Privacy policy
We take your privacy seriously. This policy explains how Birmingham CBCT & OPG Hub collects, uses and protects personal information, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It replaces the placeholder text that came with the old website.
Who we are
Birmingham CBCT & OPG Hub is a branding style of Dhody’s Ltd (company number 07991919), 341 Birmingham Road, Great Barr, Birmingham B43 7AP. Operational management is handled by Management FD Limited (14564147). Dhody’s Ltd is the data controller. You can contact us on 01922 326040, by email at info@birmingham-cbct-opg-hub.co.uk, or through our contact page.
What we collect
- Booking and referral form: the patient’s name, date of birth, phone number, email and (optionally) address; the scans requested; the appointment chosen; any notes or medical information you add; and, for referrals, the referring dentist’s name, GDC number, practice details and the clinical justification for the scan.
- Payments: when you pay a booking deposit, card payments are handled by Stripe. We never see or store your full card details. Stripe receives your email address and booking details so it can process the payment.
- Your scan: the images and any radiology report form part of your dental record.
- Phone calls and emails you send us.
How we use it
- To arrange, carry out and record your scan, including the clinical justification required by the Ionising Radiation (Medical Exposure) Regulations (IRMER).
- To send your scan images and any report to you and/or your referring dentist.
- To take a booking deposit and manage your appointment, and to contact you if you started a booking but did not finish it.
Legal basis
We process your information to provide the care you ask for (contract and legitimate interests), to meet our legal duties (for example IRMER record keeping), and, for health information, for the purposes of providing health care (UK GDPR Article 9(2)(h)).
Who we share it with
Your referring dentist; a reporting radiologist if a formal report is requested; Stripe for payments; and our email and IT providers who host our systems. We share information only as needed to provide your care or where the law requires it, and never sell it.
How long we keep it
Dental records, including scans, are kept for as long as NHS and professional guidance requires (usually at least 11 years for adults, and until age 25 or for 11 years, whichever is longer, for children). Booking enquiries that do not lead to a scan are kept only as long as needed to follow them up.
Cookies and website statistics
- Essential: the site remembers your cookie choice in your browser.
- Our own visit counter (cookie-free): we count page views and clicks (for example on “Book” or “Call”) to improve the site. It uses no cookies, stores no IP address and collects no personal details; the data is kept on our own server.
- Google Analytics (only with your permission): loaded only if you accept analytics cookies. You can change your choice at any time with “Cookie settings” at the bottom of every page.
- Google Maps: the map only loads if you press “Show map”, because Google may set cookies.
Your rights
You can ask for a copy of the information we hold about you, ask us to correct it, and in some cases ask us to delete or restrict it or object to how we use it. Contact us using the details above. If you are unhappy with how we have handled your information, please tell us first so we can put it right; you can also complain to the Information Commissioner’s Office at ico.org.uk.
Changes
We may update this policy from time to time. The date at the bottom of the page shows when it last changed.