Website
Privacy Policy

1. Who We Are

Pont Steffan Ltd is the data controller for information collected through this website. Our data protection lead is Fran Bowes. For any data protection queries relating to this website, please contact us at:

2. What Information We Collect Through This Website

Information you provide to us

When you use our website you may choose to give us personal information, for example when you:

• Complete a new patient registration or appointment request form
• Send us an email or make an enquiry via a contact form
• Sign up for any communications from the practice

The information you provide may include your name, date of birth, address, email address, telephone number, and details about your dental history or enquiry.

Information collected automatically

When you visit our website, we may automatically collect certain information about your device, including your IP address, browser type, operating system, referring URLs, and information about how you interact with our pages. This is used for security monitoring and to understand how our website is used.

3. Cookies

Our website uses cookies — small text files placed on your device that help us operate the site and understand how it is used. We use:

• Strictly necessary cookies — required for the website to function correctly. These cannot be disabled without affecting how the site works.
• Analytics cookies — used to understand how visitors use the site (for example, through Google Analytics). These are only placed with your consent.
• Functional cookies — used to remember your preferences and improve your experience.

You can manage your cookie preferences through your browser settings or via our cookie consent tool on this site. Declining optional cookies will not affect your ability to use the site.

4. How We Use Your Information

We use the information collected through this website to:

• Respond to your enquiries and arrange appointments
• Operate and improve the website
• Monitor website security
• Comply with our legal obligations
• Send you information you have requested, with your consent

5. Legal Basis for Processing

We process your personal data on the following grounds:

• Contract — to respond to enquiries and arrange appointments
• Legitimate interests — to monitor and improve our website, detect fraud, and understand how the site is used
• Consent — for analytics cookies and marketing communications, where you have given consent
• Legal obligation — where we are required to process data by law

6. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share it with:

• Third-party service providers who help us operate this website (for example, our hosting provider SiteGround, and analytics tools like Google Analytics). These providers are contractually required to handle data securely and only use it for the purposes we specify.
• Regulatory or legal bodies where we are required to do so by law.

All our third-party providers are required to keep your information secure and are not permitted to use it for their own marketing purposes.

7. Third-Party Services

Google Analytics

We use Google Analytics to understand how visitors use our website. This collects anonymised information such as pages visited and time spent on the site. It does not identify you personally. You can opt out of Google Analytics by adjusting your cookie preferences or by using the Google Analytics opt-out browser add-on.

Patient Portal

Our patient booking portal at pont-steffan.portal.dental is operated by our practice management software provider. Please refer to that platform’s own privacy policy for details of how your data is handled there.

External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing personal information.

8. How Long We Retain Your Information

Information submitted through website forms (such as enquiry or appointment request forms) is retained only for as long as is necessary to respond to your enquiry. If you become a patient of the practice, your information is then handled under our Patient Privacy Notice, which sets out longer retention periods required by law.

Website analytics data is retained in anonymised or aggregated form in line with our analytics provider’s standard retention periods.

9. Your Rights

Under the UK GDPR, you have the following rights in relation to the personal data we hold about you through this website:

• Right of access — to request a copy of the information we hold about you
• Right to rectification — to request that inaccurate information is corrected
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restrict processing — to request that we limit how we use your data
• Right to object — to object to certain types of processing, including direct marketing
• Right to data portability — to receive your data in a portable format
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the details above. We will respond within one month.

10. Complaints

If you have concerns about how we handle your personal data, you can contact us directly in the first instance. You also have the right to complain to the Information Commissioner’s Office (ICO):

11. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page, and where appropriate we will notify you. This policy was last reviewed on 18 May 2026.

---

Pont Steffan Ltd · Company No. 15248767 · Registered in England & Wales · Last updated: 18 May 2026