Privacy Policy

Citrus Dental Care 1 Meadow Place, Edinburgh EH9 1JZ info@citrusdentalcare.co.uk 0131 285 3308

Last updated: June 2026

Who We Are

Citrus Dental Care is a dental practice operating at 1 Meadow Place, Edinburgh EH9 1JZ. We are the data controller for the personal information we collect and process about our patients and website visitors.

What Information We Collect

Patient information: Name, date of birth, address, contact details (phone number and email address), NHS number where applicable, medical and dental history, treatment records, X-rays and clinical photographs, payment and finance information, and correspondence relating to your care.

Website visitor information: IP address, browser type, pages visited, time spent on the site, and information submitted through contact forms. This is collected via cookies and analytics tools.

Why We Collect It

We process your personal data for the following purposes:

• To provide dental treatment and manage your care
• To contact you regarding appointments, recalls, and follow-ups
• To process payments and, where applicable, finance applications
• To fulfil our legal and regulatory obligations as a dental practice registered with the GDC
• To respond to enquiries submitted through our website
• To improve our website and understand how it is used

Legal Basis for Processing

We process personal data on the following legal bases under UK GDPR:

• Contract: To provide the dental services you have requested
• Legitimate interests: To manage and improve the practice and communicate with patients
• Legal obligation: To comply with our regulatory duties under GDC standards and NHS Lothian requirements where applicable
• Vital interests: In emergency situations where processing is necessary to protect a patient’s life
• Special category data: Medical and dental records are special category data. We process these under Article 9(2)(h) of UK GDPR, for the purposes of providing healthcare.

Who We Share Your Information With

We do not sell your personal data. We may share information with:

• NHS Lothian, where you are treated as an NHS patient
• DPAS Limited, for the administration of membership plans
• Tabeo, for the processing of finance applications
• Dental laboratories, for the manufacture of dental appliances
• IT and software providers who support our practice management systems
• Other healthcare professionals involved in your care where relevant

All third parties are required to handle your data in accordance with UK data protection law.

How Long We Keep Your Data

Patient dental records are retained for a minimum of 10 years from the date of the last entry, or until the patient’s 25th birthday if they were a child when last treated, in accordance with NHS and GDC guidance.

Website enquiry data is retained for up to 12 months unless it becomes part of a patient record.

Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data in certain circumstances
• Object to or restrict certain types of processing
• Data portability in certain circumstances
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at info@citrusdentalcare.co.uk or write to us at 1 Meadow Place, Edinburgh EH9 1JZ.

Complaints

If you have a concern about how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to This Policy

We may update this privacy policy from time to time. The current version will always be published on this page with the date of the last update shown at the top.