Privacy Notice
The Old Surgery Dental Practice, Crewe
The Old Surgery Dental Practice Ltd is an independent dental practice providing a range of dental treatments on a private and NHS basis. Our practice comprises both employed and self-employed individuals. We work together to ensure our patients’ privacy is respected and their personal data is protected.
This privacy notice outlines how we handle patient information according to the UK GDPR and Data Protection Act 2018 (DPA18).
Name: Achillefs Sotiriou
Address: The Old Surgery Dental Practice, 31 Hungerford Road, Crewe, Cheshire, CW1 5EQ
Phone: 01270 587820
Email: info@oldsurgerydental.co.uk
We have appointed an in-house Data Protection Officer who can be contacted using the details above.
Collecting Your Personal Data
Most of the personal information we process is provided to us directly, such as when you contact the practice, engage with our website, or during your appointment.
Occasionally, we may receive patient information from other sources such as:
- Another dental professional that has treated you
- GP or hospital
- Carer, family member or partner
- Insurance or dental plan provider
- The NHS, a regulator, or other authority (e.g. the Police)
- Your solicitor
We may also receive data from third parties, including analytics providers such as Google, or advertising networks such as Facebook, both located outside the UK.
The Types of Personal Information We Collect and Process
We collect different types of personal data depending on your relationship with us. Examples include:
- Personal identifiers: Name, contact details, patient reference number, NHS number, date of birth, signatures, non-clinical photos or videos, CCTV images.
- Family details: Next of kin or emergency contact information.
- Financial details: Payment information, card or bank details.
- Technical data: IP address, browser data, website interactions, social media engagement, patient portal usage.
- Communication data: Emails, letters, messages, comments.
- Health data: Medical and dental histories, x-rays, scans, photos, clinical notes, and treatment plans.
- Ethnicity information: To understand cultural, language or equality needs.
- Religious or philosophical beliefs: When relevant to treatment (e.g. fasting).
Refusal to provide required personal data may prevent us from providing your treatment.
NHS Data
We process data relating to NHS treatment under the Public Task legal basis. For example, the NHS PR form collects additional data required to claim free or reduced-cost NHS dental services.
You can view this form here:
NHS PR Form (NHSBSA)
Withdrawing Consent
You can withdraw consent at any time by contacting the practice using the details provided above.
How We Store Your Data
Your information is securely stored in both paper and digital formats, including online and cloud-based systems. Where data is stored outside the UK, we ensure appropriate legal safeguards are in place.
Data Retention
We retain your data only as long as necessary to fulfil its intended purpose and meet legal, medical, or regulatory requirements. Retention is determined by factors such as sensitivity, risk, and legal obligations.
Sharing Your Personal Data
Your information is typically used internally by our staff and clinicians. However, it may also be shared with:
- Your GP
- Hospitals or other health professionals
- Private dental plans
- Dental laboratories
- Finance providers
- The General Dental Council and healthcare regulators
- NHS entities such as NHSBSA
- IT system providers
- Next of kin (in emergencies)
- Lawyers, insurers, or debt recovery agents
- Translators/interpreters (if required)
We will always share only the minimum information necessary.
International Transfers
If we transfer your data outside the UK, we ensure it is protected by one of the following:
- The country has been approved by the UK as having adequate protection.
- The recipient is part of an approved legal privacy framework.
- Standard contractual clauses approved by the European Commission.
If none apply, we will seek your explicit consent before transferring.
Your Rights
Under data protection law, you have rights including:
- Access: Request copies of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data in certain cases.
- Restriction: Limit how your data is processed.
- Objection: Object to processing in specific circumstances.
- Portability: Request transfer of your data to another provider.
There is no charge for exercising your rights. We aim to respond within one month.
How to Complain
If you have concerns about our use of your data, please contact us directly using the details above.
If you are dissatisfied with our response, you may contact the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk
NHS Data Opt-Out
We support the NHS in improving care quality, research, and planning. Data may be shared for purposes such as:
- Improving healthcare services
- Research and treatment development
- Preventing illness
- Monitoring safety
- Planning future services
Where possible, anonymised data is used. If you prefer not to share your confidential patient data for these purposes, you can opt out via:






