restrict it while a dispute is resolved. We respond within one calendar month and there is no charge.

Note that we cannot delete clinical records inside the retention periods above, because we are required to keep them. If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.

This is a demonstration site

The Ashcroft Clinic is a fictional practice, and this site was built by Omnify Labs to demonstrate design and build quality. The enquiry form on this site validates your input and then does nothing with it — no data is transmitted, received or stored anywhere. The policy above describes how a live version of this site would operate.