Privacy policy

This policy explains what we do with your personal information when you use this website or contact us through it. The data controller is Aisha Ahmed, trading as Sale Dental Spa, 77 Washway Road, Sale, Manchester M33 7TQ.

We are registered with the Information Commissioner’s Office under registration number Z1349343. Our Data Protection Officer is Dr Aisha Ahmed, the practice principal, contactable at reception@saledentalspa.co.uk.

This policy covers the website. Your clinical records are handled under the practice’s separate patient privacy notice, which you can ask us for at any time.

1. What we collect, and when

If you send an enquiry through a form on this site, we collect your first name, mobile number, email address, the treatment you are interested in, and anything you write in the message box.

If you book an appointment online, through the booking options on this site, we collect your title, name, date of birth, sex, first line of your address, postcode, mobile number and email address, the appointment you choose, and an optional note if you’re nervous about coming in. These pass through our booking service, which we run on Cloudflare, to Dentally, our practice management system, where your patient record and appointment are made. Our booking service deletes them after 24 hours. Card payments for the £35 New Patient Exam and consultation deposits are processed by Stripe, which also receives your email address for the receipt and our booking reference. If you book through our online booking portal instead, it is run by Dentally. We use these details to book and confirm your appointment, as a step taken at your request before treatment, and once you are a patient they become part of your patient record.

If you download one of our treatment guides, we collect your first name, mobile number and email address, and which guide you asked for.

If you phone the practice, calls may be recorded on our phone system, run by Wayv, for training and so we have an accurate record of what was agreed. We also note your name, number and the reason for your call.

If you refer a patient to us as a dental professional, we collect your name, practice name, phone number, email address and the case summary you provide. We ask referrers not to include patient-identifiable information in that form.

When you visit the site, Google Analytics, Google Ads, the Meta Pixel and our lead system, DenGro, collect technical information such as your IP address, device, browser, the pages you visit and the links and buttons you use. Sections 3 and 4 and our cookie policy explain what each one collects.

Apart from the optional note if you’re nervous when you book, we do not ask for health information through this website, and you should not send clinical details through a web form. If you need to discuss something clinical, call us on 0161 969 7464.

2. Why we use it, and our lawful basis

We respond to your enquiry, call you back and arrange an appointment on the basis of our legitimate interests and of steps taken at your request before entering into a contract for treatment.

We send you the treatment guide you asked for as a step taken at your request.

We send you marketing about offers and smile advice only with your consent, given by ticking the marketing box. It is never pre-ticked.

We measure how the site is used and whether our advertising works, through Google Analytics, Google Ads, the Meta Pixel, DenGro and our own service described in section 3, on the basis of our legitimate interests.

We keep our own records of enquiries and how we handled them on the basis of our legitimate interests and our professional obligations, and we keep the site secure and working properly on the basis of our legitimate interests.

Enquiring about treatment and agreeing to marketing are two separate things. You can ask us about treatment without ever hearing from us about anything else.

3. Who we share it with

We do not sell your information and we do not share it for anyone else’s marketing. We do use a small number of suppliers who process information on our behalf, each under contract and only on our instructions.

DenGro is our lead management system. Every enquiry and guide download from this site is recorded in DenGro so the team can call you back and keep track of the conversation. It also records which page you enquired from and, where relevant, which advert brought you to us. Your marketing preference is recorded against your record. DenGro is run by Dentology, at book.saledentalspa.co.uk. Each time you view a page, the site sends DenGro the cookies stored for our website on your device and the page’s web address details, such as which advert you came from, so it can link a later enquiry to that advert. When you send an enquiry, the site sends it to DenGro with the same details. To measure our advertising, DenGro shares the name, email address and mobile number from your enquiry with Meta in hashed form, and may share them with Google in the same way, together with the advert cookies described in our cookie policy.

Our own service, which we run on Cloudflare, also helps measure our Meta adverts. When a page loads, it reads your IP address. When you send an enquiry, it sends Meta your IP address, your browser details and the Meta cookie IDs (_fbp and _fbc) with the enquiry, so Meta can match it to an advert.

Elfsight displays our Google reviews on the site. The widget loads from Elfsight’s servers and shows reviews exactly as they were left on Google. We cannot and do not edit them.

Google supplies the map on our contact page, and the review content shown in the widget above. Loading these means your IP address is shared with Google.

