Privacy policy
This policy explains how Dental Implant Quote ("we", "us", "our") collects, uses, and protects your personal data. It is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Dental Implant Quote is an independent UK dental implant comparison service operating at https://dentalimplantquote.co.uk. You can contact us at contact@dentalimplantquote.co.uk.
What information we collect
When you use this site, we may collect the following categories of personal data:
- Quote request data - your name, email, phone (optional), location, treatment type, indicative budget, timing, and any notes you choose to add.
- Technical data - IP address, browser type, device, approximate location (city level), and usage data such as the pages you visit on the site.
- Communication data - any messages you send us by email or reply, including responses from matched clinics.
Because a request for dental implant treatment can reveal information about your health, we treat your quote request data as special category data under UK GDPR. We only process it on the basis of your explicit consent, which you give on the quote form (see "Legal basis" below).
How we use your data
We use your personal data for the following purposes only:
- To match your quote request with vetted private dental clinics so they can send you written quotes. Our network is primarily UK private clinics. Where it genuinely fits your situation (for example a treatment or budget often better served abroad) and only if you give the separate, explicit consent on the form, we may also introduce you to vetted partner clinics outside the UK.
- To respond to your enquiries and reply to any follow-up questions
- To improve the information on this site (aggregated, non-identifying usage analytics only)
- To comply with legal obligations, including record-keeping and responses to lawful requests
We share your details with dental clinics only for the specific purpose of providing you with a quote, as described in "Who we share your data with". We do not rent or sell your personal data to advertisers, data brokers, or any third party for their own marketing purposes.
How we are paid. Our service is free to you. A clinic in our network may pay us a fee when we introduce a patient. This never changes the price you are quoted and never adds any cost to you, and it does not influence the clinics we match you with beyond your stated treatment, location, and preferences.
Legal basis
We rely on the following legal bases under UK GDPR:
- Consent (Article 6(1)(a)) - when you submit a quote request, you actively consent to being contacted about your quote and to your details being shared with matched clinics for that purpose.
- Explicit consent for health data (Article 9(2)(a)) - because your request can reveal information about your health, we rely on your explicit consent to process this special category data.
- Explicit consent for international transfers (Article 49(1)(a)) - if (and only if) you give the separate, optional consent to be introduced to partner clinics outside the UK, that explicit consent is the basis on which we transfer your details abroad (see "International transfers").
- Legitimate interests - to operate and improve the website, prevent fraud and abuse, and protect our users.
- Legal obligation - where required by law.
Every consent is optional and specific, and you can withdraw it at any time by emailing us. Withdrawing consent does not affect any processing that already took place before you withdrew it.
Who we share your data with
Your personal data may be shared with:
- Vetted UK private dental clinics in our network, for the sole purpose of providing you with a quote. We only share what is necessary (location, treatment type, indicative budget, and your contact details) for the clinic to respond.
- Vetted partner clinics outside the UK (for example in Turkey or Hungary) - only if you have given the separate, explicit consent on the form. If you do not give that consent, your details are never shared outside the UK. See "International transfers" for the safeguards and the risks involved.
- Trusted service providers such as our email delivery platform (Resend), hosting provider (Cloudflare), and analytics providers. These providers only process your data on our instructions and under contractual safeguards.
- Regulators or law enforcement where required by UK law.
How long we keep your data
We keep quote request data for up to 24 months from your last interaction, after which it is deleted or anonymised. Technical data (such as web server logs) is kept for a shorter period, typically up to 90 days, for security and fraud prevention purposes.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you (subject access request)
- Ask us to correct inaccurate data
- Ask us to delete your data ("right to erasure")
- Object to processing or ask us to restrict it
- Withdraw consent at any time
- Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, email us at contact@dentalimplantquote.co.uk. We will respond within one month.
Security
We protect your personal data with technical and organisational measures, including encryption in transit (HTTPS), access controls on our systems, and vetted third-party processors. No online service can guarantee absolute security, but we aim to meet or exceed UK GDPR requirements.
International transfers
Some of our service providers (including Cloudflare and Resend) may process data outside the UK. Where this happens, we rely on UK adequacy regulations, Standard Contractual Clauses (SCCs), or other approved safeguards.
If, and only if, you give the separate explicit consent to be introduced to partner clinics outside the UK, we will transfer your details to a clinic in a country that may not provide the same level of data protection as the UK and may not be covered by a UK adequacy decision (for example Turkey). In that case we rely on your explicit consent under Article 49(1)(a) UK GDPR. You should be aware that, without an adequacy decision or other safeguards such as SCCs in place with that clinic, your data may not benefit from the same legal protections or enforceable rights as it does in the UK. You can withdraw this consent at any time, although that will not undo a transfer that has already happened.
Cookies
We use a minimal set of cookies, described in our cookie policy. Essential cookies are set automatically. Analytics cookies are only set if you consent to them.
Changes to this policy
We may update this privacy policy from time to time. The date at the top of the page reflects the most recent version. Significant changes will be highlighted at the top of the page for at least 30 days.