Limited Time Sale
--d
--h
--m
--s
The Whitening Clinic (“we”, “us”, “our”) is a UK-based dental clinic specialising exclusively in professional teeth whitening using the Boutique Whitening system. We operate an online booking platform, where clients pay a £30 non-refundable deposit to secure their appointment. If you proceed with whitening treatment, this deposit will be credited towards the cost of your treatment. If you cancel or do not attend, the deposit is forfeited.
We are committed to safeguarding your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information in compliance with the UK GDPR (General Data Protection Regulation), the Data Protection Act 2018, and other relevant laws.
We are registered with the Information Commissioner’s Office (ICO) as a data controller, meaning we determine how and why your data is processed.
We collect only the data necessary to provide whitening treatments, manage appointments, and meet legal obligations. Information is collected when you:
– Book appointments online or via our website
– Complete medical history and consent forms
– Communicate with us via phone, email, or web forms
– Attend consultations or treatment appointments
Personal Data Collected:
– Identification & Contact Information: Full name, date of birth, address, phone number, email address
– Booking & Payment Data: Appointment details, deposits, payment confirmations (processed securely; we do not store card details)
– Medical Information: Health history, medications, allergies (essential for whitening suitability)
– Treatment Records: Whitening sessions, progress notes, photographs (where clinically necessary and consented)
– Online Interactions: Enquiries submitted via our website or email
– Emergency Contact Details (optional)
– Preferences & Feedback: Service preferences and feedback surveys (if consented)
We do not collect or process sensitive data such as racial/ethnic origin, religious beliefs, or sexual orientation.
Your personal data is processed only for legitimate purposes:
– To deliver whitening treatments and customise care plans
– To manage online bookings, deposits, reminders, and follow-ups
– For secure billing and payment administration
– To meet CQC and healthcare compliance requirements
– To communicate essential updates about your appointments or treatments
– To respond to enquiries or provide patient support
– To maintain accurate clinical and financial records
– For internal audits, quality assurance, and anonymised service improvement
We do not use your data for unsolicited marketing without explicit consent.
Under UK GDPR, we rely on the following lawful bases:
– Contractual Necessity: To provide whitening services as booked.
– Legal Obligation: Compliance with CQC, dental regulations, and tax laws.
– Legitimate Interests: Running the clinic efficiently and securely.
– Consent: When explicitly given (e.g., newsletters, photographs for results tracking).
– Provision of Healthcare (Special Category Data): Processing health information necessary for treatment.
We only share data when necessary:
– Boutique Whitening (whitening provider, if required)
– Payment Processors (for secure online deposits)
– Practice Software Providers (encrypted dental record systems)
– Regulatory Bodies (CQC, ICO, HMRC if legally required)
– IT & Administrative Services (bound by strict confidentiality agreements)
– Referrals to Other Healthcare Professionals (only with your consent)
We do not sell or trade personal data under any circumstances.
We employ industry-standard security measures:
– Encrypted digital patient records and payment systems
– Password-protected software with role-based access control
– Secure physical storage (where paper records exist)
– Staff training and signed confidentiality agreements
– Encrypted backups and secure servers
– ICO-compliant breach notification protocols
While we use robust safeguards, no system is 100% secure. We continually review and update our measures to mitigate risk.
We retain patient records for at least 11 years (or until age 25 for minors), in line with dental regulatory standards. Non-clinical data (e.g., enquiries) will be securely deleted when no longer required.
Our website uses cookies to:
– Improve site performance and user experience
– Track anonymised visitor behaviour using Google Analytics (no personal data stored)
– Enable secure booking and payment functions
You may block cookies via your browser settings. For more details, see: www.allaboutcookies.org
Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout
We do not provide whitening treatments to anyone under 18. We do not knowingly collect data from children under this age. If we become aware of any such data, it will be deleted.
Under UK GDPR, you have the right to:
– Be informed how your data is used
– Access your records (request copies)
– Rectify incorrect information
– Request erasure (“right to be forgotten”) in specific cases
– Restrict processing (pause data use in certain situations)
– Data portability (transfer your data to another provider)
– Object to processing (e.g., direct marketing)
– Avoid automated decisions/profiling (we do not use this)
– Withdraw consent at any time (where consent was given)
To exercise these rights, email info@thewhiteningclinic.co.uk.
You may also contact the ICO: www.ico.org.uk or call 0303 123 1113.
Our website does not currently respond to DNT browser signals due to the lack of an agreed global standard.
In line with GDPR Article 6.1 (“public interest”), we may contact patients with relevant updates about health and safety measures affecting appointments (e.g., COVID-19 protocols).
In line with GDPR Article 6.1 (“public interest”), we may contact patients with relevant updates about health and safety measures affecting appointments (e.g., COVID-19 protocols).
For any questions, concerns, or to exercise your data rights, please contact:
The Whitening Clinic
1 King William Street, London EC4N 7AR
Phone: [Insert Phone Number]
Email: info@thewhiteningclinic.co.uk
Please ask for our Practice Manager or Data Protection Lead. We aim to respond promptly and in accordance with legal timeframes
