Privacy Policy

1. Who we are

dentcompare ("dentcompare", "we") is the data controller for personal data collected through this website. Contact: dentcompare@gmail.com. We are registered with the Information Commissioner's Office (ICO).

2. Data we collect

• Account details: name, email address, practice name and address, role, and team members you invite.
• Orders: baskets, orders, products, quantities, chosen suppliers, savings and fees.
• Supplier details you add: supplier account numbers, login details and agreed prices in My Suppliers.
• Payments: payment status and receipts. Card details are handled by Stripe and never stored by us.
• Technical data: basic logs such as IP address, browser and error reports needed to run and secure the service.

3. Why we use it and our lawful basis

• To provide your account, comparisons, orders and basket sync — performance of a contract.
• To take fee payments and keep financial records — contract and legal obligation.
• To secure the service, prevent misuse and improve features — legitimate interests.
• To send service emails such as invites and receipts — contract. Marketing emails are only sent with your consent and you can opt out at any time.

4. Supplier login details

Supplier passwords are encrypted with AES-256-GCM before they are stored. They are only decrypted on our servers, for the moment needed, when you ask us to fill your supplier basket. They are never shown to anyone, never shared with other practices or your teammates, and never sold. You can delete them in My Suppliers at any time.

5. Who we share data with

• Stripe — card payment processing.
• Hosting and database providers — to run the service securely.
• Suppliers — only when you ask us to add items to your own supplier basket.
• Authorities — where required by law.

We never sell personal data. Where providers process data outside the UK, we rely on UK-approved safeguards such as the International Data Transfer Agreement or adequacy regulations.

6. How long we keep it

Account data is kept while your account is open. Order and payment records are kept for 6 years to meet UK tax rules. Supplier login details are deleted immediately when you remove them or close your account.

7. Your rights

Under UK GDPR you can ask to access, correct, delete, restrict or move your data, and object to some uses. Email dentcompare@gmail.com and we will respond within one month. You can also complain to the ICO at ico.org.uk.

8. Cookies

We only use cookies and local storage that are strictly necessary to keep you signed in and run the service, so no consent banner is required. If we add analytics or marketing cookies in future we will ask for your consent first.

9. Security

Data is sent over encrypted connections, access is restricted by account, and each practice can only see its own data.

10. Changes

We may update this policy and will show the date of the latest version above.