Privacy notice
This notice explains what personal data we collect, where it comes from (including public sources), why and how we use it, who we share it with, how long we keep it, and the rights you have.
Last updated September 2026 · v1.1
We are the controller for the personal data on this site. We hold some personal data that comes from public sources (for example named dentists on practice pages), and data you give us directly (for example when you create an account or contact us). We rely mainly on legitimate interests and, for marketing, on consent. You can object, ask for a copy, or ask us to delete data, and you can complain to the ICO.
1Who is the controller
The controller is GETGROWTH LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, company number 17275463 (Companies House record). We are registered with the UK Information Commissioner's Office (ICO) as a data controller, registration number ZC200549 (see our entry on the ICO register). For any privacy question, contact [email protected].
2The data we hold, and where it comes from
a. Listing data from public sources
To build the directory we collect information about dental practices from each nation's regulator, from publicly available information, and from the NHS (see Data sources). Most of this is business information, but some is personal data, for example the names of individual dentists, professional roles, and practice contact details that identify a person. Where this is your personal data, this notice and your rights apply, even though we obtained it from a public source.
b. Data you give us directly
- Account data: name, email, password, and (for practices) the practice you represent.
- Enquiry & correction data: anything you include when you contact us to report a correction or make a complaint.
- Billing data (paid plans): handled by our payment provider, we don't store full card details. See the Subscription terms.
- Marketing preferences: your consent choices.
c. Data collected automatically
Device and usage data via cookies and similar technologies. If you accept analytics cookies, this includes a recording of how you use our pages: clicks, taps and scrolling, with anything you type hidden. We do not record sign-in, invitation or payment pages. See the Cookie policy.
We don't ask you to share symptoms or other health details, and our forms are designed to avoid collecting them. Please don't send us health information. If any does reach us, we delete it. We are not set up to process special-category health data as a routine matter. For urgent health needs, see the NHS guidance on urgent dental care.
3Why we use it
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Build and show the directory, including personal data from public sources | Legitimate interests, providing a useful, accurate public directory, balanced against individuals' rights (see §4) |
| Run your account and provide features | Contract (and legitimate interests) |
| Respond to enquiries, corrections and complaints | Legitimate interests |
| Take payment for paid plans | Contract |
| Send marketing emails | Consent (or soft opt-in to existing customers, who can unsubscribe anytime) |
| Keep the site secure, and prevent, detect and investigate fraud and misuse (including checking that a listing is managed by someone authorised to manage it) | Legitimate interests |
| Meet legal obligations (e.g. accounting) | Legal obligation |
| Non-essential cookies / analytics | Consent |
4Legitimate interests & data from public sources
For personal data we obtain from public sources, we rely on legitimate interests. We've carried out a balancing assessment weighing the value of an accurate public directory against the rights and reasonable expectations of the individuals concerned. We limit ourselves to professional information relevant to a practice listing, we attribute it, we keep it current, and we honour objections and removal requests. You can ask us for more information about this assessment, and you can object at any time (see §8). Because this information comes from public sources and contacting every individual listed would involve disproportionate effort, we provide this public notice rather than writing to each person individually, as permitted by Article 14(5) of the UK GDPR.
5Who we share data with
- Service providers (processors), under contract and only on our instructions. Currently: Netlify (website hosting and delivery), Supabase (database and account sign-in), Stripe (subscription payments), Resend (service and account emails), Google Analytics (site analytics) and Microsoft Clarity (records how pages are used, such as clicks and scrolling, with anything you type hidden). Both only run if you accept analytics cookies. We update this list when our providers change.
- Practices, where you choose to contact or book with them, at that point you deal with the practice directly.
- A practice whose listing is affected, where we investigate a request that appears to be fraudulent or made without authority. In that situation we may share relevant details of the claim, and of the account that made it, with the practice concerned and, where appropriate, with law-enforcement agencies, so the matter can be resolved. UK data-protection law permits this sharing to prevent, detect and investigate fraud.
- Authorities or advisers where we must comply with the law or protect our rights.
We don't sell your personal data.
6International transfers
Some of the providers listed in §5 are based in, or use infrastructure in, the United States. Where personal data is transferred outside the UK, we rely on an approved safeguard, either UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the International Data Transfer Agreement / Addendum to the Standard Contractual Clauses. Microsoft Clarity stores its data in Microsoft's Azure cloud, and Microsoft Corporation in the United States can process it.
7How long we keep it
| Data | Retention |
|---|---|
| Directory / listing data | While the practice is listed; updated or removed on correction or objection |
| Account data | While your account is active, then 12 months after closure |
| Parked editor drafts & photos (after a paid plan ends) | 6 months, then deleted (see Cancellation) |
| Enquiries & complaints | 24 months from the last message on the matter |
| Billing records | 6 years from the end of the financial year they relate to, as UK tax law requires |
| Site analytics recordings (Microsoft Clarity) | 30 days from the visit. Microsoft keeps a small random sample, and any recording we mark to keep, for up to 9 months |
| Marketing preferences | Until you withdraw consent, plus a suppression record so we honour your choice |
8Your rights
Under UK GDPR you have the right to: be informed; access a copy of your data; have inaccurate data corrected; have data erased; restrict or object to processing (including objecting to our legitimate interests and to direct marketing); data portability; and not to be subject to solely automated decisions with legal effect. To exercise any right, email [email protected]. We'll respond within one month. If your request is complex, or you make several at once, we may need up to two further months, and we will tell you within the first month if that happens. We don't charge a fee. The only exceptions the law allows are a repeat copy of information we have already given you, or a request that is clearly excessive, where we may charge a reasonable fee based on our administrative costs or decline. We will always explain our reasons.
9Marketing
Service emails are not marketing. While you hold an account we send the emails you need in order to use it: sign-in codes, listing and publication confirmations, payment receipts, renewal and cancellation notices, and changes to these terms. You can't opt out of these while the account is open, because without them we can't run the service for you.
Marketing emails are separate and optional. We'll only send them where you've asked to receive them, or where you're an existing customer and we're telling you about our own similar services. The marketing tick-box is never pre-ticked. You can withdraw at any time using the unsubscribe link in any marketing email, in your account settings, or by emailing us, and we keep a record of your choice so that we honour it. Withdrawing doesn't affect anything we did beforehand, and it doesn't stop the service emails above.
10Children
The site is intended for adults arranging dental care. We don't knowingly collect data from children, and accounts are only for people acting for a dental practice.
11Complaints
Please tell us first so we can help, [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk or 0303 123 1113.
12Changes to this notice
We may update this notice; we'll change the "last updated" date and, for significant changes, take reasonable steps to tell you. See Policy updates.
We review this notice when our processing changes and at least once a year. Earlier versions are available on request from [email protected].