Privacy policy

1. Who we are

Dentologi is a dental practice directory at www.dentologi.co.uk, operated by Jamjar Studio Ltd(“we”, “us”, “our”), a company registered in England and Wales with its registered office at 46 Alexandra Road, Norwich, NR2 3EB. We are the data controller for the personal data described in this policy, which means we are responsible for deciding how and why it is processed.

For any privacy question, or to exercise your rights, you can reach us at dentologi@jamjar.studio, or by writing to us at the address above.

2. The personal data we collect

Enquiries and “Fix My Smile” requests

When you submit an enquiry or treatment request, we collect the information you choose to give us, which may include your name, email address, phone number, location or postcode, the treatment you’re interested in, your budget and timeframe, any message you write, and any photographs you upload (for example, photos of your teeth or smile).

Health-related information. Photographs of your mouth or teeth, and details about treatment you are seeking, may reveal information about your health. Under UK GDPR this is “special category” data and is given extra protection. We only process it where you have given us your explicit consent by choosing to submit it, and we use it solely to help connect you with a suitable dental practice. Please do not upload photographs or health details you would prefer us not to process.

Practice accounts and claimed listings

If you create an account to claim or manage a practice listing, we collect your name, email address, the password you set (stored in hashed form by our authentication provider), and the practice and contact details you provide. If you purchase a subscription or advertising, our payment provider collects and processes your payment details — we do not store your full card number.

Information we collect automatically

When you visit the site we automatically receive certain technical information, including your IP address, browser type and device information, the pages you view and how you interact with them, and cookie identifiers. See our Cookie policy for detail.

Directory listings

Most of the practice information in our directory is open data sourced from public bodies (such as the Care Quality Commission, NHS organisation data services, Public Health Scotland, Healthcare Improvement Scotland and the HSC Business Services Organisation). Where a listing names an individual dentist or contact, that information comes from these public records. If you are named in a listing and want it corrected or removed, see section 8.

3. How we use your data and our lawful bases

Under UK GDPR we must have a lawful basis for processing your personal data. The table below sets out what we do and why.

Where we rely on consent, you can withdraw it at any time (see section 7). Where we rely on legitimate interests, you can object (see section 7), and we have balanced our interests against your rights.

4. Who we share your data with

We share personal data only as needed to run the service:

• Dental practices.When you submit an enquiry, we pass your enquiry — including the details and photographs you provide — to the dental practice(s) you ask to be connected with, so they can respond. Those practices are independent organisations and act as separate data controllers for how they handle your information.
• Service providers (processors) who handle data on our behalf under contract, including our hosting and database provider, our email-delivery provider, our payment processor, and our website analytics provider. These are described in our Cookie policy and below.
• Authorities and advisers where we are required to by law, or to establish, exercise or defend legal claims.

We do not sell your personal data. The processors we currently use include Supabase (hosting, database and authentication), SendGrid (email delivery), Stripe (payments), Vercel (website hosting) and Google Analytics (usage measurement).

5. International transfers

Some of our service providers are based outside the UK. Where personal data is transferred outside the UK, we rely on safeguards recognised under UK data protection law — such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses — so that your data continues to be protected.

6. How long we keep your data

We keep personal data only for as long as we need it for the purposes above:

• Enquiries and uploaded photographs: kept while we process your request and for a limited period afterwards to handle follow-up and disputes, then deleted or anonymised. You can ask us to delete them sooner.
• Account and listing data: kept for as long as your account is active, and for a reasonable period after closure.
• Payment and transaction records: kept for as long as required by law (generally six years for tax and accounting).
• Analytics data: kept in line with the retention settings of our analytics provider.

7. Your rights

Under UK GDPR you have the right to:

• Be informed about how we use your data (this policy);
• Access a copy of the personal data we hold about you;
• Rectification— have inaccurate data corrected;
• Erasure— ask us to delete your data in certain circumstances;
• Restrict our processing of your data in certain circumstances;
• Data portability— receive certain data in a portable format;
• Object to processing based on our legitimate interests, and to direct marketing at any time;
• Withdraw consentat any time where we rely on it — this won’t affect processing already carried out.

To exercise any of these rights, email us at dentologi@jamjar.studio. We will respond within one month. We will not charge a fee in most cases and may need to verify your identity first.

8. Practice listings — corrections and removal

If you are an individual named in a directory listing, or you represent a listed practice and believe information is inaccurate, out of date, or should be removed, contact us at dentologi@jamjar.studio and we will review and update or remove it as appropriate. Note that some information originates from public open data sources, which we will also point you to where relevant.

9. Cookies

We use cookies and similar technologies. Please see our Cookie policy for a full list and details of how to control them.

10. Children

Our service is intended for adults. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it. If you are submitting an enquiry on behalf of a child, please do so as their parent or guardian.

11. Security

We take appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls and use of reputable infrastructure providers. No system can be guaranteed completely secure, but we work to protect your information and to notify you and the regulator where we are required to in the event of a breach.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date at the top of this page. Significant changes will be highlighted where appropriate.

13. Complaints

If you have a concern about how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO):

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF · Helpline 0303 123 1113 · ico.org.uk