Patient Privacy Policy

& GDPR Compliance

Cherrytree Dental Care is operated by Blundell Milne Dentistry Ltd. We are committed to protecting your privacy and handling your personal information responsibly, securely, and in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

In order to provide you with dental care and treatment, we need to collect and process personal information about you. This Privacy Policy explains what information we collect, why we collect it, how it is used, and your rights regarding that information.

Information We Collect

We may collect and store the following information:

Personal Information

  • Name
  • Date of birth
  • Address
  • Telephone number(s)
  • Email address
  • NHS number (where applicable)

Health Information

  • Medical history
  • Dental history
  • Clinical records created by dentists, hygienists and other dental professionals involved in your care
  • Treatment plans and consent records
  • Clinical notes relating to your treatment
  • X-rays
  • Clinical photographs
  • Digital scans and study models
  • Correspondence relating to your care

Administrative Information

  • Appointment records
  • Details of fees charged and payments received
  • Communications with you regarding your care
  • Details of any complaints and how they were investigated and resolved
  • Correspondence with other healthcare professionals involved in your treatment

Responsibility for Your Information

Blundell Milne Dentistry Ltd is the Data Controller for the personal information held by Cherrytree Dental Care.

The directors and practice owners:

Dr Glen Milne
Dr Joanna Blundell

are responsible for ensuring that personal information held by the practice is processed securely, lawfully, and in accordance with data protection legislation.

Access to your information is restricted to members of the dental team and administrative staff who require it in order to provide your care and manage the practice.

All staff are bound by strict confidentiality obligations and receive appropriate training in data protection and information governance.

How We Use Your Information

We use your information to:

  • Provide safe and effective dental care and treatment
  • Maintain accurate clinical records
  • Arrange and manage appointments
  • Communicate with you regarding your treatment
  • Process payments and maintain financial records
  • Comply with legal and regulatory obligations
  • Respond to complaints, claims, or legal enquiries
  • Improve the quality and safety of our services

Where NHS treatment is provided, relevant information will be shared with NHS authorities as required.

We will ask for your preferred method of communication and may contact you by telephone, email, text message, or letter regarding your dental care.

Sharing Your Information

We will only share your information when necessary and on a need-to-know basis.

This may include:

  • Your GP
  • Hospitals and community dental services
  • Dental laboratories involved in your treatment
  • Dental specialists and other healthcare professionals involved in your care
  • NHS authorities and payment agencies
  • Insurance providers or dental plans where applicable
  • Regulatory bodies where required by law

We will only share the minimum amount of information necessary for the purpose concerned.

We may also disclose information where required by law, court order, regulatory investigation, or where necessary to protect the health and safety of patients, staff, or the public.

Keeping Your Information Secure

We take the security of your information seriously.

Patient records are stored securely using specialist dental practice software and secure filing systems.

We have measures in place to protect information against unauthorised access, loss, misuse, alteration, or disclosure, including:

  • Password-protected computer systems
  • Secure data backups
  • Access controls and user permissions
  • Confidentiality policies for all staff
  • Secure disposal of confidential information

How Long We Keep Records

We retain dental records in accordance with current professional and legal guidance.

In most cases, adult dental records are retained for at least 11 years from the date of the last entry in the record.

For children, records are generally retained until the patient reaches 25 years of age, or longer where clinically or legally appropriate.

Your Rights

Under UK GDPR, you have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request restriction of processing in certain circumstances
  • Request transfer of your information to another healthcare provider where applicable
  • Object to certain uses of your information
  • Withdraw consent where processing is based on consent

Please note that we may be legally required to retain certain healthcare records and may not always be able to delete information relating to your treatment.

Subject Access Requests

If you would like a copy of the information we hold about you, or if you would like to exercise any of your rights under data protection legislation, please contact us using the details below.

Email: enquiries@cherrytreedental.org.uk

We will normally respond within one calendar month, as required by UK GDPR.

Concerns About Your Data

If you have any questions about how your information is handled, please contact the practice in the first instance so that we can try to resolve your concerns.

If you remain dissatisfied, you have the right to contact:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://www.ico.org.uk

Contact Details

Cherrytree Dental Care
Blundell Milne Dentistry Ltd
96 Brook Street
Broughty Ferry
Dundee
DD5 1DQ

Telephone: 01382 736632
Email: enquiries@cherrytreedental.org.uk
Website: www.cherrytreedental.org.uk