PRIVACY POLICY

1. Introduction

Welcome to 54 Dental ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

This policy is designed to comply with the General Data Protection Regulation (GDPR) for individuals in the European Economic Area, and the California Consumer Privacy Act (CCPA) for California residents, as well as other applicable privacy laws.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our website.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Submit a contact form (via Formspree): name, email address, and message content
• Subscribe to our newsletter or blog: email address and name
• Request an appointment or information: name, contact details, and dental inquiry details

2.2 Information Collected Automatically

When you visit our website, certain data is collected automatically through the analytics tools we use:

• IP address (anonymised or pseudonymised where applicable)
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring URLs
• Device type (desktop, mobile, tablet)
• Geographic location (country/city level)
• Search queries that led to our website (via Google Search Console)

2.3 Analytics and Tracking Tools

We use the following third-party services for website analytics and performance monitoring:

3. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area, we process your personal data on the following legal bases:

• Consent (Article 6(1)(a) GDPR): when you subscribe to our newsletter, submit a contact form, or when non-essential cookies are placed on your device.
• Legitimate Interests (Article 6(1)(f) GDPR): for analytics and website optimisation to improve user experience, where this does not override your rights and freedoms.
• Legal Obligation (Article 6(1)(c) GDPR): where processing is necessary to comply with applicable laws.
• Contract Performance (Article 6(1)(b) GDPR): when processing is necessary to respond to your enquiries or fulfil a service request.

4. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries submitted via our contact form
• Send appointment reminders or follow-up communications (where applicable)
• Send newsletters and blog updates (only with your explicit consent)
• Analyse website traffic and user behaviour to improve our website
• Monitor and improve our search engine visibility
• Ensure website security and prevent fraud
• Comply with legal obligations

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and gather analytics data.

5.2 Cookies We Use

5.3 Managing Cookies

You can control or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect website functionality. For more information, visit www.aboutcookies.org or www.allaboutcookies.org.

6. Third-Party Service Providers

We share your data with the following third-party service providers who process data on our behalf:

All third-party providers are required to respect the security of your personal data and to treat it in accordance with applicable law.

7. International Data Transfers

Some of our third-party service providers are located outside of the European Economic Area (EEA). Transfers of your personal data outside the EEA are made under appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives equivalent protection.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Contact form submissions: up to 12 months, unless you request deletion earlier
• Newsletter subscriber data: until you unsubscribe or request deletion
• Analytics data: as configured in each respective analytics platform (typically 14 to 26 months for Google Analytics; indefinitely anonymised for Umami and Vercel)

After the retention period, your data is securely deleted or anonymised.

9. Your Rights Under GDPR (EEA Residents)

If you are located in the EEA, you have the following rights under the GDPR:

• Right of Access: request a copy of the personal data we hold about you
• Right to Rectification: request correction of inaccurate or incomplete data
• Right to Erasure ('Right to be Forgotten'): request deletion of your personal data
• Right to Restriction of Processing: request that we restrict how we use your data
• Right to Data Portability: receive your data in a structured, machine-readable format
• Right to Object: object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: withdraw consent at any time without affecting prior processing
• Right to Lodge a Complaint: with your local data protection authority

To exercise any of these rights, please contact us using the details in Section 12.

10. Your Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose, and the third parties with whom it is shared
• Right to Delete: request deletion of personal information we have collected from you, subject to certain exceptions
• Right to Opt-Out of Sale: we do not sell your personal information. If this changes, you will have the right to opt out
• Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, please contact us using the details in Section 12. We will verify your identity before processing your request and respond within 45 days.

Categories of Personal Information Collected (CCPA Disclosure)

• Identifiers: name, email address, IP address
• Internet/Electronic Activity: pages visited, browser type, referring URLs
• Geolocation Data: approximate location based on IP address
• Inferences: usage patterns and preferences derived from analytics data

11. Children's Privacy

Our website is not directed at children under the age of 13 (or 16 where required by local law). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it promptly.

12. Contact Us & Data Controller

54 Dental is the data controller responsible for your personal data.

For any privacy-related questions, requests, or complaints, please contact us at:

We aim to respond to all requests within 30 days. If you are in the EEA and are not satisfied with our response, you may lodge a complaint with your local Data Protection Authority.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes by posting the new policy on our website with an updated effective date. We encourage you to review this policy periodically.