Privacy Policy

AS Endodontics processes personal identifiable information that relates to patients and is therefore required by law to comply with the UK General Data Protection Regulations (UK GDPR), which protect your privacy and ensure that your personal information is processed fairly and lawfully.

Our Data Protection Officer is Arvind Sharma

Our Commitment to Patients

AS Endodontics is committed to ensuring that it complies with UK GDPR and applies ethical principles to all aspects of its work to protect the interests of patients and maintain the confidentiality and security of any personal information held in any form by the practice.

Why Does the Practice Hold Personal Information About Me?

We keep information about you to:

  • ensure the dental team can contact you easily
  • provide you with the best possible dental care

Our legal basis for holding this information

AS Endodontics holds and processes personal and health information about patients in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our lawful bases for processing this information are as follows:

  • Provision of Healthcare
    Processing is necessary for the performance of a task carried out in the public interest and for the purposes of preventive or dental medicine, diagnosis, and the provision of healthcare. We require relevant personal and clinical information to assess, plan, and deliver endodontic treatment safely and effectively.
  • Legal Obligation
    We are legally required to maintain accurate clinical records and retain them for specified periods to comply with professional, regulatory, and statutory obligations set by bodies such as the General Dental Council and healthcare legislation.
  • Consent
    We rely on explicit consent when sharing information beyond what is necessary for clinical care—such as for marketing communications or when a patient requests that information be shared with another third party. Patients may withdraw consent at any time.

As a referral-based practice, we receive and share relevant clinical information with the referring dentist and potentially other healthcare providers involved in the patient’s care. This exchange of information is essential for ensuring continuity and quality of treatment and is carried out under the same lawful bases outlined above.

How does the Practice Collect Personal Information?

We collect personal information either directly from you or are provided with it by third parties, such as other dental or medical providers. It is important that the personal information we hold about you is accurate and current. Please keep us informed of any changes to your personal information.

What Personal Information is Kept?

Personal information includes facts (e.g. treatment you have had) and opinions (e.g. any concerns you or your dentist might have about your dental health). To provide the best possible care for you, accurate and comprehensive personal information is required. The following records are kept and updated regularly:

  • personal information and contact details, including your name, address and date of birth
  • dental, social and medical histories (e.g. past or current medical conditions, current medication, the name of your GDP)
  • results of the examination of your mouth and oral health, including radiographs and clinical photographs
  • information about appointments
  • any treatments and the costs
  • any proposed care, including advice we give to you
  • any concerns you or your dental team might have
  • details of your consent for specific procedures

How is My Personal Information Processed?

Processing of Personal Information

To provide you with appropriate care, we process your personal data for the following purposes:

Your care – we keep patient records to allow us to provide appropriate dental treatment and care.

Practice Administration – we will use your contact information to let you know when your next appointment is due, and we will also send reminders about any appointments that you have booked.

Sharing Relevant Information

To provide you with appropriate care, we might need to share your personal data with:

  • another dentist or health professional who is caring for you
  • your GP
  • HM Revenue and Customs

In these cases, only the minimum information required will be shared. Rarely, the law requires us to pass on information to prevent serious crime or injury. Where possible, we will inform you of requests to share personal information.

Storage and Retention of Personal Information

We keep patient records for adult patients for a minimum of 10 years from the last contact.

We will not keep records for longer than necessary and after they are no longer required, records will be shredded.

Personal information is stored on a secure password-protected practice computer system; only authorised practice staff have access to these systems. Back-ups of these data are made regularly.

Your Right to Access Personal Information

You have the right, under UK GDPR, to request a copy of the information held on you by our Practice. If you would like to make a request, please ask at reception or send your request in writing to AS Endodontics Ltd at the address below:

AS Endodontics Ltd
Attn: Dr Arvind Sharma
109 Comiston Road
Edinburgh, EH10 6AQ

We do not charge a fee for this information, unless we deem the request to be excessive, and will respond to your request within one month of its receipt. If we refuse your request, we will tell you reasons for this. You have the right to appeal to the Information Commissioner’s Office in this situation (see below for contact details).

You have the right to request correction of your information where there is an inaccuracy, request that we erase your information, object to the processing of your information or ask for the processing to be restricted. You also have the right to request the transfer of your personal information to another party, such as another dental practice. If you have concerns about the way we handle your personal information, you have the right to complain to the Information Commissioner’s Office (see below for contact details).

If you wish to be removed from our database at any point, please email us at info@asendodontics.com

If you have a query or would like more information, please contact our Practice Manager on 0131 202 2889 or write to the Practice Manager at the address above.

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Tel.: 0303 123 1113

Email: mail@ico.orggov.uk

Website: www.ico.org.uk