Privacy

Who is responsible

Nick & Janet Donos is the data controller for personal information collected through this website.

For anything about your data (a copy of it, a correction, or its deletion) email info@periodonos.com.

What the forms collect

There are two forms. The enquiry form asks for your name, email address, telephone number, who you would like to see, whether your dentist referred you, and whatever you write in the message box. Only a name and an email address are required. We ask you not to put detailed medical information in it.

The referral form is for dentists referring a patient. It asks for the referring clinician’s name, GDC number, practice and contact details, who the referral is for, and a brief description of the patient’s symptoms of no more than 500 characters. It does not ask for the patient’s name or anything else that identifies them, and we ask dentists not to include X-rays or clinical records.

We collect this to answer you and, where you become our patient, to provide your care. For an enquiry or a referral the lawful basis is our legitimate interest in replying to someone who has asked us to. A description of symptoms is information about health, which is special category data where it could identify someone: we process it for the purposes of providing health care (UK GDPR Article 9(2)(h)), as registered dental professionals bound by a duty of confidentiality.

We do not use any of it for marketing, we do not add you to a list, and we do not sell or share it with anyone for their own purposes.

Each form carries a hidden field that people never see. It catches automated submissions. If it is filled in we answer exactly as we would a real enquiry and send nothing.

Both forms are also checked by Cloudflare Turnstile, which tells people from automated programs. It is loaded only once you start filling in a form, and usually asks nothing of you. To make its check Cloudflare sees your IP address and technical details of your browser and device; it does not use them to advertise to you or to track you across other sites. Our lawful basis is our legitimate interest in keeping the forms free of automated abuse.

What is stored in your browser

One thing, and only if you answer the cookie banner: whether you said yes or no to the measurement cookies below. It is kept in your browser’s own storage rather than in a cookie, because storing the record of a cookie decision in a cookie would mean setting one before you had agreed to any.

Nothing else. No login, no advertising cookies, no tracking pixels, and no profile about you.

Measuring how the site is used

We use Google Analytics to count visits and see which pages people look at. It sets cookies named _ga and _ga_<id> on your device and records things like the pages you viewed, roughly where in the world you are, and what kind of device and browser you used.

Nothing is set until you agree. The Google script is not loaded at all until you choose “Yes, that’s fine” on the banner. If you say no, or ignore it, no analytics cookie is created and no request is made to Google. Our lawful basis is your consent, under regulation 6 of the Privacy and Electronic Communications Regulations 2003 and Article 6(1)(a) of the UK GDPR.

You can change your mind at any time, as easily as you agreed: use the “Cookie settings” link in the footer of any page. To clear what is already on your device, clear your browser’s cookies for this site.

Google Analytics is provided by Google Ireland Limited, with processing also taking place in the United States. Google acts as our processor, and transfers outside the UK are covered by the UK Extension to the EU–US Data Privacy Framework and standard contractual clauses. We have not switched on Google’s advertising, remarketing or data-sharing features.

To opt out everywhere, Google publishes a browser add-on at tools.google.com/dlpage/gaoptout.

Who else sees it

Only those who have to:

Resend, who deliver the email a form becomes. They see everything typed into it. Their processing for this site is in the EU.

Google Workspace, where the practice’s email is hosted, and so where your enquiry or referral lands.

Cloudflare, who host this website and carry its traffic, and run the Turnstile check on the forms.

Springfield Studios, who built and maintain the site, as our processor. They do not use your data for their own purposes.

Google, but only if you agreed to the measurement cookies above.

Nobody else, except where we are legally required to disclose something.

If a message fails to send

If a form cannot be delivered, our hosting provider’s error log records that it failed and the email’s subject line, which names the sender, and nothing of what was written. Those logs are deleted automatically within a few days.

How long it is kept

Analytics data, if you agreed to it, is kept by Google for 14 months and then deleted automatically.

Your rights

You can ask us for a copy of the personal data we hold about you, to have anything inaccurate corrected, to have it deleted or its use restricted, and to object to our using it. Where you gave us the data yourself, you can ask for it back in a portable form.

These rights are not absolute: we have to keep clinical records for as long as the law and professional guidance require, even if you ask us to delete them.

To use any of them, email info@periodonos.com. We will reply within one month, and we may ask you to confirm who you are first.

If you are unhappy

If you are not happy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would much rather you came to us first, so we can put it right.

Changes to this page

If any of this changes we will update this page and the date at the top of it.