Note: This is a template policy provided as a starting point for the Dental Technology site. It should be reviewed and finalised by KTS Technology Group Limited and, where appropriate, a data-protection professional before publication.
1. Who we are
Dental Technology is the specialist healthcare technology division of KTS Technology Group Limited (KTS Technology Group), registered in England & Wales, Company No. 17098486, registered office 20 Wenlock Road, London, N1 7GU. We are the data controller for personal data you provide to us directly, and a data processor for client and patient data we handle on behalf of dental practices under a data processing agreement.
2. Data we collect
When you contact us or enquire about our services, we collect the details you provide, such as your name, email address, phone number, practice name and the content of your message. When we deliver managed services to a dental practice, we may process patient-related data strictly on that practice’s behalf and instruction.
3. How we use it
We use enquiry data to respond to you, provide information about our services, and where relevant deliver and support the services you engage us for. We do not sell your data. Calls to our service line may be recorded and transcribed for quality, training and support purposes.
4. Information security
As a healthcare technology provider, security is central to what we do. Data we hold and process is protected with encryption in transit and at rest, role-based access control, multi-factor authentication, activity logging and continuous monitoring. Our controls are designed to align with UK GDPR, Cyber Essentials and, for NHS dental clients, the Data Security & Protection Toolkit (DSPT).
5. Patient data & the NHS DSPT
Where we support NHS dental practices, patient data is processed only on the practice’s documented instructions and under an appropriate data processing agreement. We help practices meet their obligations for record and radiograph retention, secure storage of DPT/OPG and CBCT imaging, and completion of the annual DSPT submission.
6. Data retention
We retain enquiry data only for as long as necessary to respond to and support your enquiry or engagement. Client and patient data processed on behalf of a practice is retained in line with that practice’s instructions and applicable clinical and legal retention requirements.
7. Your rights
Under UK GDPR you have rights to access, rectify, erase and restrict the processing of your personal data, and to object to processing. To exercise any of these rights, contact us using the details below.
8. Contact
For any data-protection query, call us on +44 330 043 0422 or write to us at our registered office: 20 Wenlock Road, London, N1 7GU.