This notice explains how Dental Clinic Abroad uses personal information when you visit this website or contact us through the general-enquiry form, email, phone or WhatsApp.
Last updated: 2 September 2026
1. Who is responsible for your information
Dental Clinic Abroad is the trading name used by this website. The verified legal person or entity operating the enquiry service, its full service address and any registration details are not yet published. Those details are required before this notice can fully identify the controller, so the public contact route is temporarily limited to non-clinical questions and must not be used for health information.
- Email: contact@dentalclinicabroad.co.uk
- Phone and WhatsApp: +40 727 506 445
- Enquiry location: Bucharest, Romania. This is not a legal service address.
The website does not currently publish the identity of a dental provider or individual dentist. No health information should be requested or shared until both the legal enquiry-service operator and proposed provider have been identified to you and you have received the relevant privacy information.
2. Information we may collect
- Your name, contact details, preferred language and country or time zone.
- Your messages, questions, travel availability and communication history.
- The general-enquiry form and public contact links do not ask for dental photographs, X-rays, symptoms or treatment history. Please do not send that information.
- Records of consent, withdrawal of consent and your choices about sharing.
- Technical information such as IP address, browser and device information, security logs and cookie choices.
We normally receive this information directly from you. If somebody contacts us for you, we may also receive it from that person.
3. Why we use it and our legal bases
- To answer general enquiries: our legitimate interests in operating the website and replying to people who contact us, under Article 6(1)(f) of the UK GDPR or EU GDPR.
- Health information: public intake is paused. A lawful basis and Article 9 condition must be stated by the verified controller before any later health-information process begins.
- To protect the website, prevent misuse and keep basic operational records: our legitimate interests in providing a secure and reliable service under Article 6(1)(f).
- To meet a legal obligation: Article 6(1)(c), where the law requires us to keep or disclose information.
- To establish, exercise or defend legal claims: Article 6(1)(f) and, where health information is involved, Article 9(2)(f).
We do not use enquiry information for email or WhatsApp marketing unless you make a separate choice to receive it. We do not use your information to make solely automated decisions about treatment or eligibility.
4. Health information is not requested
Dental photographs, X-rays, symptoms and treatment history are special-category health data. Do not send them through the website form or its public WhatsApp, email or telephone links. The non-clinical enquiry page asks for general process, timing, cost or travel questions only and contains no upload field.
If you sent health information unintentionally, ask for deletion at contact@dentalclinicabroad.co.uk. It should be restricted and deleted promptly unless a legal obligation requires limited retention.
5. When we share information
We do not sell personal information. We may share only what is necessary with:
- website hosting, security, private enquiry storage, email and other technical service providers;
- Google Analytics, PostHog and strictly masked Microsoft Clarity after Statistics consent, and Meta Pixel and Microsoft Advertising after Marketing consent, for limited website measurement using the data boundaries described in the Cookie Policy;
- WhatsApp, if you choose that communication channel;
- No dental provider currently receives information from the public enquiry service. Provider introductions and health-information sharing are paused.
- professional advisers, regulators, courts or public authorities where this is necessary or legally required.
When you choose WhatsApp, WhatsApp also processes your account and message information under its own privacy terms. You can use email or phone instead.
With Statistics consent, a WhatsApp selection is measured separately as the exact event whatsapp_click in Google Analytics and PostHog. With Marketing consent, Meta receives the custom whatsapp_click event and Microsoft UET receives whatsapp_click. These events contain no phone number, link destination, prefilled message, form value, health information, page URL or query. A WhatsApp selection remains a contact attempt and is not treated as a submitted or qualified lead.
6. International transfers
Some technology or communication providers may process information in countries outside the UK or European Economic Area. Where we make a restricted international transfer, we will use a lawful transfer mechanism, such as an applicable adequacy decision or approved contractual safeguards. You may contact us for more information about the safeguards relevant to your information.
7. How long we keep information
- General enquiries that do not progress are kept for no longer than 12 months after the last contact.
- Health information is not requested through the public enquiry route. Unsolicited health information should be restricted and deleted promptly unless limited retention is legally required.
- Technical and security logs are kept for shorter operational periods unless an incident requires investigation.
