Privacy Policy
Who we are
Ty Newydd Dental Care is a private dental practice and the trading name of Jones & Jenkins Dental Surgery. We are the "data controller" for the personal data described in this policy, which means we decide how and why your information is used.
You can contact us about anything in this policy:
- Address: Ty Newydd Dental Care, 75 Tynewydd Road, Barry, CF62 8BA
- Phone: 01446 738602
- Email: reception@tynewydd-dental.co.uk
This policy covers the personal data we collect through our website, tynewydddentalcare.co.uk. It explains what we collect, why, how long we keep it, who we share it with, and the rights you have under UK data protection law.
We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).
What personal data we collect
Through our website, we only collect personal data that you choose to give us.
When you use our enquiry form
If you fill in the enquiry form on our website, we collect:
- your name
- your email address
- your phone number
- the message you write in the enquiry box
You do not have to give us special category health information through this form, and we ask that you do not include detailed medical information in your message. If you do choose to include health details, we will treat them with the same care as any other information you give us and use them only to respond to your enquiry.
When you browse the website
Our website uses cookies and similar technologies that may collect limited technical information, such as how you use the site. This is explained in full in our Cookie Policy. We use website analytics that handle this information in an aggregated and anonymised way wherever possible.
We do not operate user accounts, online shopping, or online payments on this website.
Why we use your data, and our lawful basis
Under UK GDPR we must have a "lawful basis" for using your personal data. The lawful bases we rely on are set out below.
| What we do | Why | Lawful basis (UK GDPR Article 6) |
|---|---|---|
| Respond to your enquiry | To answer your question, give you the information you have asked for, or arrange to speak with you | Legitimate interests — Article 6(1)(f). It is in both your interest and ours to respond to an enquiry you have sent us. |
| Set non-essential cookies, including analytics | To understand how the website is used and improve it | Consent — Article 6(1)(a), with consent obtained as required by PECR |
We do not use the details you give us through the enquiry form for marketing. We will only contact you about the enquiry you made, unless you separately ask us to do otherwise.
Where you give us any health information voluntarily, we rely on Article 9(2)(h) of the UK GDPR (provision of health care) read with the conditions in Schedule 1 of the Data Protection Act 2018, alongside the Article 6 basis above.
Who we share your data with
We do not sell your personal data, and we do not share it for marketing.
To run our website and respond to enquiries, we use a small number of trusted service providers who act as our "data processors". They may only use your data on our instructions and must keep it secure.
- JotForm — provides the enquiry form on our website. When you submit the form, JotForm processes your name, email address, phone number, and message so that your enquiry reaches us.
- Google — provides the embedded map on our Contact section and our website analytics.
- Webjects Ltd — builds and maintains our website on our behalf.
- Krystal Hosting — hosts our website on servers located in the United Kingdom.
Sending data outside the UK
Most of our processing takes place in the United Kingdom. Our website is hosted in UK data centres.
Our enquiry form provider, JotForm, is based in the United States, so the information you submit through the form may be transferred to and processed in the US. Where personal data leaves the UK, we make sure it is protected by appropriate safeguards as required by Chapter V of the UK GDPR — such as the relevant standard contractual clauses or an equivalent transfer mechanism recognised under UK law. You can ask us for more detail about these safeguards using the contact details above.
Some analytics and mapping data may also be processed by Google outside the UK under the same kind of safeguards.
How long we keep your data
We keep your personal data only for as long as we need it.
- Enquiry form submissions — we keep your enquiry and our correspondence with you for up to 24 months after your last contact with us, unless you become a patient (in which case your information is held under our separate patient records retention rules) or unless we need to keep it longer to meet a legal obligation. After that, we securely delete it.
- Website analytics data — retained in line with our analytics provider's standard retention settings and held in an aggregated form.
Your rights
Under UK data protection law you have the following rights over your personal data:
- The right to be informed — to be told how we use your data (this policy).
- The right of access — to ask for a copy of the personal data we hold about you.
- The right to rectification — to have inaccurate data corrected.
- The right to erasure — to ask us to delete your data in certain circumstances.
- The right to restrict processing — to ask us to limit how we use your data in certain circumstances.
- The right to object — to object to our use of your data where we rely on legitimate interests.
- The right to data portability — to ask us to provide certain data in a portable format, where this applies.
To exercise any of these rights, please contact us by phone or email using the details at the top of this policy. We will respond within one month. There is normally no charge.
Your right to complain
If you have a concern about how we handle your personal data, please contact us first and we will do our best to put it right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
How we keep your data secure
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access, as required by Article 32 of the UK GDPR. Our website is hosted on secure UK servers and served over an encrypted (HTTPS) connection. Our service providers are required to maintain their own appropriate security measures.
Changes to this policy
We may update this policy from time to time. Any changes will be published on this page with a revised "last updated" date below. Please check back periodically.
Last updated: 9 June 2026