Privacy and cookies policy
Last updated 4 September 2026
This policy explains what personal information DentalCare Abroad collects through dentalcareabroad.co.uk, why we collect it and what we do with it. We have kept it short and plain, because that is the whole point of it.
Who we are
DentalCare Abroad (“we”, “us”) runs this website and gives guidance to UK patients who are considering dental treatment in Bucharest. For data protection purposes we are the data controller for the information you send us through this site. You can reach us about anything in this policy at contact@dentalcareabroad.co.uk.
What we collect
We only collect what you choose to send us. When you use our enquiry form, that is:
- your name and email address
- the treatment you are interested in
- anything you write in your message, which may include information about your teeth or your health
- any photo of your teeth you choose to upload, which is health information and is used only to answer your enquiry
The website also uses essential storage to work and remember your cookie choice. If you accept Analytics, we use Google Analytics, privacy-limited PostHog events and a standalone Microsoft Clarity project to understand broad website use. Clarity provides heatmaps and session playback, with the whole page and every form explicitly masked before it loads. If you accept Marketing, we use Google Ads, Meta Pixel and Microsoft UET for campaign measurement; Clarity is disabled inside the UET tag. We do not send form fields, dental conditions, treatment selections, uploaded photos, email addresses or phone numbers to these services.
Why we use it and our legal basis
We use your enquiry details to reply and give you guidance. Our legal basis is your consent, which you give by ticking the box and sending the form. Because your message may include health information, which the law treats as a special category, we rely on your explicit consent to handle it and use it only to answer you.
We do not currently run an email newsletter or add enquirers to a marketing mailing list. The confirmation email after a form submission is transactional and relates only to that enquiry.
Who we share it with
We do not sell your details. Where it is needed to get the information or quote you asked for, we may pass your enquiry to a dental clinic in Bucharest that we work with. We will not do this without your knowledge. The clinic is in Romania and is subject to EU data protection rules.
We use Hostinger to host the website and deliver email. After you give the relevant cookie consent, Google may receive analytics or advertising measurement data, Meta and Microsoft may receive campaign measurement data and PostHog’s EU service may receive the small set of broad interaction events described above. These providers handle data under their own terms and privacy safeguards. Exact services and purposes are listed in our cookie policy.
How long we keep it
We keep your enquiry for as long as we are helping you and for up to 24 months after our last contact, in case you come back to us. After that we delete it. You can ask us to delete it sooner at any time.
Your rights
Under UK data protection law you can ask us to show you the information we hold about you, correct it, delete it or stop using it. You can also withdraw your consent at any time, which does not affect anything we did before you withdrew it. To do any of this, email contact@dentalcareabroad.co.uk and we will sort it out, normally within one month.
Cookies
Cookies are small files a website stores on your device. We keep ours to a minimum. The site always uses a few essential cookies that make it load quickly, work as it should and remember the cookie choice you made. These are set by WordPress and by our hosting and caching.
Analytics stays off until you accept Analytics cookies. It lets Google Analytics count visits, lets PostHog count only six broad events and lets the standalone Microsoft Clarity project provide masked heatmaps and session playback. PostHog autocapture, session replay, heatmaps, IP capture, exact URLs, query strings and form values are disabled. The whole page and every form are masked before Clarity loads; its custom events contain only fixed, allowlisted names.
Google Ads conversion measurement, Meta Pixel and Microsoft UET stay off until you accept Marketing cookies. Clarity is disabled inside the UET tag and is controlled separately by Analytics consent. Ad personalisation remains disabled. We use no health-condition audiences and send no treatment choice, form content, photo, email address or other health data to advertising platforms. If you reject a category, its scripts do not load.
WhatsApp is a normal link, not an embedded tracker. Nothing is sent to WhatsApp when the page loads. If you choose to click it, WhatsApp receives the information required to open the chat, including your device and network information, under WhatsApp’s own privacy policy. The prefilled message is visible to you before you send it.
You can change your mind at any time using the Manage cookies link at the bottom of every page. You can also block or delete cookies in your browser settings. Our cookie policy lists every cookie the site uses, what it does and how long it lasts.
How we protect your information
The site runs over a secure, encrypted connection and we limit who can see your enquiries to the people who need to answer them. No system is ever perfectly secure, but we take sensible steps to keep your information safe.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk.
Changes to this policy
If we change how we handle your information, we will update this page and the date at the top, so please check back from time to time.
Optional PostHog internal analysis
Updated 15 September 2026. Statistics consent alone does not enable this option. If you separately select internal journey analysis and save your choice, we use a random browser identifier on this website to count repeat activity, broad interactions and a form start followed by an observed successful submission within 24 hours. This is internal website analysis, not advertising targeting or evidence of a booking. Refusing it does not affect your enquiry.
The local-storage entries seo_control_ph_journey_choice_v1 and seo_control_ph_journey_id_v1 expire 30 days after your explicit choice. Normal visits do not extend them. Each website has its own identifier; we do not match you across our websites or devices. Linked events use only broad home, contact, legal or other-content categories and fixed interaction/form labels, without names, contact details, exact URLs, treatment choices, message contents or files. PostHog EU Cloud processes these events in Frankfurt. Replay, automatic capture, person profiles and advertising exports are disabled.
We analyse a rolling period of up to 12 months. Browser expiry or withdrawal stops future linkage and clears the local identifier; it does not delete earlier server events. PostHog documents one year of event storage on Free plans and seven years on paid plans, with deletion enforcement rolling out separately. Our project settings do not expose their event-retention or enforcement values, so we cannot promise automatic deletion at one year. See PostHog event retention.
To withdraw, reopen Cookie settings or Manage cookies, untick internal journey analysis and save; rejecting Statistics also withdraws it. To request access or deletion, use the privacy contact shown in this policy and mention PostHog internal analysis. We will assess the request and coordinate with PostHog where needed; we may be unable to locate anonymous events once their random browser identifier is no longer available. Withdrawal is not a completed server-erasure request. Do not send dental records or other health information for an analytics request.
ChatGPT Ads conversion measurement
Updated 7 September 2026. With your Marketing consent, this website can send OpenAI the fact that a WhatsApp or email button was clicked. A click does not mean a message was sent or an enquiry was received. Measurement is separate from the information you choose to send us.
Our server sends only the generic click-event name, a random event identifier, the event time, this website’s home address and, when available after consent, the OpenAI ad-click reference. We do not send form contents, names, email addresses, phone numbers, uploaded files, health information, treatment-page addresses, page titles, referrers or your browser IP address or user agent. The OpenAI browser SDK and automatic customer-data matching are not used. Each event is opted out of future user-level personalisation.
If an OpenAI ad-click reference is available after consent, the first-party pfa_cg_oppref cookie can retain it for up to 30 days for attribution. It is removed when Marketing consent is withdrawn. We retain aggregate delivery counters and the latest delivery time/status, plus short-lived local duplicate-prevention and abuse-control records; no enquiry or customer record is attached. OpenAI processes received conversion events under its applicable privacy terms, including any international processing described there.
Use the website’s cookie controls to decline or withdraw Marketing consent. The website, email, WhatsApp links and enquiry form still work. No pre-consent clicks are replayed. See OpenAI’s privacy policy for its data handling and rights information.