Privacy Notice
Who we are
John G Plummer & Associates Dental Surgeons.
The Data Controller is the Partners.
Information Governance Lead / Data Protection Officer: Andrew Cross
Email: ac@plummers.co.uk | Tel: 01493 378200 | Address: 66 Tan Lane, Caister-on-Sea, Great Yarmouth, NR30 5DT
Why we use your information
We use your personal data to provide safe, effective dental care and to run the practice, including:
– appointments, recalls and reminders
– treatment plans, estimates and communications about your care
– clinical record keeping and legal/regulatory duties
– payments and debt recovery where needed
– referrals (with your permission) and NHS claims where applicable
– service improvement and practice administration
What we collect
This may include your contact details, date of birth, NHS number (if relevant), medical/dental history, treatment records, payments, next of kin/emergency contact details, and (where needed) equality information. We also hold staff data for employment and legal checks.
Lawful basis
We process data under UK GDPR/Data Protection Act 2018 using one or more of:
– healthcare provision (special category condition for clinical care)
– contract (to provide services you request)
– legal obligation (e.g., records, NHS, safeguarding, regulators)
– legitimate interests (running and improving the practice)
– consent (where required, e.g., certain marketing preferences)
Who we share data with
We keep your information confidential. We may share it only when necessary with:
– NHS bodies (for NHS treatment/claims)
– laboratories, insurers (where applicable), and IT system suppliers under contract
– other dental/medical providers for referrals (with your permission)
– regulators/authorities whererequired by law (e.g., GDC/CQC, courts)
Where your data is stored
Records are stored securely in the UK/EU. If data is transferred outside the UK/EU, we use appropriate safeguards.
How long we keep it
Patient clinical records are kept for at least 11 years (longer where required). Staff records are generally 6 years. Other non-clinical data is usually kept for up to 2 years after last use.
Your rights
You can request access to your data, ask for corrections, restrict or object to some processing, and withdraw consent where applicable (e.g., marketing). Clinical records must be retained for legal reasons.
Concerns or complaints
Contact our IG Lead (details above). If you remain unhappy, you can complain to the Information Commissioner’s Office (ICO).
Website Cookies & Analytics
Our website may use cookies to make the site work and to understand how it is used (e.g., analytics such as Google Analytics). You can control cookies through your browser settings.