Privacy Notice
Last updated: 22 July 2026
This notice explains what personal information Dental Treatment Abroad collects when you use our website and enquiry form, why we use it, who we share it with and the rights you have over it. We have tried to keep it clear and jargon-free, because we know that sharing health information is a personal thing and you deserve to understand exactly what happens to it.
Dental Treatment Abroad is a UK-based patient-coordination and referral service. We work online and you can reach us by email or WhatsApp during our business hours. We introduce and coordinate patients who are interested in dental treatment in Romania with one vetted partner dental clinic in Bucharest. We do not provide dental treatment ourselves and we do not form a dentist–patient relationship with you. Any clinical assessment, treatment and treatment contract is strictly between you and the clinic.
Who we are (the data controller)
Dental Treatment Abroad (“we”, “us”, “our”) is the controller of the personal data described in this notice. That means we decide what information is collected and how it is used, and we are responsible for looking after it.
You can contact us about anything in this notice, including to exercise your rights or to withdraw your consent, by email:
- Email: hello@dentaltreatmentabroad.co.uk
- WhatsApp: +40 727 506 445
- Website: dentaltreatmentabroad.co.uk
- Business hours: Monday to Friday, 09:00–18:00 UK time
The personal data we collect
We only collect what we need to respond to your enquiry and to coordinate a treatment quote for you. When you complete our enquiry form, this may include:
- Contact details: your full name, email address and (optional) phone number.
- Enquiry details: the treatment you are interested in (for example implants, veneers, crowns, All-on-4 or full-mouth treatment) and any optional free-text message you choose to add.
- Dental and health information you choose to share: for example your dental history, symptoms or X-rays. This is entirely optional, but if you provide it, it helps the clinic prepare a more accurate quote and recommendation.
About your health information. Information about your health, including dental and medical details and any X-rays, is treated as “special category data” under UK data protection law (UK GDPR Article 9). The law gives it extra protection, and so do we. We only collect it if you choose to share it, and we only use it for the purpose you gave it to us for.
We do not knowingly collect information from anyone under 18. Our service is intended for adults arranging their own dental treatment.
Why we use your data and our lawful bases
The law requires us to have a valid “lawful basis” for using your personal data. Here is what we do and the basis we rely on:
| What we do | Why | Lawful basis |
|---|---|---|
| Respond to your enquiry and correspond with you using your contact details | So we can reply to you and coordinate your quote | Consent and/or our legitimate interests in responding to an enquiry you have initiated (UK GDPR Art. 6(1)(a) and/or 6(1)(f)) |
| Share your details with our partner clinic to prepare a treatment quote and recommendation | So the clinic can assess your enquiry and give you a quote | Consent (UK GDPR Art. 6(1)(a)) |
| Use any dental/health information you provide, and share it with the partner clinic | So the clinic can prepare an accurate quote and recommendation | Your explicit consent for special-category (health) data (UK GDPR Art. 9(2)(a)), alongside our Article 6 basis above |
The consent you give. When you submit the form, you tick an unbundled, opt-in box (it is switched off by default) that says:
“I consent to Dental Treatment Abroad sharing the dental and contact details I enter here with one partner clinic in Bucharest, Romania so it can prepare a treatment quote and recommendation, and to Dental Treatment Abroad using these details to reply to me.”
You do not have to consent, and you can change your mind at any time (see Your rights below). Getting a quote is free and there is no obligation to proceed.
Who we share your data with
We share your data with only one external recipient in connection with your enquiry: our single vetted partner dental clinic in Bucharest, Romania. We pass on the details you have entered so the clinic can prepare a treatment quote and recommendation, and we relay the clinic’s response back to you.
The partner clinic is an independent, Romanian-registered dental practice (registered with the Romanian College of Dental Surgeons). The clinic states that it complies with EU Medical Device Regulation (MDR) 2017/745. That is the clinic’s own statement about its own compliance and not a guarantee given by Dental Treatment Abroad. The clinic is a separate controller of the data once it receives it for the purpose of assessing and treating you, and its own privacy terms will apply to the treatment relationship between you and the clinic.
