Privacy Policy

Who We Are

Cedars Endo is a specialist endodontic practice providing assessment, root canal treatment, retreatment and related specialist dental care.

For personal information collected directly through this website and through our practice services, Cedars Endo is responsible for deciding how that information is used and protected.

Information We May Collect

The information we collect depends on how you interact with Cedars Endo.

Personal information may include:

• your name;
• date of birth;
• postal address;
• email address;
• telephone or mobile number;
• gender where relevant to your care;
• appointment and consultation information;
• information contained in messages or enquiries sent to the practice;
• details supplied by your referring dentist;
• referral dates, treatment priorities and information about the tooth or teeth being referred;
• uploaded radiographs or other clinical records;
• relevant dental and medical information;
• communication preferences and consent choices; and
• limited technical information generated when you use our website.

Health and Clinical Information

Some information processed by Cedars Endo relates to your health, dental condition, diagnosis or treatment. Health information is classed as special category personal data under UK data-protection law.

Clinical information may be supplied directly by you or by a dentist or healthcare professional involved in your care.

Our dentist referral form may include information such as:

• the tooth or teeth requiring assessment;
• clinical notes;
• referral priority;
• radiographs;
• treatment history;
• the reason for referral; and
• other information necessary to assess and manage the referral.

How We Use Your Information

Cedars Endo may use personal information to:

• respond to enquiries;
• arrange consultations and appointments;
• assess dentist referrals;
• provide specialist dental treatment;
• maintain appropriate clinical records;
• communicate with patients about their care;
• communicate with referring dentists and other healthcare professionals involved in the patient’s care;
• send referral confirmations where requested;
• process clinical documents and radiographs;
• manage payments, accounting and practice administration where applicable;
• meet professional, regulatory and legal obligations;
• maintain the security and performance of our website and digital services;
• investigate complaints or concerns; and
• improve the way the practice and website operate.

Our Lawful Basis for Processing

UK data-protection law requires organisations to have an appropriate lawful basis when processing personal information.

Depending on the circumstances, Cedars Endo may process information because:

• processing is necessary to provide or arrange dental care;
• processing is necessary in connection with a contract or steps requested before entering into a contract;
• Cedars Endo has a legal or professional obligation;
• processing is necessary for legitimate interests, provided those interests do not override your rights;
• processing is necessary for the provision or management of healthcare; or
• you have provided consent where consent is the appropriate legal basis.

Special Category Health Data

Where we process information about health or dental treatment, an additional condition under UK data-protection law is required. Healthcare information will generally be processed where necessary for the provision or management of health or dental care and subject to appropriate confidentiality safeguards.

When Information May Be Shared

Cedars Endo does not sell personal information.

Information may be shared where appropriate with organisations or professionals involved in delivering, supporting or administering your care. These may include:

• your referring dentist;
• your general dentist;
• relevant healthcare professionals;
• dental laboratories or imaging providers where required;
• authorised members of the Cedars Endo team;
• professional advisers;
• IT, hosting, website, email or data-storage providers acting on our instructions;
• payment or accounting providers where applicable; and
• regulators, professional bodies, courts, law-enforcement authorities or other organisations where disclosure is required by law.

Where an external supplier processes personal information on our behalf, appropriate contractual and security safeguards should apply.

How We Protect Information

Cedars Endo uses organisational and technical measures intended to protect personal information against unauthorised access, accidental loss, disclosure, alteration or misuse.

Measures may include:

• access controls;
• password protection;
• HTTPS encryption for the website;
• restricted access to clinical information;
• secure website and server configuration;
• software and security updates;
• appropriate backup procedures;
• staff confidentiality responsibilities; and
• secure procedures for handling referral information and clinical records.

No internet transmission or computer system can be guaranteed to be completely secure. Cedars Endo therefore reviews security measures as part of its ongoing practice and website management.

How Long We Keep Information

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable clinical, professional, regulatory, insurance, accounting and legal obligations.

Different categories of information may have different retention periods. Clinical records may need to be retained for longer periods than general website enquiries.

When information is no longer required, it should be securely deleted, anonymised or otherwise disposed of in accordance with the practice’s retention procedures.

Website, Cookies and External Services

The Cedars Endo website may use cookies and similar technologies to provide essential website functions, remember privacy choices and, where permission has been provided, support analytics or external services.

Essential Cookies

Some cookies may be required for website operation, security, form handling and the storage of your privacy preferences.

Non-Essential Cookies

Non-essential cookies or services should not be activated unless the appropriate consent has been provided where required.

Google Maps and External Media

Where the website displays Google Maps or other third-party external content, the service may receive information including your IP address and technical information about your browser or device.

Cedars Endo uses a consent-controlled approach for embedded Google Maps so that the map is not loaded until the relevant external-media permission has been provided.

International Data Transfers

Some technology or service providers used by websites and businesses may process or store information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards should be used where required by UK data-protection law. These may include an adequacy regulation or approved contractual safeguards.

Your Data-Protection Rights

Depending on the circumstances and the legal basis being used, you may have rights under UK data-protection law.

These can include the right to:

• request access to personal information held about you;
• request correction of inaccurate or incomplete information;
• request deletion of information in circumstances where the law provides that right;
• request restriction of processing;
• object to certain forms of processing;
• request transfer of certain information in a portable format where applicable;
• withdraw consent where processing is based on consent; and
• complain to the UK Information Commissioner’s Office.

Some rights are not absolute. For example, Cedars Endo may be required to retain certain clinical records even if a patient asks for them to be deleted.

To exercise a data-protection right, contact the practice using the details at the end of this policy.

Information Commissioner’s Office

If you remain concerned about how your personal information has been handled, you also have the right to raise a concern with the Information Commissioner’s Office, the UK’s independent data-protection regulator.

Visit the Information Commissioner’s Office website

Children’s Information

Cedars Endo may provide treatment to patients who are under 18 where clinically appropriate. In those circumstances, information may be provided by or shared with a parent, guardian, dentist or other healthcare professional as appropriate.

The way consent and confidentiality are managed will depend on the patient’s age, understanding, circumstances and applicable professional and legal requirements.

Links to Other Websites

The Cedars Endo website may contain links to third-party websites or services.

Once you leave our website, the privacy practices of the external organisation will apply. Cedars Endo is not responsible for the privacy policies or security practices of unrelated third-party websites.

Changes to This Privacy Policy

We may update this Privacy Policy when our services, website, technology, suppliers or legal obligations change.

The latest version will be published on this page together with the date it was last updated.

Contact Cedars Endo

If you have a question about this Privacy Policy, how your information is handled or your data-protection rights, please contact Cedars Endo.