Privacy Policy
How we collect, use, and protect your information
South Kensington Medical and Dental ("the Clinic", "we", "us", or "our") is committed to protecting your privacy and ensuring your personal data is handled in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
South Kensington Medical and Dental is a private healthcare provider offering medical and dental services. We are the data controller for the personal information we collect from you.
Contact Details:
- Address: 20 Old Brompton Road, South Kensington, London SW7 3DL
- Phone: 020 7043 4315
- Email: info@teethwhitening.london
Information We Collect
We may collect and process the following types of personal information:
Personal Identification Information
- Name, date of birth, and contact details
- NHS number (if applicable)
- Emergency contact information
- Proof of identity documents
Health Information
- Medical history and current health conditions
- Dental records and treatment history
- Test results and diagnostic images
- Prescription and medication details
- Allergies and adverse reactions
Financial Information
- Payment card details (processed securely)
- Insurance information
- Billing records
Technical Information
- IP address and browser type
- Pages visited on our website
- Cookies and similar technologies
How We Use Your Information
We use your personal information for the following purposes:
- Healthcare provision: To provide medical and dental care, including diagnosis, treatment, and follow-up care
- Appointment management: To schedule, confirm, and remind you of appointments
- Communication: To respond to enquiries and provide relevant healthcare information
- Legal obligations: To comply with legal and regulatory requirements
- Service improvement: To improve our services and patient experience
- Billing and payments: To process payments and manage accounts
- Safety and security: To maintain a safe environment for patients and staff
Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract: Processing necessary to provide healthcare services you have requested
- Legal obligation: Processing required by law (e.g., maintaining medical records)
- Vital interests: Processing necessary to protect your life or health in emergencies
- Legitimate interests: Processing for clinic administration and service improvement
- Consent: Where you have given explicit consent for specific purposes
For special category data (health information), we rely on the exemption for healthcare purposes under UK GDPR Article 9(2)(h).
Sharing Your Information
We may share your information with:
- Healthcare providers: GPs, specialists, hospitals, and other medical professionals involved in your care
- Insurance companies: Where you have authorised us to share information for claims
- Laboratories: For diagnostic testing and analysis
- Regulatory bodies: Such as the CQC, GDC, or GMC where required
- Legal authorities: Where required by law or court order
- Service providers: IT support, payment processors, and administrative services (under strict confidentiality agreements)
We will never sell your personal information to third parties for marketing purposes.
Data Security
We implement appropriate security measures to protect your personal information, including:
- Encrypted storage of electronic records
- Secure access controls and authentication
- Regular security audits and staff training
- Physical security measures for paper records
- Secure disposal of confidential information
Data Retention
We retain your personal information in accordance with legal requirements and professional guidelines:
- Adult medical records: 8 years after last treatment or until age 25, whichever is longer
- Children's records: Until the patient reaches age 25 or 8 years after last treatment
- Dental records: 11 years from the date of last treatment
- Financial records: 7 years for tax purposes
Your Rights
Under UK data protection law, you have the right to:
- Access: Request a copy of your personal information
- Rectification: Request correction of inaccurate information
- Erasure: Request deletion of your information (subject to legal retention requirements)
- Restriction: Request limited processing of your information
- Portability: Receive your data in a portable format
- Objection: Object to certain types of processing
- Withdraw consent: Where processing is based on consent
To exercise any of these rights, please contact us using the details above. We will respond within one month of receiving your request.
Cookies
Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device that help us understand how you use our website.
We use:
- Essential cookies: Required for the website to function properly
- Analytics cookies: To understand how visitors use our website
- Marketing cookies: To deliver relevant advertisements (with your consent)
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.
CCTV
CCTV cameras operate in public and communal areas of the clinic for security purposes. Footage is stored securely and retained for up to 30 days unless required for investigation. CCTV is never used in private treatment rooms.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Last updated: December 2025
Complaints
If you are unhappy with how we have handled your personal information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
We would appreciate the opportunity to address your concerns before you contact the ICO. Please contact us first at info@teethwhitening.london.