Privacy Policy

Who we are

KBM Dental is a dental practice at Unit 2 Grange Road Retail Park, Rathfarnham, Dublin 14, Ireland. For the purposes of the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, we are the data controller for the personal information described in this policy.

If you have any questions about this policy or how we use your information, contact us:

• Email kbmdental.grange@gmail.com
• Phone 01 495 7844
• Post Data Protection, KBM Dental, Unit 2 Grange Road Retail Park, Rathfarnham, Dublin 14, Ireland

The information we collect

When you use this website

• Enquiry forms: your name, email address, phone number, the treatment you’re interested in, and anything you write in your message.
• Newsletter sign-up: your email address and, if you give it, your name.
• Technical information: like any website, our hosting provider receives your IP address, browser type and the pages you request, so the site can be delivered and protected against misuse.
• Spam protection: our forms are protected by Google reCAPTCHA v2, which checks that a real person is submitting them. To do this it collects information such as your IP address, browser and device details, and how you interact with the page, and sends it to Google.
• Usage and advertising data: only if you agree, Google tags on this site collect information about how you use it (such as the pages you visit, how you arrived, your device type and approximate location) and whether you enquire after seeing one of our Google adverts.

When you contact us or become a patient

• Contact details, date of birth and next of kin or emergency contact.
• Your medical history, medications, dental records, X-rays, scans, clinical photographs, treatment plans and notes from your appointments.
• Consent forms, and correspondence with you or with other healthcare professionals about your care.
• Payment and billing records, and, where you claim under a scheme such as PRSI Treatment Benefit or through a health insurer, the details needed for that claim (for example your PPS number).
• Notes of phone calls, emails and messages you send us, including through social media.

How we use it, and our legal basis

Data protection law requires us to have a lawful basis for each way we use your information.

We don’t make decisions about you using automated processing or profiling.

Health information

Information about your health is “special category” data and gets extra protection under the law. We process it where it is necessary for the purposes of preventive medicine, medical diagnosis and the provision of health care (Article 9(2)(h) GDPR and section 52 of the Data Protection Act 2018). It is only accessed by members of our team who are involved in your care or who need it to run the practice, all of whom are bound by a duty of confidentiality.

Please don’t include detailed medical information in a website enquiry. A short note on what you’d like help with is plenty, and we’ll take a full history in person.

Who we share it with

We don’t sell your personal information or share it for anyone else’s marketing. We share it only where needed:

Service providers who work on our behalf

• Vercel, which hosts this website and runs our form handling.
• Mailgun (Mailgun Technologies, Inc., part of Sinch), which delivers website enquiries and sign-ups to our practice inbox. We use its EU region, so these messages are processed and stored in the European Union.
• Google, which provides our email service, reCAPTCHA v2 spam protection, and, only if you consent, the Google tag (gtag.js), Google Analytics 4 and Google Ads conversion tracking. Google’s use of reCAPTCHA data is covered by theGoogle Privacy Policyand Terms of Service.
• Yellowcom, which built and maintains this website and receives a copy of website enquiries and sign-ups so it can make sure the forms are working.
• The providers of our practice management, imaging and payment systems.

These providers may only use your information to provide their service to us, under contracts that require them to keep it secure.

For your care, and where the law requires it

• Dental laboratories that make crowns, veneers, aligners and other appliances for you.
• Specialists, hospitals or your GP, if we refer you or they need to know about your treatment.
• The Department of Social Protection or your health insurer, when you make a claim.
• Our professional advisers, insurers and indemnifiers, where needed.
• Regulators, the Gardaí or courts, where we are legally obliged to.

Transfers outside the EEA

Some of our service providers, such as Google, Vercel and Mailgun, are based in or may process data in the United States. Where your information is transferred outside the European Economic Area, we rely on recognised safeguards such as the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

How long we keep it

We may keep records for longer where there is an ongoing claim or legal reason to do so. When information is no longer needed, it is securely deleted or destroyed.

Cookies and similar technologies

Cookies are small files a website stores on your device. Under the ePrivacy Regulations (S.I. No. 336 of 2011) we only use cookies that aren’t strictly necessary if you agree to them.

Your choices

When you first visit, a panel in the corner of the screen lets you accept all cookies, reject all non-essential cookies, or choose by category. Rejecting is as easy as accepting, and nothing non-essential loads until you choose. We remember your choice for six months and then ask again. You can change your mind at any time:

Change cookie settings

We use Google Consent Mode, so Google tags are told whether you have given consent and only store cookies for the categories you have allowed. You can also block or delete cookies in your browser settings.

The cookies we use

Third-party content

The map on our site is provided by Google Maps and our fonts by Google Fonts. Loading them sends your IP address to Google, and Google Maps may set its own cookies on Google’s domains. Links to our Instagram and Facebook pages take you to those platforms, which have their own privacy and cookie policies.

Keeping it secure

We use appropriate technical and organisational measures to protect your information, including encrypted connections to this website, access controls on our systems, and confidentiality obligations for everyone on our team. No method of transmission over the internet is completely secure, which is one more reason to keep website enquiries brief.

Your rights

You have the right to:

• Access a copy of the personal information we hold about you, including your dental records.
• Correct information that is inaccurate or incomplete.
• Delete your information, where we no longer have a legal reason to keep it. Clinical records usually have to be kept for the periods above.
• Restrict or object to certain uses, including any use based on our legitimate interests.
• Data portability: receive information you gave us in a commonly used format, or have it sent to another provider.
• Withdraw consent at any time, for example by unsubscribing from our newsletter.

To use any of these rights, contact us using the details above. We may need to confirm your identity first. We’ll respond within one month, and there is normally no charge.

Children

We treat children with the involvement of a parent or guardian, who will usually manage their information on their behalf. This website and our newsletter are not intended for anyone under 16.

Complaints

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Data Protection Commission:

Changes to this policy

We’ll update this policy when the way we handle information changes, for example before we launch photo uploads for Style Makeover. The date at the top shows when it was last updated.