Effective from: 1st June 2026
Rathnaa Enterprises is a dental and facial aesthetics practice. We are the data controller for your personal information. Our address and contact details are available on our contact page.
We collect your name, address, email, phone number, date of birth, medical history, dental records, treatment notes, photographs, payment details and appointment history. We also collect website usage data via cookies.
You provide most data when you fill forms, book appointments, email us or call. We also collect data from referrals, other healthcare providers, and our online booking system.
We need your data to provide safe dental and facial aesthetic treatments. This includes assessing your suitability for treatments, managing appointments, processing payments, and communicating with you.
We rely on your consent for certain marketing communications. For treatment, we rely on contract (to provide care) and legal obligations (to maintain medical records). We also rely on legitimate interests for practice administration.
We share data with laboratories for dental work, referral specialists, IT system providers, and payment processors. We never sell your data to third parties. We share only what is necessary.
Dental and medical records are kept for at least 11 years after your last treatment, or until you turn 25 if you are a child. Some records may be kept longer for legal or insurance reasons.
You have the right to access your data, correct errors, request deletion (subject to legal retention), restrict processing, object to marketing, and receive a copy of your data in a portable format. You also have the right to withdraw consent for marketing at any time.
Contact us via email or post. We will respond within one month. There is usually no fee. We may ask for proof of identity before releasing information.
We use secure servers, encrypted emails where possible, and access controls. All paper records are kept in locked cabinets. Staff are trained in data protection. In the event of a breach, we will notify the ICO and affected patients as required by law.
Our website uses essential cookies for functionality and analytics cookies to improve performance. You can manage cookie preferences in your browser settings. We do not use tracking cookies for advertising without consent.
We do not routinely transfer your data outside the UK. If a supplier (such as a cloud service) stores data outside the UK, we ensure appropriate safeguards like UK-approved standard contractual clauses.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
We will update this policy from time to time. The latest version will always be on our website. Significant changes will be notified to you by email if we have your address.
For privacy questions, email us or call our practice manager. We will be happy to help.