Privacy Policy

1. Introduction and scope

This Privacy Policy explains how personal data is collected, used, stored and protected when you visit this website, submit an enquiry, request a consultation, interact with the ambassador referral journey or communicate with Dr. Yoselin Gracia in connection with private cosmetic dentistry services.

This Policy is intended to comply with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”) and relevant guidance issued by the Information Commissioner’s Office (“ICO”).

2. Data controller

For the purposes of UK data protection law, the data controller for website enquiries and related communications is Dr. Yoselin Gracia, unless a separate clinic, treatment provider or legal entity is expressly identified to you during your patient journey.

Privacy enquiries may be sent to info [at] yoselingracia [dot] com. If another contact address is provided during your consultation or treatment pathway, you should use that address for clinical or appointment-specific matters.

3. Defined terms

In this Policy, “personal data” means information relating to an identified or identifiable individual. “Special category data” includes health, dental or medical information. “Processing” includes collecting, recording, storing, using, disclosing or deleting personal data.

4. Personal data we may collect

Depending on how you use the website, we may collect your name, email address, telephone number, treatment interest, message content, preferred contact method, referral code or ambassador source, page source, date and time of submission, cookie preference, IP address, device/browser information and basic website analytics data where consent has been provided.

If you voluntarily provide information about your oral health, medical history, dental concerns, treatment expectations, photographs or previous treatments, that information may be treated as special category data under UK GDPR.

5. How information is collected

Information may be collected when you complete a contact form, request a consultation, use a referral link, accept or reject cookies, email the practice, interact with website functionality, or communicate with the team before or after an appointment.

6. Purposes of processing

• To respond to cosmetic dentistry enquiries and consultation requests.
• To arrange, confirm or follow up appointments.
• To understand your interest in treatments such as composite bonding, edge bonding, teeth whitening, Invisalign, veneers or smile design.
• To record the source of an enquiry, including referral programme attribution where relevant.
• To send service messages, administrative emails and enquiry confirmations.
• To manage website security, prevent spam and maintain reliable functionality.
• To comply with legal, regulatory, professional and record-keeping obligations.
• To improve website content and user experience where analytics consent has been provided.

7. Lawful bases for processing

We process personal data under one or more lawful bases, including consent where you submit information voluntarily or accept non-essential cookies; legitimate interests where it is necessary to respond to enquiries, manage website security and operate the business; contract or steps prior to entering into a contract where you request services; legal obligation where information must be retained or disclosed by law; and, where relevant to health information, provision of health or dental care subject to appropriate confidentiality safeguards.

8. Special category dental and health information

Please avoid submitting highly detailed medical information through general website forms unless necessary. Where you choose to provide dental or health information, it will be handled with additional care and used only for appropriate enquiry handling, consultation planning, clinical triage, patient care or related professional obligations.

9. Contact form consent wording

By submitting a website enquiry form, you confirm that the information provided is accurate to the best of your knowledge and you authorise the team to use your details to respond to your enquiry. This does not create a dentist-patient relationship and does not amount to clinical advice.

10. Marketing communications

We do not use enquiry form information for promotional marketing unless you have clearly opted in or another lawful basis applies. If marketing communications are offered, consent must be freely given, specific, informed and capable of withdrawal. You may withdraw marketing consent at any time by using the unsubscribe method provided or by contacting the practice.

11. Referral programme data

If you arrive via an ambassador referral link, a referral code or source reference may be stored so the enquiry can be attributed correctly. Referral processing does not override clinical independence. Any treatment recommendation remains subject to suitability, consent and professional judgement.

12. Cookies, analytics and similar technologies

Strictly necessary cookies may be used to remember your cookie choice and keep the website functioning. Analytics or marketing cookies are only activated where you accept non-essential cookies. You may reject non-essential cookies and continue using the website. Further information is available in the Cookie Policy.

13. Sharing personal data

We do not sell personal data. Personal data may be shared only where appropriate with trusted service providers such as website hosting providers, email systems, IT support, analytics providers where consent applies, dental clinics or clinicians involved in your care, professional advisers, insurers, regulators or public authorities where legally required.

14. Data processors

Where third-party suppliers process personal data on our behalf, they should process it only under appropriate instructions and confidentiality, security and data protection obligations. This may include hosting, email delivery, website maintenance, booking administration and analytics services.

15. International transfers

If personal data is transferred outside the United Kingdom, appropriate safeguards should be used where required, including adequacy regulations, approved contractual clauses or other safeguards recognised under UK data protection law.

16. Retention

Website enquiry information is retained only for as long as reasonably necessary to respond to your enquiry, manage follow-up communications, maintain business records, resolve disputes and comply with legal or professional obligations. If you become a patient, clinical records may be retained for longer in accordance with applicable dental, regulatory, insurance and limitation-period requirements.

17. Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse or alteration. However, no website, email system or internet transmission can be guaranteed completely secure. You should not send urgent, highly sensitive or emergency information through the website.

18. Your rights

Subject to legal conditions and exemptions, you may have the right to request access, rectification, erasure, restriction, portability, objection to processing and withdrawal of consent where processing is based on consent. You also have rights in relation to certain automated decision-making, although this website does not use automated decision-making to determine treatment eligibility.

19. Complaints

Please contact us first if you have a concern about personal data. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection matters.

20. Updates to this Policy

This Privacy Policy may be updated to reflect changes in law, ICO guidance, website functionality, service providers or practice operations. The version displayed on this website is the current website privacy notice.