— Legal · Privacy notice

Privacy notice

How Emergency Dentists Harlow collects, uses, and protects personal data submitted through the matching service. Written to satisfy UK GDPR and PECR.

Last reviewed · 4 May 2026

Plain-English summary

We collect your name, contact details, what is wrong, and where you are in Harlow — solely to match you with up to three vetted GDC-registered dentists. We share your details only with those matched dentists. Never sold, never used for marketing without your explicit consent, deleted after 24 months. You have full UK GDPR rights including deletion and complaint to the ICO.

1. Who we are

Emergency Dentists Harlow (“we”, “us”) operates www.emergencydentistsharlow.co.uk as a free matching service connecting Harlow residents with vetted GDC-registered emergency dentists. We are the data controller for personal information submitted via this site.

We are not a dental practice or clinical service. Once we share your enquiry with matched dentists, those dentists act as independent data controllers for any further work you instruct them to do.

2. What data we collect

When you submit the matching form we collect:

  • Full name — for the matched dentist to address you correctly.
  • Email address — for confirmation and follow-up.
  • Phone number — so the matched dentist can call you back to arrange the appointment.
  • Type of emergency — what is wrong (severe toothache, knocked-out tooth, etc.).
  • Area within Harlow — to match you with a dentist within reasonable travel distance.
  • Optional message — any context you choose to provide.
  • Page you submitted from — to give the matched dentist context.

We do not collect your medical history, dental records, NHS number, or any other clinical information through our forms. The matched dentist will collect what they need clinically, directly from you.

If you accept analytics cookies, we also collect anonymised browsing data through Google Analytics 4 — see "Cookies" below.

3. Why we collect it (lawful basis)

We process enquiry data on the basis of your consent (UK GDPR Article 6(1)(a)) — you tick a box on the form to confirm you want to be matched with up to three vetted dentists. You can withdraw consent at any time by emailing us; withdrawal does not affect lawfulness of processing carried out before withdrawal.

Once we share your enquiry with a matched dentist, that dentist's lawful basis for follow-up contact is also your consent, plus their legitimate interest in responding to a referred enquiry.

4. Who we share it with

Your enquiry is shared with up to three vetted dentists from our Harlow network. Each receives your name, email, phone, type of emergency, area, and any optional message. They are required to treat that information confidentially and use it only to respond to your enquiry.

The form submission itself is processed using:

  • Google Apps Script (Google LLC) — receives the form submission and routes it to our enquiry record.
  • Google Workspace (Google LLC) — stores the enquiry record and sends notification email.

Google may transfer data outside the UK; transfers are covered by the UK Addendum to the EU Standard Contractual Clauses, which provides the safeguards UK GDPR requires.

We do not sell or rent your data to third parties for marketing.

5. How long we keep it

Enquiry records are kept for 24 months from the date of submission, after which they are deleted. We keep them this long to handle re-matching requests, complaints, or follow-up questions.

Anonymised analytics data is retained for 14 months in Google Analytics, then automatically deleted by Google.

6. Cookies

This site uses two categories of cookie:

  • Strictly necessary — a small cookie that records your cookie-banner choice. No consent required (PECR exemption).
  • Analytics — Google Analytics 4 (cookies starting _ga) records anonymised page-view data so we can see which pages help patients. Loaded only if you click "Accept" on the cookie banner.

We do not use advertising, retargeting, or social-media tracking cookies.

7. Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the personal data we hold about you (subject access request).
  • Ask us to correct inaccurate data.
  • Ask us to delete your data (right to erasure).
  • Withdraw consent at any time.
  • Object to processing or restrict it.
  • Complain to the UK supervisory authority — the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Exercise any of these rights via the channels on our contact page. We respond within one calendar month.

8. Sensitive nature of dental enquiries

We recognise that dental emergency enquiries can touch on pain, distress, and sometimes serious health concerns. We deliberately limit what the form collects — name, contact, broad emergency type, area — so that more sensitive clinical information stays under your control and is shared only with the dentist you choose to engage.

If you accidentally include sensitive medical detail in the optional message field, you can ask us to delete the enquiry record at any time using the contact details above.

9. Security

Data submitted through the form is transmitted over HTTPS. Stored enquiry records are protected by Google Workspace account access controls (two-factor authentication enforced). Access is limited to the people responsible for processing matches.

No system is perfectly secure. If we ever suffer a personal data breach that is likely to affect your rights, we will notify you and the ICO within 72 hours, as UK GDPR requires.

10. Changes to this notice

We review this notice at least once per year and whenever the matching service changes materially. The "Last reviewed" date at the top reflects the most recent revision.