Privacy policy

Draft — not yet reviewed by a lawyer. This describes what the site actually does today. It is not a finished legal document and must be reviewed before launch. This page is currently excluded from search indexes.

What we collect

When you send a request to a practice through this site, we collect:

  • Your name, phone number and email address
  • Your preferred contact time, and any message you choose to write
  • The treatment and city the request came from
  • A salted hash of your IP address, for spam prevention and rate limiting
  • The exact consent wording shown to you, and the time you agreed to it

What we deliberately do not collect

We do not ask for health or dental history, insurance ID numbers, or any other medical information, and the request form has no field for them. Please do not include medical details in the free-text message — that conversation belongs with the practice directly.

We never store your raw IP address, only a salted hash of it.

What we do with it

A request is passed to the matched dental practice so they can contact you. That is the purpose you gave it to us for, and we do not use it for anything else. We do not sell personal data, and we do not share it with anyone other than the practice your request was addressed to and the service providers who operate the site on our behalf.

Consent

You consent explicitly to being contacted by phone, SMS or email before a request is sent. We store the wording you agreed to, verbatim, alongside the timestamp — so there is a record of exactly what was agreed rather than an assertion that something was.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@thetoothdirectory.com. Deleting a request we have already passed to a practice removes it from our systems; you would need to contact the practice separately about theirs.

Cookies

The public pages of this site do not require cookies and do not set advertising or tracking cookies. Practice accounts use a session cookie to keep you signed in.

Retention

Retention periods to be set before launch, alongside legal review.