Privacy notice

This notice explains what personal information Toothfully collects, why, and your rights. Toothfully is the data controller. Contact us at hello@toothfully.co.uk.

Patients who leave reviews

• What we collect: your name, email address, the date of your visit, your review, and any proof of appointment you upload.
• Why: to check your visit, publish your review and contact you about it. Our lawful basis is legitimate interests in running a trustworthy review service.
• What’s public: your review and the display name you choose. Your email address is never shown.
• How long: proof of appointment is deleted once your review is decided. Your review stays published until you ask us to remove it.

Patients invited by a practice

If a practice invites you, it shares your name, email address and appointment date with us so we can send one invitation. The practice is the controller of that information and we process it on its behalf. Uncompleted invitations are deleted after 90 days.

Practice staff

If a practice adds you to its team page, we email you to ask for your agreement. Nothing about you is published until you confirm, and you can ask us to remove it at any time. We check GDC registration numbers against the public GDC register.

Practice account holders

We keep your name, email address and login details to run your account, and billing details through our payment provider, Stripe. We don’t store card numbers.

Cookies

We use one essential cookie to keep you signed in and protect forms. We don’t use advertising or tracking cookies.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, or object to how we use it, by emailing hello@toothfully.co.uk. You can also complain to the Information Commissioner’s Office at ico.org.uk.