Privacy & Cookie Policy

Last updated: 29 September 2026

This policy explains how Chalfont Dentist & Implant Centre collects, uses and protects your personal information, both as a patient and when you use this website. We take your privacy seriously and only use your information to provide your care and run the practice.

Contacting us about your data

Questions about this policy or your personal information are handled by our Principal Dentist, Dr Naresh Hirani. You can contact him at info@chalfontdentist.co.uk, on 01753 888000, or by post to the practice address above.

What information we collect

If you are a patient, we hold the information needed to provide safe dental care, including:

• your name, date of birth, address, phone number and email address;
• your medical history, medications and relevant health information;
• your dental records, including clinical notes, X-rays, scans, photographs, treatment plans and correspondence;
• payment and finance details relating to your treatment;
• details of your GP and any dentist or specialist who has referred you.

If you use this website, we may collect:

• the details you enter into our contact form (name, email, phone number, reason for contact and your message);
• information submitted by a referring dentist through our referral form, which may include the patient’s contact details, date of birth, relevant medical history, and X-rays or photographs;
• anonymous information about how the website is used, but only if you accept analytics cookies (see Cookies below).

How we use your information

• To assess, plan and provide your dental treatment safely.
• To contact you about appointments, reminders, treatment and results.
• To reply to enquiries and process referrals.
• To take payment and, if you choose, to arrange finance or a payment plan.
• To meet our legal, regulatory and professional obligations, such as record-keeping, clinical governance and radiography standards.
• To improve our website, using anonymous analytics where you have agreed.

We do not sell your information, and we do not use it for marketing without your permission. You can opt out of any marketing messages at any time.

Our legal basis

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), we rely on the following:

• Providing your care: to carry out our contract with you and our legitimate interests in running a dental practice. Health information is processed because it is necessary for the provision of health care by, or under the responsibility of, registered health professionals.
• Legal obligations: where the law requires us to keep or share information.
• Consent: for analytics cookies and any optional marketing. You can withdraw consent at any time.

Who we share it with

We only share what is necessary, and only with people who need it to support your care or run the practice, such as:

• other health professionals involved in your care, such as your GP, a hospital or a specialist you are referred to;
• dental laboratories making your crowns, dentures or implant restorations;
• trusted suppliers who provide our practice software, online booking, IT, email, website hosting and secure backups, under contracts that protect your information;
• finance and payment providers, only if you apply for finance or set up a payment plan;
• regulators, insurers or others where the law requires or permits it, for example the General Dental Council or Care Quality Commission.

Online bookings are made through our practice management system’s secure booking portal, which is operated for us by our software supplier.

How long we keep it

• Dental records: in line with professional guidance, we keep adult records for at least 11 years after your last treatment. For children, we keep records until their 25th birthday or for 11 years after their last treatment, whichever is longer.
• Website enquiries that do not lead to you becoming a patient: up to 12 months.
• Referrals: added to the patient’s dental record and kept for the same period as other dental records.

Keeping it secure

Your records are held on secure, password-protected systems with restricted access, and our team is trained in confidentiality and data protection. Information sent through our website forms is transmitted over an encrypted (HTTPS) connection.

Your rights

You have the right to:

• ask for a copy of the information we hold about you (a subject access request), free of charge in most cases;
• ask us to correct anything that is inaccurate;
• ask us to delete or restrict use of your information. We may not be able to delete clinical records we are legally required to keep;
• object to how we use your information, or withdraw consent you have given;
• ask for your information to be transferred to another provider.

To make a request, contact us using the details above. We will respond within one month.

Cookies

Cookies are small files stored on your device. When you first visit this website, we ask whether you accept analytics cookies. They are only set if you click “Accept”. You can change your choice at any time using Cookie settings, a link that also appears at the bottom of every page.

Cookie / technology	Purpose	When it is used
cd_cookie_consent (stored in your browser)	Remembers your cookie choice for 12 months	Always. Strictly necessary
Google Analytics (_ga, _ga_*)	Anonymous statistics on how visitors use the site, to help us improve it. Kept for up to 2 years	Only if you accept

Some pages include content from other services: YouTube videos (shown in privacy-enhanced mode), a Google Map on our Contact page, our Google reviews and our Instagram feed. These services may collect information under their own privacy policies when you view or play that content.

Complaints

If you are unhappy with how we have handled your information, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.