1. Who we are
This privacy policy applies to Invisalign Local, an independent directory of UK Invisalign providers operated from the United Kingdom. References to "we", "us", or "our" mean Invisalign Local. References to "you" or "your" mean any visitor to invisalignlocal.co.uk.
For the purposes of UK data protection law (the UK General Data Protection Regulation and the Data Protection Act 2018), Invisalign Local is the data controller for any personal data collected through this website. You can contact us at hello@invisalignlocal.co.uk.
2. What data we collect
We collect the following categories of personal data:
- Information you provide directly: if you contact us by email or submit an enquiry form, we receive your name, email address, postcode or location, and the contents of your message.
- Information collected automatically: when you visit the website, our analytics providers receive your IP address (truncated where possible), the pages you view, the referring page, your approximate location at city level, your device type and browser, and the time of your visit.
- Cookies and similar technologies: see our Cookies Policy for full details of the cookies we set and how you can control them.
We do not collect or store any special category data (such as health information). Your postcode is only used to surface practice listings near you and is not retained by us beyond your session.
3. How we use your data
We use personal data for the following purposes, on the legal bases shown:
- To operate and improve the website (legitimate interests): aggregated analytics, error monitoring, and search-feature behaviour.
- To respond to enquiries you submit (legitimate interests, or contract where applicable): replying to messages and forwarding consultation enquiries to the practice you have selected.
- To set non-essential cookies for analytics or advertising (consent): only where you have given consent through our cookie banner.
4. Sharing your data
We share personal data only in the following circumstances:
- With dental practices you choose to contact. If you submit an enquiry form addressed to a specific practice, the contents of your enquiry, your name, email, and any phone number you provide will be sent to that practice. The practice then becomes the data controller for that enquiry under their own privacy policy.
- With service providers acting on our behalf as processors: hosting, email delivery, analytics, and security services (currently including Google Analytics, Google Tag Manager, Microsoft Clarity, and Microsoft Bing UET, where deployed).
- Where required by law or to protect our rights or the safety of others.
We do not sell personal data to third parties under any circumstances.
5. International transfers
Some of our service providers (notably Google and Microsoft) may transfer data outside the UK and European Economic Area, including to the United States. Where this happens we rely on the UK Government's adequacy decisions, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or other appropriate safeguards published by the Information Commissioner's Office.
6. How long we keep data
- Email enquiries: up to 24 months from the date of last contact, then deleted.
- Analytics data: aggregated and retained according to the provider's default retention (Google Analytics 4 default is 14 months at user level; we do not extend this).
- Server logs: typically 30 days, then deleted.
7. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- request that we erase your data, subject to certain exemptions;
- restrict or object to processing of your data;
- request a copy of your data in a portable format;
- withdraw consent at any time where we rely on consent;
- complain to the UK Information Commissioner's Office at ico.org.uk.
To exercise any of these rights, email hello@invisalignlocal.co.uk. We will respond within one calendar month.
8. Security
We use industry-standard measures to protect data, including HTTPS encryption across the entire site, restricted access to enquiry data, and regular review of our service providers' security practices. No system is perfectly secure; if you believe your data has been compromised, please notify us immediately.
9. Children
The website is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The current version will always be available at this URL with the "Last updated" date at the top. Material changes will be flagged in a banner on the website for at least 30 days.
11. Contact
For any privacy-related question, contact hello@invisalignlocal.co.uk.