Google Analytics, Google Ads and the Meta Pixel measure how the site is used and whether our advertising works. Section 4 explains what they receive. Google and Meta use that information under their own privacy policies, and may use it for their own purposes, including advertising.

Webflow hosts this website and stores form submissions. Cloudflare Turnstile checks form submissions for spam, using technical information about your browser. Zapier passes online bookings for the £35 New Patient Exam into Dentally. Stripe takes card payments, and if you choose to pay with Klarna, Klarna deals with you directly under its own privacy policy. Gift Up sells and sends our gift vouchers. nGAGE sends our patient emails, and Brevo sends emails about our competitions, in both cases only where you agreed to hear from us. Wayv runs our phone system and stores call recordings. Tabeo provides treatment finance, and if you apply you deal with Tabeo directly under their own privacy policy.

We may also share information with our professional advisers, or where we are required to by law or by our regulators. Some of these suppliers process information outside the UK. Where that happens, the transfer is covered by UK adequacy regulations or by standard contractual clauses.

4. Cookies and similar technologies

A cookie is a small file stored on your device. Our cookie policy lists every cookie and similar piece of browser storage this site uses, who sets it, why, and how long it lasts.

In short:

• Cookies for analytics and advertising measurement are set when you visit, alongside the ones that keep the site working. Our cookie notice tells you this, but there is no setting on the site to turn them off.
• Google Analytics receives the pages you visit, how you arrived, the links, buttons and booking steps you use, and general information about your device, browser and approximate location. It doesn’t receive your name or anything you type into a form.
• Google Ads receives that you came from one of our adverts, and when you book or ask us to call, with the booking value and a booking reference. DenGro may also share your enquiry details with Google in hashed form (section 3).
• The Meta Pixel tells Meta (Facebook and Instagram) the pages you visit. When you send an enquiry, DenGro shares your name, email address and mobile number with Meta in hashed form, and our own service sends Meta your IP address, browser details and Meta cookie IDs (section 3).
• DenGro receives the cookies stored for our website and the page’s web address details each time you view a page, and your enquiry when you send one (section 3).
• Hashed means the details are turned into a code before they are matched, so they aren’t sent as readable text. We use all of this to measure our advertising, never to sell your information.

You can block or delete cookies in your browser settings. If you block all of them, parts of the site, such as online booking, may not work. You can also use Google’s opt-out add-on for Google Analytics (tools.google.com/dlpage/gaoptout), your Google ad settings (myadcenter.google.com) and your Facebook or Instagram ad settings (facebook.com/adpreferences).

Read our cookie policy

5. How long we keep it

Enquiries that do not become appointments are kept for 24 months from your last contact with us, then deleted.

Enquiries that become appointments are absorbed into your patient record and kept under the retention rules for dental records, which for an adult is at least 11 years from the last treatment, and for a child until their 25th birthday or 11 years, whichever is longer.

Marketing consent records are kept for as long as you remain subscribed and for 24 months afterwards, so we can evidence that you consented and when you withdrew.

Call recordings are kept for 12 months. Referrals from dental professionals are kept for the duration of the referred episode of care and then under the patient record rules above.

6. Your rights

Under UK GDPR you have the right to ask us to give you a copy of the information we hold about you, correct it if it is wrong, delete it, restrict what we do with it, or provide it in a portable format. You can also object to processing we carry out on the basis of legitimate interests.

These rights are not absolute. Where we are required to keep clinical records for a set period, we cannot delete them on request, and we will explain that if it applies.

To exercise any of these rights, email reception@saledentalspa.co.uk or write to us at the practice. We will respond within one month. There is no charge.

Withdrawing marketing consent

You can withdraw your consent to marketing at any time, and it is deliberately easy. Click unsubscribe in any message we send you, reply to any message asking us to stop, tell any member of the team at the practice, or email reception@saledentalspa.co.uk. Withdrawing consent does not affect anything we sent before you withdrew, and it will not affect your dental care in any way.

7. Complaints

If you are unhappy with how we have handled your information, please tell us first at reception@saledentalspa.co.uk so we can put it right. You also have the right to complain directly to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. You do not have to come to us first.

8. Changes to this policy

If we change how we use your information, we will update this page and change the date shown at the top.

Our terms for treatment and care are set out in our terms and conditions.

Read our terms and conditions