reception

Welcome to the future of your dental care in York

Our state-of-the-art dental practice located in heart Heslington village, York is now open, offering advanced dental treatments with a truly patient centred approach. As a modern dentist in York, we combine the latest innovations in dental technology with personalised care to ensure every patient receives the highest standard of treatment.

Designed with your comfort and wellbeing in mind, our clinic provides a welcoming and contemporary environment for patients seeking trusted dental care in York. Whether you are looking for a dentist for routine check-ups, preventative care, or advanced cosmetic and restorative treatments, our experienced team is here to help.

We are proud to bring a new standard of modern dentistry to York, and we look forward to helping you achieve and maintain a healthy, confident smile.

Your smile is our priority. We’re here to make you smile.

Privacy Policy

Privacy Policy

Last updated: April 2026

Who We Are

Heslington Dental Practice is a private dental practice located at 11/12 Main Street, Heslington, York, YO10 5EA. We are the data controller for personal data collected through this website and through your use of our dental services.

Contact us regarding data privacy matters:
Email: info@heslingtondental.co.uk
Phone: 01904 904 500
Address: 11/12 Main Street, Heslington, York, YO10 5EA

What Personal Data We Collect

Patient Data

  • Full name, date of birth and contact details (address, telephone number, email address)
  • Medical history and dental records, including clinical notes, X-rays and treatment plans
  • Dental plan membership details (e.g. Denplan)
  • Payment information (processed securely — we do not store card details)
  • Photographs and clinical images taken during treatment
  • Referral information to and from other practitioners

Website Data

  • Information submitted through our contact form (name, email, message)
  • Cookies and usage data (see Cookie section below)
  • IP address and browser information collected automatically when you visit our website

How We Use Your Personal Data

  • Providing dental care — to manage appointments, maintain dental records and deliver safe clinical treatment
  • Communication — to contact you regarding appointments, treatment, reminders and practice updates
  • Legal compliance — to comply with CQC requirements, GDC standards and healthcare regulations
  • Billing and administration — to process payments and manage your account
  • Improving our services — to understand how our website is used and improve patient experience

Legal Basis for Processing

We process your personal data under the following UK GDPR legal bases:

  • Contract — to provide dental services under your patient agreement
  • Legal obligation — to comply with healthcare laws and regulations
  • Legitimate interests — for appointment communications and service improvements
  • Vital interests — where processing protects a patient’s life or health in an emergency
  • Explicit consent — where we ask for specific agreement (e.g. marketing communications)

For special category health data (medical and dental records) we process under Article 9(2)(h) of UK GDPR — processing necessary for the provision of health care.

Who We Share Your Data With

  • Specialist dental practitioners and hospitals — when referring you for specialist treatment
  • Dental laboratories — when fabricating dental appliances (e.g. crowns, retainers)
  • Denplan / Simplyhealth — to administer your membership plan
  • Our booking system provider — to manage appointment bookings
  • IT and software providers — supporting our practice management systems, all bound by data processing agreements
  • Regulatory bodies — such as the CQC and GDC where required by law

We do not sell your personal data to third parties and will never share it for marketing purposes without your explicit consent.

How Long We Keep Your Data

  • Adult patient records — minimum 10 years from the date of the last entry, or until age 25 if the patient was a child at last treatment, whichever is longer
  • Child patient records — until the patient’s 25th birthday or 10 years after last treatment, whichever is longer
  • Financial and billing records — 7 years in accordance with HMRC requirements
  • Website enquiry data — 12 months unless a patient relationship is established

Your Rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your data in certain circumstances
  • Restriction — request that we limit how we use your data
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — where processing is based on consent, you may withdraw at any time

To exercise any of these rights please contact us at info@heslingtondental.co.uk. We will respond within one month.

Cookies

Our website uses cookies to improve your experience. We use essential cookies (necessary for the site to function) and, where consent is given, analytics cookies to understand how visitors use our site. You can manage or disable cookies through your browser settings at any time.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concerns before you contact the ICO — please email us first at info@heslingtondental.co.uk.

Changes to This Policy

We review and update this Privacy Policy periodically. The most recent version will always be published on this page with the date of last update shown at the top.