No provider receives clinical records through the current public enquiry route.
8. Security
The website uses HTTPS, restricted administrative access and a private WordPress record for valid form submissions before email delivery is attempted. No internet or messaging service is completely secure. Use the public contact routes only for a non-clinical question and do not send health information.
9. Cookies
The site uses cookies and similar technologies for security, consent choices, optional website statistics and optional advertising measurement. Read the Cookie Policy for the current cookie names, providers, purposes, data boundaries and durations. Use the Manage consent control on the site to review or change your choice at any time.
10. Your rights
Depending on the law and circumstances, you may ask us to:
- give you access to your personal information;
- correct inaccurate or incomplete information;
- delete information or restrict how it is used;
- provide certain information in a portable format;
- object to processing based on legitimate interests; or
- withdraw consent at any time.
Contact contact@dentalclinicabroad.co.uk to exercise a right. We may ask for enough information to confirm your identity. You also have the right to complain to the data protection authority where you live, work or believe a breach occurred. In the UK, this is the Information Commissioner’s Office. EU supervisory authorities are listed by the European Data Protection Board.
11. Changes to this notice
We may update this notice when the enquiry process or service providers change. The date at the top shows the latest version.
Optional PostHog internal analysis
Updated 15 September 2026. Statistics consent alone does not enable this option. If you separately select internal journey analysis and save your choice, we use a random browser identifier on this website to count repeat activity, broad interactions and a form start followed by an observed successful submission within 24 hours. This is internal website analysis, not advertising targeting or evidence of a booking. Refusing it does not affect your enquiry.
The local-storage entries seo_control_ph_journey_choice_v1 and seo_control_ph_journey_id_v1 expire 30 days after your explicit choice. Normal visits do not extend them. Each website has its own identifier; we do not match you across our websites or devices. Linked events use only broad home, contact, legal or other-content categories and fixed interaction/form labels, without names, contact details, exact URLs, treatment choices, message contents or files. PostHog EU Cloud processes these events in Frankfurt. Replay, automatic capture, person profiles and advertising exports are disabled.
We analyse a rolling period of up to 12 months. Browser expiry or withdrawal stops future linkage and clears the local identifier; it does not delete earlier server events. PostHog documents one year of event storage on Free plans and seven years on paid plans, with deletion enforcement rolling out separately. Our project settings do not expose their event-retention or enforcement values, so we cannot promise automatic deletion at one year. See PostHog event retention.
To withdraw, reopen Cookie settings or Manage cookies, untick internal journey analysis and save; rejecting Statistics also withdraws it. To request access or deletion, use the privacy contact shown in this policy and mention PostHog internal analysis. We will assess the request and coordinate with PostHog where needed; we may be unable to locate anonymous events once their random browser identifier is no longer available. Withdrawal is not a completed server-erasure request. Do not send dental records or other health information for an analytics request.
ChatGPT Ads conversion measurement
Updated 7 September 2026. With your Marketing consent, this website can send OpenAI the fact that a WhatsApp or email button was clicked. A click does not mean a message was sent or an enquiry was received. Measurement is separate from the information you choose to send us.
Our server sends only the generic click-event name, a random event identifier, the event time, this website’s home address and, when available after consent, the OpenAI ad-click reference. We do not send form contents, names, email addresses, phone numbers, uploaded files, health information, treatment-page addresses, page titles, referrers or your browser IP address or user agent. The OpenAI browser SDK and automatic customer-data matching are not used. Each event is opted out of future user-level personalisation.
If an OpenAI ad-click reference is available after consent, the first-party pfa_cg_oppref cookie can retain it for up to 30 days for attribution. It is removed when Marketing consent is withdrawn. We retain aggregate delivery counters and the latest delivery time/status, plus short-lived local duplicate-prevention and abuse-control records; no enquiry or customer record is attached. OpenAI processes received conversion events under its applicable privacy terms, including any international processing described there.
Use the website’s cookie controls to decline or withdraw Marketing consent. The website, email, WhatsApp links and enquiry form still work. No pre-consent clicks are replayed. See OpenAI’s privacy policy for its data handling and rights information.