Privacy & Data Protection

Last updated: 26 October 2026

Oakland Orthodontics is part of Oakland Family Dental Practice, operated by Philip Eccles trading as Oakland Family Dental Practice.

Address: 72 Leeds Road, Nelson, Lancashire, BB9 9TD
Telephone: 01282 692407
Email: info@oaklanddental.co.uk
Website: oaklandorthodontics.co.uk

Philip Eccles trading as Oakland Family Dental Practice is the data controller for personal information covered by this notice under UK data-protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018.

We are registered with the Information Commissioner’s Office under registration number ZA059882.

Data Protection Officer: Tina Maden

This page contains:

A separate Cookie Policy provides more detailed information about cookies and similar technologies used on the website.


Patient Privacy Notice

What information do we hold?

We may hold patient information including:

  • your name, date of birth and contact details;
  • family details, including anyone who may need to give consent for your care;
  • medical history, GP details and, where applicable, your NHS number;
  • dental history, treatment records, x-rays and photographs;
  • information received from other healthcare providers;
  • appointment records, including cancelled or missed appointments;
  • payment and financial information relating to your care;
  • correspondence with you and other healthcare professionals; and
  • details of complaints and how they were handled.

We normally obtain this information directly from you, although we may also receive relevant information from other healthcare professionals or organisations involved in your care.

Why do we use your information?

We use patient information primarily to provide appropriate, safe and effective dental care and treatment and to maintain accurate records.

We may also use information for the following purposes.

Research and education

Information may be used for appropriate research or educational purposes.

Where identifiable patient information is involved, we will use an appropriate lawful basis and obtain consent where this is required. Wherever reasonably possible, information will be anonymised so that individuals cannot be identified.

Direct marketing

We may use contact details to provide information about products, treatments or services where data-protection and electronic-marketing laws allow us to do so.

Where consent is required for marketing by email, text message or another electronic method, we will obtain it first.

In some circumstances, electronic-marketing law allows us to contact someone about our own similar products or services without obtaining separate consent. This may apply where we obtained the person’s contact details directly during a sale or negotiations for a sale, gave them a clear opportunity to opt out when their details were collected, and provide an opportunity to opt out in every subsequent marketing communication.

You can ask us to stop sending direct marketing at any time.

CCTV

We use CCTV to help protect patients, staff, visitors and the premises and to assist with the investigation of incidents where necessary.

CCTV footage is kept only for as long as reasonably necessary unless it needs to be retained for an incident, investigation, legal claim or other legal requirement.

Footage may be disclosed where necessary and lawful, for example to law-enforcement authorities.

Our lawful bases

We must have an appropriate lawful basis under Article 6 of the UK GDPR whenever we use personal information.

Depending on the circumstances, we may rely on:

  • legitimate interests, including administering dental services, maintaining appropriate records and operating the practice;
  • contract, where processing is necessary to provide private dental care or take steps at your request before providing it;
  • legal obligation, where information must be processed or retained to meet legal or regulatory requirements;
  • public task, where applicable to care or services provided under relevant NHS arrangements or another function carried out under a basis in law; and
  • consent, where we request and rely on your agreement for particular activities, such as certain research or marketing communications.

Health information is special category personal data and requires an additional condition under Article 9 of the UK GDPR.

Where health information is used for dental diagnosis, care or treatment or the management of healthcare services, we will normally rely on Article 9(2)(h) of the UK GDPR, together with the applicable provisions of the Data Protection Act 2018.

Health information is processed by, or under the responsibility of, healthcare professionals and others who are subject to appropriate duties of confidentiality.

Other lawful bases or special-category conditions may apply where required, for example where processing is required by law, necessary for legal claims or based on explicit consent.

Who may we share patient information with?

We only share patient information where there is an appropriate reason to do so.

This may include:

  • specialists and other healthcare professionals involved in your care;
  • dental laboratories;
  • your doctor where consultation is necessary;
  • debt collection agencies where fees remain unpaid;
  • HM Revenue & Customs;
  • law-enforcement agencies, courts and public authorities;
  • regulatory organisations such as the General Dental Council or Care Quality Commission;
  • dental payment-plan providers or insurers, where applicable;
  • NHS bodies, where applicable; and
  • organisations providing professional, administrative, IT, data-storage, backup or other services to the practice.

We may also disclose information where required or permitted by law or regulation.

How long do we keep patient information?

We keep patient records for as long as required for patient care and applicable legal, regulatory, professional and record-management requirements.

The practice retains patient dental records as follows:

  • adult patient records are retained for 11 years from the patient’s last contact with the practice;
  • children’s records are retained until their 25th birthday; or
  • until their 26th birthday if treatment ended when they were 17.

Records may need to be kept for longer where this is required in connection with continuing care, a complaint, investigation, legal claim or another legal, regulatory or professional requirement.

When information is no longer required, it will be securely destroyed or anonymised as appropriate.

Different retention periods may apply to administrative, financial and other non-clinical records.


Website Privacy Notice

Information collected through the website

When you contact us, request a call back or enquire about an orthodontic consultation through this website, we may collect:

  • your name;
  • telephone number;
  • email address;
  • preferred appointment day or time;
  • treatment or service you are interested in; and
  • subsequent correspondence about your enquiry.

You do not have to provide information through the website, although we will normally need sufficient contact details to respond.

The website and services used to operate it may also process technical information including:

  • IP address;
  • browser and device information;
  • dates and times of requests;
  • pages viewed and referring pages;
  • server and website logs;
  • security and anti-spam information; and
  • cookie and consent preferences.

