Privacy notice for patients including children

The practice is committed to complying with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, GDC, NHS and other standards. Mere Dentistry is the controller responsible for your personal data. We collect and process your personal data when you provide the information requested on this form or request more information about or purchase a product or service.

• Personal details such as your address, date of birth, phone number and email address
• This is for the provision of dental health care, providing treatment plans, estimates and recalls
• Details of your NHS or e.g. Dental Plan Provider number and entitlement to healthcare treatment and exemption status if applicable
• Personal details of family members or emergency contact details
• Medical history including your GP’s name and address
• Past and present dental history including x-rays and photographs
• Information about the treatment we have proposed and provided along with its price.
• Notes of conversations or incidents that might occur for which a record needs to be kept
• Records of permission or consent for treatment.
• Correspondence to other healthcare professions such as referrals
• Financial information relating to your treatment
• Details of any complaints made

We only collect the personal data about you requested on this form and that you otherwise provide to us AND We may collect, use, store and transfer different kinds of personal data about you as well as the information on this form. This data may include identity data, contact data, financial data, transaction data, technical data, profile data, usage data and marketing and communications data.

We use CCTV on our premises for the purposes of security, safety, and the prevention and detection of crime. The use of CCTV is clearly signposted and monitored in accordance with our CCTV policy and the requirements of data protection law.

For more information, please refer to our CCTV Policy, which is available <on request/from reception/on our website>.

We need to keep records of personal information regarding our patients in order to provide safe and appropriate dental care and treatment. It is also used to maintain accurate treatment records.

We also need to process personal data about you if we are providing care under NHS arrangements and to ensure the proper management and administration of the NHS. And further we will only use your personal data for the purpose for which we collected it, which includes to register you as a new patient and, to process and provide your treatment, to manage your relationship with us and provide you with dental care, marketing or customer relationships and, to recommend products or services which may be of interest to you.

• Consent
• Legitimate interest - Processing is necessary for the performance of our care for patients and for defence of legal claims
• Data relating to your health care records is classed as special category data. Our legal basis for processing this is that it falls under Legal claims or judicial acts and Health and Social Care (Article 9 UK GDPR (f,h)).

We will only share your information if it is done securely, and it is necessary for us to do so.

Your personal information may be securely shared with other healthcare professionals who need to be involved in your care.

• The General Dental Council
• The CQC/HIW/HIS/RQIA
• Dental payment plans or insurers
• NHS Bodies if NHS dental care and treatment is provided

• Your Information is stored securely at the practice on protected computer systems. Computer information is backed up regularly and may be securely stored away from our premises.

• We are required to retain your dental records, X-rays and study models while you are a patient of this practice and after you cease to be a patient for a minimum of 11 years.
• There are several other documents that we may collect that have a variety of retention dates.

• Access
• Rectification
• Erasure
• Restriction
• Portability

If you have any concerns about how we use your information you can contact our Data Protection Officer via email at contact@meredentistry.co.uk

• Personal details such as your address, date of birth, phone number and email address
• Personal details of family members or emergency contact details
• Medical history including your GP’s name and address
• Information about the treatment we have proposed and provided
• Notes of conversations or incidents
• Correspondence such as referrals.

If you are under 13, we will usually ask your parent, or carer, to agree.

For children – we will retain your dental records for 11 years or until you reach the age of 25 (or 26 th birthday is young person finished treatment at 17 years old) (whichever is longer).

For details of your rights under data protection laws, including the right to receive a copy of the personal data we hold about you and the right to make a complaint at any time to the Information Commissioner's Office, the UK regulator for data protection issues (www.ico.org.uk), please contact our Data Protection Officer via email at contact@meredentistry.co.uk