Dentago Ltd ("Dentago", "we", "us", "our") operates the dental procurement marketplace available at www.dentago.co.uk and any associated applications (the "Platform").
Dentago acts as a data controller in respect of personal data collected through the Platform. For supplier data shared with dental practice users for the purpose of facilitating procurement, Dentago may act as a data processor. We will be clear in each context which role applies.
If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection contact at: privacy@dentago.co.uk.
This Privacy Policy applies to:
It does not apply to the websites or services of third-party suppliers listed on the Platform, who operate their own privacy policies.
| Category | Data Collected | Who Provides It |
|---|---|---|
| Account Registration | Name, email address, practice/business name, GDC number (Clinics), phone number, job title | Clinics and Suppliers |
| Supplier Credentials | Account numbers, login credentials for supplier portals (encrypted at rest) | Clinics (for price lookup) |
| Orders & Purchases | Products ordered, quantities, order references, delivery addresses | Clinics |
| Enquiries & Support | Name, email, message content | Any visitor |
| Newsletters | Email address | Any visitor |
| Supplier Onboarding | Company registration details, VAT number, contact name, email, pricing files | Suppliers |
| Category | Data Collected | Purpose |
|---|---|---|
| Usage Data | Pages visited, search queries, products viewed, time on site, click patterns | Platform improvement, analytics |
| Technical Data | IP address, browser type and version, operating system, device type, screen resolution | Security, compatibility, fraud prevention |
| Session Data | Session identifiers, authentication tokens | Security, keeping you logged in |
| Cookies | See our Cookie Policy | Various — see Cookie Policy |
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Creating and managing your account | Contract performance (Art. 6(1)(b)) |
| Providing the Platform and facilitating procurement | Contract performance (Art. 6(1)(b)) |
| Processing and tracking orders | Contract performance (Art. 6(1)(b)) |
| GDC verification of dental professionals | Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) |
| Customer support and communications | Contract performance; legitimate interests (Art. 6(1)(f)) |
| Sending transactional emails (order confirmations, alerts) | Contract performance (Art. 6(1)(b)) |
| Sending marketing emails and newsletters | Consent (Art. 6(1)(a)) — you may withdraw at any time |
| Security monitoring and fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Improving the Platform and analytics | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Resolving disputes and enforcing our Terms | Legitimate interests (Art. 6(1)(f)) |
We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.
We will only send you marketing emails and newsletters if you have opted in to receive them. You may unsubscribe at any time by:
Withdrawing consent does not affect the lawfulness of any marketing sent prior to withdrawal.
We do not sell your personal data. We share it only in the following limited circumstances:
When you place an order through the Platform, we share your relevant order details (name, delivery address, order reference) with the relevant Supplier(s) to enable fulfilment. Suppliers receive only the information necessary to process your order.
We use carefully selected third-party service providers who process data on our behalf, under binding data processing agreements:
We may disclose your personal data where required to do so by law, court order, regulatory body (including the Information Commissioner's Office), or to protect the rights, property, or safety of Dentago, its users, or others.
If Dentago is acquired by or merged with another business, your data may be transferred as part of that transaction. We will notify you before any such transfer and give you the opportunity to exercise your rights.
Where Clinics choose to store supplier account credentials on the Platform (to enable automated price lookup), those credentials are:
You are responsible for ensuring any credentials stored are your own and that you have authority to use them in this way.
| Data Category | Retention Period |
|---|---|
| Account data (active accounts) | For the duration of your account |
| Account data (after deletion) | Up to 12 months (for dispute resolution and legal obligations) |
| Order records | 7 years (UK tax and accounting obligations) |
| Supplier credentials | Until you delete them or close your account |
| Marketing consent records | 3 years from last consent or last interaction |
| Support correspondence | 3 years |
| Server logs and technical data | 90 days |
| Analytics data (anonymised) | Up to 26 months |
We regularly review the data we hold and securely delete or anonymise data that is no longer required.
Dentago is a UK company and our primary data storage is within the UK and European Economic Area (EEA). Where we use service providers that may transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, including:
Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:
| Right | What It Means |
|---|---|
| Access | Request a copy of the personal data we hold about you (a Subject Access Request) |
| Rectification | Ask us to correct inaccurate or incomplete personal data |
| Erasure | Ask us to delete your personal data ("right to be forgotten"), subject to legal retention requirements |
| Restriction | Ask us to restrict processing of your personal data in certain circumstances |
| Portability | Receive your personal data in a structured, machine-readable format and transfer it to another controller |
| Object | Object to processing based on legitimate interests, including direct marketing |
| Withdraw Consent | Withdraw consent at any time where processing is based on consent |
| Automated Decisions | Not be subject to solely automated decision-making that produces significant legal effects |
To exercise any of these rights, please email privacy@dentago.co.uk. We will respond within one calendar month of receiving your request (extendable by a further two months for complex requests, with notice to you).
We may need to verify your identity before processing certain requests. We will not charge a fee for reasonable requests unless they are manifestly unfounded or excessive.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
We would, however, appreciate the opportunity to address your concerns before you approach the ICO, and ask that you contact us first.
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration, including:
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.
The Platform is intended for use by dental professionals and business users only. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@dentago.co.uk.
We use cookies and similar tracking technologies on the Platform. For full details of the cookies we use, their purposes, and how to manage them, please see our Cookie Policy.
The Platform may contain links to third-party websites, supplier portals, and external resources. These sites operate independently and have their own privacy policies. We are not responsible for the privacy practices of third-party sites and encourage you to review their policies before providing any personal data.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform functionality. When we make material changes, we will:
Your continued use of the Platform following any update constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact: