Dentist2Go Privacy Notice
DRAFT v0.1. Publishable after a sanity pass; ICO-template-aligned. Version: [1.0] · Effective date: [DATE]
Who we are
Dentist2Go is a trading name of Vallace Digital Ltd (company number 16925416, registered office 124 City Road, London, EC1V 2NX). We are the controller of the personal data described here. ICO registration: registration completed, reference to follow. Contact: help@dentist2go.uk. We have not appointed a DPO because we are not required to; privacy questions go to the same address.
The most important thing to know
Dentist2Go is designed so that we never hold information about your health. The video call happens before any appointment, is strictly non-clinical, and is not recorded. There are no symptom fields, no medical history forms and no clinical notes anywhere on the platform. Every free-text box tells you not to enter health details, and we remove clinical details if they appear. What we hold is contact and booking information, nothing more.
What we collect and why
Patients
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, email, mobile (verified), postcode | Your account, matching you to nearby practices, booking and reminders | Contract |
| Booking history, call attendance, outcomes, optional decline categories | Running the introduction service, the rematch flow, no-show rules | Contract |
| Reports you make or that concern you, feedback categories | Safety of the service, reviewing conduct | Legitimate interests (keeping the service safe) |
| Marketing preference | Emailing you about new practices only if you opted in | Consent (withdraw any time) |
| Technical logs (IP, errors) | Security and fixing faults | Legitimate interests |
Practice staff: business contact details, role, GDC attestation records, billing records. Lawful bases: contract and legal obligation (tax records).
What we deliberately do not collect: health information, card details from patients (we never charge patients), video or audio of calls (never recorded), and analytics identifiers (our analytics are cookieless and aggregate).
Automated decisions
None that affect you without a person involved. Account suspensions are always reviewed and confirmed by a person before they take effect.
Who receives your data
Service providers acting for us under contract: Supabase (database and login), Vercel (hosting), Daily (video call infrastructure; calls pass through it live and are not stored), Resend (email), Twilio (SMS), Stripe (practice billing only; patients have no payment data), Plausible (cookieless analytics, EU-hosted), Sentry (error monitoring, EU region) and [helpdesk provider]. Where a provider processes data outside the UK, we rely on UK adequacy or the UK International Data Transfer Agreement/Addendum.
When you and a practice both choose to proceed after a call, we give the practice your contact details and you theirs. From that point the practice is an independent controller of your data under its own privacy notice.
We do not sell personal data. We disclose it to authorities only where the law requires, and we keep a record when that happens.
How long we keep it
| Data | Retention |
|---|---|
| Account and booking data | While your account is active, then 24 months after closure, then deleted |
| Reports | 12 months if unsubstantiated; longer only where action was taken |
| Feedback free text | 12 months, then purged |
| Suspension records | Duration of suspension plus 12 months |
| Practice billing records | 6 years (tax law) |
| Pre-launch signup list | Until launch in your area plus 6 months, or until you unsubscribe |
Your rights
You can ask for a copy of your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interests. You can withdraw marketing consent at any time in your account or via the unsubscribe link. To exercise any right, email help@dentist2go.uk; we respond within one month. Deleting your account is self-serve in account settings; some records are kept for the periods above where the law or safety requires.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), though we would welcome the chance to sort it out first.
Cookies
We use only cookies that are strictly necessary to sign you in and keep the service secure. No analytics or marketing cookies exist on the site, so there is no consent banner. Details are in the Cookie Policy.
Changes
We will post changes here with a new version number and date, and email you about any change that materially affects you. Previous versions are available on request.