Privacy Policy

Name: Norfolk Dental Specialists
Telephone: 01603 632525

Last Updated: 11-08-2025

1. Who We Are

Norfolk Dental Specialists ("we", "our", or "us") is the data controller responsible for your personal data.

Our registered address is:
Contact: info@ndspecialists.uk | 01603 632525

This Privacy Notice explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

Name, email address, and phone number
Property, billing, and delivery address
Enquiry details submitted via our website
Order history and transaction details
Payment information (processed via secure third-party gateways)
IP address, device/browser type (via analytics tools)
Cookies and tracking identifiers
Marketing preferences and consent records
Records of communication (email, phone, or live chat)

3. How We Collect Your Data

We collect your personal data when you:

Place an order or make a purchase via our website
Fill in an enquiry, contact, or account registration form
Subscribe to marketing communications
Contact us by phone, email, or live chat
Interact with our website (e.g. via cookies or analytics tools)

4. Why We Use Your Data

We only use your personal data when we have a lawful basis. This may include:

Purpose	Legal Basis
To process and fulfil your order	Contractual Necessity
To respond to enquiries	Consent / Legitimate Interests
To issue invoices or manage accounts	Contractual Necessity / Legal Obligation
To send order confirmations and updates	Contractual Necessity
To prevent fraud or misuse	Legitimate Interests / Legal Obligation
To manage subscriptions or marketing opt-ins	Consent
To analyse website use and improve services	Consent (for non-essential cookies)

5. Who We Share Your Data With

We may share your data with:

Payment processors (e.g. Stripe, PayPal)
Delivery and logistics providers
Cloud-based service providers (e.g. email, hosting)
Website and IT developers
Accountants or financial service providers
Marketing and analytics platforms (only if consented)

All third parties are subject to strict confidentiality obligations and only process data in line with applicable law.

6. International Data Transfers

Some of our service providers (e.g. Google) are based outside the UK.

Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

Standard contractual clauses approved by the UK ICO
Adequacy decisions granted by the UK government

7. How Long We Keep Your Data

We retain personal data only for as long as necessary. Typical retention periods:

Order and payment records: up to 7 years (for legal / accounting reasons)
Enquiry data (if no contract): up to 2 years
Contract/customer data: Up to 7 years (for legal / accounting reasons)
Email records: up to 7 years, unless deleted earlier

We securely delete or anonymise data once the retention period ends.

8. Your Rights Under the UK GDPR

You have the following rights regarding your personal data:

Right to be informed - what we collect and why
Right of access - request a copy of your data
Right of rectification - correct inaccurate data
Right to erase - request deletion (where applicable)
Right to restrict processing
Right to data portability
Right to object to processing
Right not to be subject to automated decision-making

To exercise any of these rights, please contact:
Hamed Karimi hamedkarimi@me.com

9. Cookies and Website Tracking

We use cookies on our website to improve your experience and monitor usage. Some cookies are essential; others require your consent.

For more details, please read our:
Cookie Policy

We use Google Analytics and, where applicable, Google Ads Enhanced Conversions. These tools collect anonymous usage data and may set cookies if you have consented via our cookie banner.

10. Payment Processing

We do not store your payment card details directly. All payments are securely processed via third-party payment gateways (e.g. Stripe, PayPal). These processors comply with PCI-DSS standards and handle your payment data directly.

11. How to Complain

If you have concerns about how we handle your personal data, we encourage you to contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://ico.org.uk
Telephone: 0303 123 1113

12. Changes to This Notice

We may update this Privacy Notice from time to time. The latest version will always be available on our website, and we'll update the "Last Updated" date accordingly.