We also use a small number of trusted service providers (“processors”) to run our website and service. They only act on our instructions and only handle your data to provide their service to us:
- Website hosting: our website is hosted by Hostinger, under its data-processing terms.
- Enquiry storage: your enquiry is stored in the website’s WordPress database, hosted by Hostinger under the same terms, within the site’s private admin area.
- Email delivery: enquiry emails are delivered to our inbox through Hostinger’s mail service.
We never sell your data. We do not, and will not, sell your personal data or share it for anyone else’s marketing. Apart from the partner clinic and the service providers listed above, we do not share your data with any other organisation unless we are required to do so by law.
Sending your data to Romania (international transfer)
To prepare your quote, your data is sent from the UK to the partner clinic in Romania. Romania is in the EU/EEA. The UK treats the EEA as providing an adequate level of data protection, so no additional transfer safeguards are required for this transfer.
How long we keep your data
We keep your data only for as long as we need it for the purposes described above, and then we securely delete it.
- If you enquire but do not proceed: we keep your enquiry (including any health information) for 12 months from your last contact, so we can deal with any follow-up, after which it is deleted.
- If you proceed to treatment via the partner clinic: we keep a record of the coordination for up to 6 years, to cover any legal, insurance or complaint matters, after which it is deleted.
- If you withdraw your consent: we stop using your data and delete it from our active systems, unless we are legally required to keep a limited record.
Your rights
Under UK data protection law you have the following rights over your personal data:
- The right to be informed: this notice is part of how we do that.
- The right of access: you can ask for a copy of the data we hold about you.
- The right to rectification: you can ask us to correct data that is wrong or incomplete.
- The right to erasure: you can ask us to delete your data (“the right to be forgotten”).
- The right to restrict processing: you can ask us to pause how we use your data.
- The right to object: you can object to us using your data where we rely on legitimate interests.
- The right to data portability: you can ask for the data you gave us in a portable format.
- The right to withdraw consent at any time: where we rely on your consent (including your explicit consent for health information), you can withdraw it whenever you like. Simply email hello@dentaltreatmentabroad.co.uk. Withdrawing consent does not affect anything we lawfully did before you withdrew it, and it will not affect any separate relationship you have with the clinic.
To exercise any of these rights, email us at hello@dentaltreatmentabroad.co.uk. We will respond within one month. Using these rights is normally free, although we may charge a reasonable fee or decline a request if it is clearly unfounded or excessive, as the law allows.
Complaining to the regulator. If you are unhappy with how we have handled your data, we would like the chance to put it right, so please contact us first. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at any time. You can find out how at ico.org.uk.
How we keep your data secure
We take the security of your information seriously, especially your health information. Enquiries are stored privately within our website’s WordPress admin area and are emailed to our inbox; access is limited to those who need it to run the service. In practice, our measures include serving the whole website over an encrypted HTTPS/TLS connection with HTTP Strict Transport Security enforced, running a web application firewall and malware scanning on the site, applying browser security headers, restricting and protecting administrator access, and keeping the software and its components updated. On a normal visit the site sets no cookies until you interact with the cookie notice.
No method of transmission or storage is ever completely secure, but we work to protect your data and to keep our measures under review.
Cookies
Our website currently uses only strictly necessary cookies (for WordPress, page caching and to record your cookie/consent choices). We do not currently use any analytics, advertising or marketing cookies. If we ever add analytics or similar cookies, we will ask for your consent first. For full details, please see our Cookie Policy.
Changes to this notice
We may update this notice from time to time, for example if our service or the law changes. When we do, we will change the “Last updated” date at the top. Where changes are significant, we will take reasonable steps to make them clear.
Governing law
This notice, and any matter relating to how we handle your data, is governed by the law of England and Wales.