Health information submitted through the website

Information you provide about a dental condition, treatment or other health matter may constitute special category health data.

Where this information is necessary in connection with providing or arranging dental care, it may be processed for healthcare purposes by, or under the responsibility of, healthcare professionals who are subject to duties of confidentiality.

Please only provide information that is reasonably necessary for your enquiry.

How we use website information

We may use website information to:

  • respond to enquiries;
  • arrange a call back, consultation or appointment;
  • provide requested information about treatments or services;
  • communicate with you about an enquiry;
  • operate, maintain and protect the website;
  • prevent spam, abuse, fraud and other security threats;
  • understand and improve website use where appropriate analytics are enabled; and
  • manage cookie and privacy choices.

For enquiries and appointment requests, we may rely on steps taken at your request before entering into a contract and/or our legitimate interests in responding to enquiries and managing communications.

For website security and spam prevention, we rely on our legitimate interests in maintaining a secure and reliable website.

Where consent is required for analytics, marketing or other optional website technologies, we rely on consent.

Where health information is processed in connection with arranging or providing dental care, an appropriate Article 6 lawful basis and the relevant special-category condition under UK data-protection law will also apply.

Website forms and spam protection

Information submitted through a website form is transmitted to the practice so that we can respond to your enquiry.

Hosting, email, form-processing and anti-spam providers may process information as part of delivering these services.

Where enabled, Cloudflare Turnstile helps distinguish genuine visitors from automated or abusive activity on website forms.

Turnstile may process technical information about the visitor’s browser, device, network connection and interaction with its security checks. Cloudflare states that Turnstile does not access, store or transmit user communications, form entries or other page inputs as part of this function.

Where Turnstile is used, our lawful basis is our legitimate interests in protecting the website and its forms against spam and abuse.

Cookies and analytics

The website uses cookies and similar technologies for purposes such as operating the website, remembering preferences, managing consent and, where enabled, understanding website use.

Where consent is required for optional cookies or similar technologies, consent is the relevant lawful basis.

You can accept, deny or manage categories of optional cookies and change your choices later through the website’s cookie controls.

Please see our separate Cookie Policy for more information about the cookies and technologies currently used.

Online booking, finance and external websites

The website provides links to an external online appointment-booking service.

When you use an external booking service, information you provide directly to that service is handled according to its own privacy information. Information subsequently received and used by Oakland Family Dental Practice as part of your dental care is covered by the Patient Privacy Notice above.

The website also provides information about dental finance services. You can discuss finance options with the practice following your consultation.

Philip Eccles trading as Oakland Family Dental Practice is an Appointed Representative of Financing First Limited and acts as a credit broker, not a lender.

If you choose to make a finance application through an external provider, information you provide directly to that provider is handled according to its own privacy information.

The website may also display or link to content from Instagram and other external websites. External websites apply their own privacy practices.

Who may process website information?

Website information may be processed by organisations that help us operate the website and respond to enquiries, including:

  • website hosting providers;
  • email and form-processing providers;
  • website maintenance and technical-support providers;
  • website security and anti-spam providers;
  • analytics providers where analytics are enabled; and
  • public authorities or other organisations where disclosure is required by law.

Depending on the service, these organisations may act as processors on our behalf or as separate controllers responsible for their own processing.

How long do we keep website information?

Website information is kept only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting or dispute-resolution requirements.

Enquiries may be retained while they are being dealt with or followed up.

If an enquiry results in dental care or treatment, relevant information may become part of the patient’s records and will then be handled under the Patient Privacy Notice.

Technical information, logs, backups, analytics data and cookie preferences are retained according to the relevant service settings and operational requirements.


The following information applies to both patient and website personal information.

Security and international processing

We use appropriate technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

Information may be stored using protected practice systems, secure technology services and appropriately protected backups.

Some technology providers may operate or process information outside the United Kingdom.

Where a restricted international transfer takes place, an appropriate safeguard, adequacy regulation or other transfer mechanism recognised under UK data-protection law will be used where required.

You can contact us if you would like further information about safeguards applying to an international transfer of your personal information.


Your data-protection rights

Depending on the circumstances, you may have the right to:

  • be informed about how your personal information is used;
  • access personal information we hold about you;
  • have inaccurate or incomplete information corrected;
  • have information erased in certain circumstances;
  • restrict processing in certain circumstances;
  • object to certain processing based on legitimate interests;
  • receive or transfer certain information where data portability applies; and
  • withdraw consent where processing is based on consent.

These rights are not absolute and exemptions may apply.

Requests for access to personal information are normally dealt with without undue delay and within one month. Data-protection law permits additional time or a reasonable fee in certain limited circumstances.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You have the right to object to processing based on legitimate interests, although we may be able to continue processing where the law allows us to do so.


Questions or complaints

If you have a question or concern about how your personal information is handled, please contact our Data Protection Officer:

Tina Maden
Oakland Family Dental Practice
72 Leeds Road
Nelson
Lancashire
BB9 9TD

Telephone: 01282 692407
Email: info@oaklanddental.co.uk

We will do our best to resolve your concern.

Where particular information is necessary to provide safe and appropriate dental care or meet legal or regulatory obligations, objecting to its use may affect our ability to provide some or all of your dental care.

You also have the right to complain to the Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint/


Changes to this privacy information

We may update this privacy information if the practice, website, services we use or applicable data-protection requirements change.

The date at the top of this page shows when it was last updated.