Dental marketingThis policy explains what personal data Ampli5 Dental collects, why we collect it, and what rights you have. It covers two different groups of people, and the rules differ for each:
- Visitors and enquirers — people who use this website or contact us about our services. For this data we are the controller.
- Our clients' patients and enquirers — data we handle on behalf of a dental practice. For this data the practice is the controller and we act as a processor under a separate written agreement.
1. Who we are
The verified controller name, trading status, registration details, address and ICO details where applicable must be supplied by the business. No registration is established by the placeholders in the original draft.
For a question about this draft or your information, email hello@ampli5dental.co.uk or write to us at the address above.
2. What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| Name, email, phone, practice name | Responding to your enquiry and arranging a call | Legitimate interests — replying to someone who contacted us |
| Website address and account access you give us | Preparing an audit you have asked for | Legitimate interests, or performance of a contract |
| Client contact details, billing information | Delivering services and invoicing | Performance of a contract |
| Website analytics and cookie data | Understanding how the site is used and improving it | Consent — see our cookie policy |
| Marketing emails, where you have opted in | Sending occasional updates about our services | Consent, withdrawable at any time |
| Call recordings, where used | Quality and training. You will be told at the start of the call. | Legitimate interests, with notice |
We do not knowingly collect special category data through this website, and we ask you not to send us clinical or patient information by email or through the contact form.
3. Data we handle for our clients
When we run campaigns, a CRM, or a reactivation campaign for a dental practice, we may process personal data about that practice's patients and enquirers. In that relationship:
- The practice is the data controller and decides what we may do with the data.
- We act only on the practice's documented instructions, under a written data processing agreement.
- We do not use that data for our own purposes, and we never sell or share it.
- Enquiry data about dental treatment is health-related and treated as confidential accordingly. We keep clinical detail out of marketing systems.
- Data is deleted or returned at the end of the engagement, within the period agreed with the practice.
If you are a patient of one of our client practices and want to know how your data is used, contact that practice directly — they are the controller and hold your record.
4. Who we share data with
We use a small number of third-party services to run the business. Each is bound by its own contract and, where required, appropriate international transfer safeguards.
- Details awaiting verification.
- Details awaiting verification.
- Details awaiting verification.
- Details awaiting verification.
- Details awaiting verification.
- Details awaiting verification.
We do not sell personal data to anyone, ever. We may disclose data where we are legally required to.
5. International transfers
The business must identify actual recipients, countries, access arrangements and any restricted-transfer safeguards. These cannot be verified from the static files and no completed safeguard is claimed here.
6. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that don't become clients | Details awaiting verification. from last contact |
| Client records and correspondence | Duration of the engagement plus Details awaiting verification. for tax and legal purposes |
| Marketing consents and preferences | Until withdrawn, plus a suppression record so we don't contact you again |
| Client patient data we process | As instructed by the practice; deleted or returned at the end of the engagement |
| Website analytics | Details awaiting verification. |
7. Your rights
Data rights depend on the processing and legal basis. You may have rights of access, correction, erasure, restriction, objection and portability, and may withdraw consent where relied on. The usual response period is one month, subject to applicable exceptions.
To exercise any of these, email hello@ampli5dental.co.uk. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 — though we would appreciate the chance to put it right first.
8. Security
The business must confirm its actual access controls, authentication, encryption, retention and incident procedures. This draft does not establish that particular controls or assessments are in place.
9. Changes to this policy
We update this policy when our practices change. The version and date at the top will tell you when it last changed, and material changes will be notified to clients directly.