Privacy Policy

Last updated: 21 July 2026

This policy explains what personal information we collect when you use our website or enquire about treatment, why we collect it, and the rights you have over it.

Who we are

Pure by Dr Dehal ("we", "us") is a dental practice led by Dr Parveen Dehal, at 75 Gloucester Road, South Kensington, London SW7 4SS. We are the "data controller" for the information described here, responsible under the UK GDPR and the Data Protection Act 2018.

For any privacy question or request, you can write to us at Pure by Dr Dehal, 75 Gloucester Road, South Kensington, London SW7 4SS, or contact the practice directly.

What we collect

• Identity & contact: name, email address, phone number, date of birth.
• Health information: the treatment you're interested in and anything you tell us about your dental needs (this is "special category" data, handled with extra care).
• Booking & payment: appointment details and the refundable deposit. Card payments are processed securely by Stripe — we never see or store your full card number.
• Technical & usage: IP address, device/browser, pages viewed, and advertising identifiers (such as a Google click ID) via cookies and similar technologies.

How and why we use it

Purpose	Legal basis
Respond to enquiries and manage bookings/deposits	Performance of a contract / steps at your request
Provide dental care and keep clinical records	Provision of healthcare; legal obligation (Art. 9(2)(h))
Appointment reminders and service messages	Legitimate interests / contract
Marketing (email/SMS about treatments and offers)	Your consent (withdraw any time)
Website analytics and advertising measurement	Your consent (cookies)
Security, fraud prevention, running the practice	Legitimate interests

Who we share it with

We only share your data with trusted providers that help us run the practice, under contract and only for the purposes above:

• Dentally — clinical practice-management and diary.
• GoHighLevel — enquiry management and appointment communications.
• Stripe — secure payment processing.
• Google — website analytics and advertising measurement (Google Analytics & Google Ads).
• Social advertising platforms (e.g. Meta), where we run ads — advertising measurement.

We do not sell your personal information. Some providers may process data outside the UK; where they do, appropriate safeguards (such as UK-approved transfer mechanisms) are in place.

Cookies and tracking

We use essential cookies to run the site, and — with your consent — analytics and advertising cookies (Google Analytics, Google Tag Manager, Google Ads) to measure performance and improve our marketing. You can manage or refuse non-essential cookies through your browser settings at any time.

How long we keep it

Clinical/dental records are retained in line with GDC and NHS guidance (generally at least 11 years after your last treatment for adults, or until age 25 for children). Enquiry and marketing data is kept only as long as needed for the purpose, or until you withdraw consent.

Your rights

Under UK data protection law you can ask us to: access a copy of your data; correct it; erase it; restrict or object to its use; or receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To exercise any right, contact us using the details above.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed.