Legal
Privacy Policy
This policy explains what we collect, why, who we share it with, and the rights you have. Health information receives additional protection and we treat it accordingly.
Last updated 17 August 2026
1. Who is responsible for your data
DentaSpot, a company registered in the United States, is the controller of the personal data described in this policy.
Data protection enquiries: info@denta-spot.com. We will respond to any request about your data through this address.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name, phone number, WhatsApp number, city or country you would travel from | You |
| Enquiry details | Treatment of interest, number of teeth involved, travel timeframe, whether you hold a scan, preferred contact method | You |
| Health information | Radiographs, CBCT scans, intraoral photographs, medical history, medication, treatment plans and clinical correspondence | You, or a clinic with your authorisation |
| Communications | Emails, WhatsApp and call notes with your coordinator | You and us |
| Technical | IP address, device and browser type, pages viewed | Automatically, see our Cookie Policy |
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your enquiry and coordinating treatment | Performance of a contract, or steps at your request before entering one |
| Sharing your case with clinicians at featured clinics for assessment | Your explicit consent (Article 9(2)(a)) for health data |
| Arranging travel, accommodation and transfers | Performance of a contract |
| Aftercare, guarantee administration and record-keeping | Legitimate interests and legal obligation |
| Service messages about your case | Performance of a contract |
| Marketing, where you have opted in | Consent, withdrawable at any time |
| Site security and fraud prevention | Legitimate interests |
Where we rely on explicit consent to share health information, you may withdraw it at any time. Withdrawal does not affect processing already carried out, and it may mean we can no longer obtain an assessment for you.
4. Who we share it with
Featured clinics. To obtain an assessment we share your enquiry details and clinical images with featured clinics in Türkiye and Mexico. Each featured clinic is an independent controller of the data it receives and processes it under its own privacy policy and the law of its country.
Service providers. Hosting, communications, scheduling and analytics providers who process data on our instructions under written contract.
Travel providers. Hotels and transfer operators, where a package includes them — name and dates only, not health information.
Professional advisers and authorities. Where required by law, or to establish or defend legal claims.
We do not sell your personal information, and we do not share it with advertising networks for cross-context behavioural advertising.
5. International transfers
Coordinating treatment abroad necessarily means transferring your data abroad — principally to Türkiye and Mexico, and to service providers that may operate elsewhere.
Where data leaves the UK or EEA we rely on: your explicit consent to the transfer for the purpose of obtaining your assessment; and, for our processors, appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.
You should understand that data protection law in a destination country may offer protections that differ from those in your own. By utilizing our coordination services, you explicitly consent to the transfer of your data to these international clinics.
6. How long we keep it
- Enquiries that do not proceed to treatment: 24 months from last contact, then deleted.
- Coordination records where treatment proceeded: retained for the duration of the treating clinic’s guarantee period plus a further period for limitation purposes.
- Clinical images and correspondence: 10 years from your last communication with us, in order to protect against potential legal claims.
- Accounting records: as required by tax law.
- Marketing consent records: until you withdraw, plus a record of the withdrawal.
Treating clinics retain their own clinical records under the medical record-keeping rules of their country, independently of us.
7. Your rights
Depending on where you live, you may have the right to: access the data we hold; have inaccurate data corrected; have data erased; restrict or object to processing; receive your data in a portable format; withdraw consent; and complain to a regulator.
If you are in the EEA or UK these rights arise under the GDPR. You may complain to your national supervisory authority, or the UK Information Commissioner’s Office.
If you are in Türkiye equivalent rights arise under KVKK (Law No. 6698), and you may apply to the Personal Data Protection Authority (KVKK Kurumu).
If you are a California resident you may request disclosure of the categories and specific pieces of personal information collected, request deletion or correction, and limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA. You will not be discriminated against for exercising these rights, and you may use an authorised agent.
To exercise any right, email info@denta-spot.com. We will verify your identity before acting and respond within the period required by the applicable law.
8. Security
We use encryption in transit, access controls limiting clinical images to coordinators working on your case, and contractual security obligations on our processors.
No system is completely secure. Please do not send clinical images or medical history through unsecured public channels or social media messages.
9. Children
This service is intended for adults. We do not knowingly collect data from children under 16 without the involvement of a parent or guardian. Where treatment involves a minor, the enquiry must be made by a parent or legal guardian, who is responsible for the information provided.
10. Changes
We will update this policy as our processing changes. The date at the top shows the current version. Material changes will be notified directly where we hold your contact details.