Last updated: 19 October 2026
Cherrybank Dental Spa is committed to protecting the privacy of everyone who visits our practice, uses this website or gets in touch with us. This policy explains what personal information we collect, why we collect it, what we do with it, and the rights you have over it.
Who we are
Cherrybank Dental Spa Limited, trading as Cherrybank Dental Spa, is the data controller for the personal information described in this policy.
| Practice address | 168 Glasgow Road, Perth PH2 0LY |
|---|---|
| Registered office | 168 Glasgow Road, Perth PH2 0LY |
| Company number | SC316933 (registered in Scotland) |
| ICO registration number | Z1203411 |
| Telephone | 01738 624 667 |
| Email for privacy enquiries | info@cherrydental.com |
We have not appointed a Data Protection Officer. Our Practice Manager is responsible for data protection enquiries and can be contacted using the details above.
The information we collect
If you are a patient, we hold the clinical and administrative records needed to care for you safely: your name, date of birth, address and contact details; your medical and dental history; details of examinations, treatment, prescriptions and referrals; clinical photographs, x-rays and scans; appointment history; and details of payments and any finance arrangements.
If you contact us through this website, we collect what you type into the form — typically your name, email address, telephone number, the treatment you are asking about and anything you tell us in the enquiry box. Our forms also record marketing source information (such as the campaign that brought you to the site) so we understand how people find us.
If you telephone us, we use a call-tracking service, CallRail, which shows different website visitors different telephone numbers so we can tell which page or advert led to the call. It records the number you call from, the date, time and length of the call, and how you reached our website. We do not record the content of calls.
If you sign up for our mailing list, we collect your name and email address.
If you apply to work with us, we collect the information in your application and anything gathered during recruitment.
When you browse this website, we collect limited technical information through cookies and similar technologies. Our Cookie Policy explains this in full.
Why we use it, and our lawful basis
Health information is given extra protection in law as "special category" data, and we treat it that way.
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Provide dental care and keep clinical records | Article 6(1)(c) legal obligation and Article 6(1)(f) legitimate interests; Article 9(2)(h) — health care provided by a professional bound by a duty of confidentiality |
| Respond to an enquiry you send us | Article 6(1)(b) steps prior to entering a contract, or Article 6(1)(f) legitimate interests |
| Send appointment reminders and recall notices | Article 6(1)(b) performance of a contract; Article 9(2)(h) |
| Take payment and administer finance arrangements | Article 6(1)(b) and Article 6(1)(c) |
| Send marketing emails about treatments and offers | Article 6(1)(f) legitimate interests, with consent or the "soft opt-in" as required by PECR. You can withdraw at any time |
| Meet our legal, regulatory and indemnity obligations | Article 6(1)(c) legal obligation |
| Improve this website and understand how it is used | Article 6(1)(f) legitimate interests — see the Cookie Policy |
We do not sell your personal information, and we do not use it to make automated decisions that produce legal or similarly significant effects.
Who we share it with
We share your information only where we need to. That may include:
- other dental and medical professionals involved in your care, including anyone we refer you to and your GP where relevant
- dental laboratories producing appliances, crowns, aligners or dentures for you
- the companies that run the systems we use: Dentally (appointments and clinical records), Surf Pacific (this website and its enquiry forms; the site is hosted by Netlify), CallRail (call tracking) and Google (website analytics and advertising measurement)
- our professional advisers, including our indemnity provider, where we need advice
- Financing First Limited, where you apply for a payment plan
- regulators and public bodies where the law requires it
Where a supplier processes information on our behalf, we have a written contract requiring them to protect it and to use it only on our instructions.
Some of these suppliers, including Google, CallRail and Netlify, are based in the United States and may store information there. Where a supplier is certified under the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework), we rely on that; where it is not, we rely on an International Data Transfer Agreement.
How long we keep it
We keep clinical records for 11 years after you were last seen.
For patients treated as children, we keep records until their 25th birthday, or for 11 years after they were last seen, whichever is longer.
Website enquiries that do not become patient records are kept for 12 months. Mailing list details are kept until you unsubscribe.
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you
- have inaccurate information corrected
- ask us to delete information, where there is no legal or clinical reason for us to keep it
- object to, or ask us to restrict, how we use it
- ask us to transfer it to another provider
- withdraw consent at any time, where we rely on consent
- opt out of marketing at any point, using the unsubscribe link in any email or by telling us
Please note that we cannot delete clinical records we are required to retain, even at your request.
To exercise any of these rights, contact us using the details above. We will respond within one month. There is normally no charge.
If you are unhappy with how we handle your information
Please tell us first — we would rather put things right ourselves.
We will acknowledge your complaint within 30 days of receiving it, look into it in a way that is proportionate to what you have raised, keep you updated, and tell you the outcome. You can complain in whatever way suits you: in writing, by email, by telephone or in person.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office, the UK's data protection regulator:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline 0303 123 1113 — ico.org.uk
Complaining to the ICO will not affect your care at this practice.
If your concern is about your dental treatment rather than your information, our Complaints Procedure explains how to raise it.
Changes to this policy
We review this policy regularly and will update it when our practice or the law changes. The date at the top shows when it was last reviewed.