Privacy Policy

1. Who we are

I M DEN LIMITED (trading as TJ Smile Studio) (48 West George Street, Suite 2/3, Glasgow, Scotland, G2 1BP, company number SC732212) is the data controller for personal data collected through this website and in the course of providing dental treatment. We can be contacted at tj@tj-smile.com or 07728 808510.

2. What we collect

Contact and enquiry data: name, email, phone number, and any message or details you provide through our contact, consultation, smile assessment or referral forms.

Clinical data: as a dental practice, records created once you become a patient — including your dental and medical history, examination findings, photographs, treatment notes and correspondence — are special category health data under UK GDPR.

Technical data: standard web server logs (IP address, browser type, pages visited) generated automatically by visiting this site.

3. How we use it and our lawful basis

Enquiry and booking data is used to respond to your request and arrange an appointment. Our lawful basis for this is taking steps at your request prior to a contract (Article 6(1)(b) UK GDPR).

Clinical records are processed for the provision of dental care and treatment. Our lawful basis is Article 9(2)(h) UK GDPR (health or social care purposes), and we owe you a duty of confidentiality as your treating dentist regardless.

We do not use your data for automated decision-making, and we do not sell your personal data to third parties.

4. Who we share it with

Form submissions made through this website are processed by our third-party form provider, Web3Forms, solely to deliver your enquiry to us by email.

If you accept cookies, technical data about your visit (pages viewed, whether you submitted an enquiry form, IP address and browser details) is shared with Google for analytics and with Meta Platforms Ireland Limited for advertising measurement. Neither receives your clinical data, and neither tag runs at all if you decline. Our lawful basis for this is your consent, which you can withdraw at any time by clearing this site's cookies and site data in your browser. See our Cookie Policy for details.

Clinical data may be shared with other healthcare professionals directly involved in your care (for example, a specialist you are referred to, or your NHS dentist), with your knowledge, and as required by law or GDC guidance.

We do not transfer your personal data outside the UK except where a service provider we use (such as our website hosting or form provider) does so, in which case appropriate safeguards apply.

5. How long we keep it

Enquiry data that does not lead to an appointment is retained for no longer than is necessary to deal with your enquiry, and then deleted.

Clinical records are retained in line with GDC and Scottish health record retention guidance — for adults, this is generally a minimum of 11 years from the date of last treatment; for children, until the patient's 25th birthday (or longer for certain records). Exact retention periods are set out in our practice records management policy, available on request.

6. Your rights

Under UK GDPR you have the right to request access to, correction of, or (in some circumstances) deletion of your personal data, to object to or restrict certain processing, and to data portability. To exercise any of these rights, contact us using the details above.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

7. Security

We use appropriate technical and organisational measures to protect the personal data we hold, including secure hosting and restricted access to clinical records.

8. Changes to this policy

We may update this policy from time to time; the date at the top of this page shows when it was last revised.