PRIVACY NOTICE
Dye & Golze Dental Laboratory Ltd
Last updated: September 2026
1. Who we are
Dye & Golze Dental Laboratory Ltd takes the privacy and security of personal information seriously.
Dye & Golze Dental Laboratory Ltd is registered in the United Kingdom under company number 06694549.
Our registered office is:
Dye & Golze Dental Laboratory Ltd, Unit 9,
Heather Court, Shaw Wood Way,
Doncaster, DN2 5YL
For the purposes of applicable data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, Dye & Golze Dental Laboratory Ltd may act as a data controller or data processor depending upon the circumstances in which personal information is processed.
If you have any questions about this privacy notice or the way in which we use personal information, please contact us at:
Email: dyeandgolzedental@hotmail.co.uk
Telephone: 01302 343815
2. About this privacy notice
This privacy notice explains how we collect, receive, use, store and protect personal information.
It applies to information concerning:
Dental practices and dental professionals who use our services.
Patients whose information is supplied to us in connection with dental laboratory work.
Visitors to our website.
Suppliers and other business contacts.
People who contact us with enquiries or complaints.
Job applicants and employees where relevant.
We are committed to processing personal information lawfully, fairly, transparently and securely.
3. Information we may process
The information we process depends upon our relationship with you and the services being provided.
Dental professionals and customers
We may process information including:
Name.
Practice name and address.
Business contact details.
Email address.
Telephone number.
Account and billing information.
Order and prescription information.
Communications with us.
Delivery information.
Payment information.
Records relating to products and services supplied.
Patient information
As a dental laboratory, we may receive information about patients from dentists, dental practices and other healthcare professionals in order to manufacture, repair or provide dental devices and associated laboratory services.
This information may include:
Patient name or another patient identifier.
Age or date of birth where required.
Sex where relevant to the dental appliance or treatment.
Dental prescription information.
Information concerning dental or oral health.
Shade information.
Photographs.
Dental scans.
Digital impressions.
Physical impressions.
Models.
Treatment information.
Other clinical information provided by the treating dental professional.
We ask dental professionals to provide only the information that is reasonably necessary for us to perform the laboratory service requested.
Some information concerning a patient's health constitutes special category personal data and receives additional protection under data protection law.
4. Where we obtain personal information
We may obtain personal information:
Directly from you.
From a dentist or dental practice.
From another healthcare professional.
Through laboratory prescriptions.
Through digital dental systems or portals.
Through emails, telephone calls or other communications.
Through our website.
Through suppliers and business partners.
Through payment providers.
Through publicly available business information where appropriate.
Patient information will commonly be supplied to us by the treating dentist or dental practice rather than directly by the patient.
5. Why we use personal information
We may use personal information where necessary to:
Provide dental laboratory products and services.
Manufacture, modify, repair or replace dental devices.
Process laboratory prescriptions and instructions.
Communicate with dentists and dental practices concerning cases.
Identify individual laboratory cases correctly.
Maintain appropriate production and quality records.
Deliver products.
Manage customer accounts.
Process payments and invoices.
Respond to enquiries.
Manage complaints.
Maintain records required by law or professional and regulatory requirements.
Meet medical device and product traceability requirements where applicable.
Protect the security of our systems and information.
Prevent fraud or misuse of our services.
Manage our suppliers and business relationships.
Administer our website.
Comply with tax, accounting, regulatory and other legal obligations.
Establish, exercise or defend legal claims.
Recruit and manage employees where applicable.
We will not use personal information for purposes that are incompatible with those for which it was collected unless permitted or required by law.
6. Our lawful bases for processing personal information
Under UK data protection law, we must have a lawful basis for processing personal information. Depending upon the circumstances, we may rely upon the following lawful bases.
Contract
We may process personal information where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This may include processing information relating to customer accounts, orders, products, services, billing and delivery.
Legal obligation
We may process information where necessary to comply with a legal or regulatory obligation.
This may include obligations relating to taxation, accounting, employment, medical devices, product safety, regulatory investigations and other statutory requirements.
Legitimate interests
We may process personal information where this is necessary for our legitimate business interests or those of another person, provided that those interests are not overridden by the rights and interests of the individual concerned.
These interests may include:
Operating and administering our dental laboratory.
Managing relationships with customers and suppliers.
Maintaining appropriate laboratory records.
Protecting our systems and business.
Preventing fraud.
Maintaining security.
Responding to enquiries and complaints.
Establishing or defending legal claims.
Improving our services.
Where we rely upon legitimate interests, we consider the nature of the information, the reasonable expectations of individuals and the potential impact upon their privacy.
Consent
In limited circumstances we may rely upon consent. Where processing is based upon consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
We do not generally rely upon consent where another more appropriate lawful basis applies.
7. Special category health information
Information concerning an individual's health is special category personal data and is subject to additional protection. Dental information, treatment information, dental photographs, scans and other clinical information may fall within this category.Where we process special category information, we will identify both an appropriate lawful basis under Article 6 of the UK GDPR and an appropriate condition for processing under Article 9 of the UK GDPR and the Data Protection Act 2018 where applicable. The appropriate Article 9 condition will depend upon the particular processing activity and circumstances.
This may include processing that is necessary for the provision or management of health or social care or another condition permitted by data protection law.
Where appropriate, the relevant dentist, dental practice or healthcare provider remains responsible for determining the lawful basis upon which patient information is originally collected and supplied to us.
8. Our relationship with dental practices
Dental laboratories operate as part of the provision of dental care, but the precise data protection responsibilities of the laboratory and dental practice can depend upon the circumstances and the processing taking place.
Dye & Golze Dental Laboratory Ltd may act as a data processor where we process personal information solely upon the documented instructions of a dental practice.
In some circumstances we may have our own legal or regulatory obligations concerning information and may therefore act as a data controller for those particular processing activities.
Where required, appropriate contractual arrangements will be maintained with organisations on whose behalf we process personal information.
9. Sharing personal information
We do not sell personal information.
We may share information where reasonably necessary with organisations such as:
Dental practices and healthcare professionals.
Delivery and courier companies.
IT and software providers.
Digital dental platform providers.
Cloud storage and backup providers.
Payment and banking providers.
Accountants and professional advisers.
Regulatory authorities.
Government bodies.
Law enforcement agencies where legally required.
Insurers.
Professional advisers.
Approved subcontractors or specialist dental laboratories where required to complete a case.
We require organisations processing information on our behalf to protect that information appropriately and to use it only for authorised purposes.
Where information is shared with another independent controller, that organisation is responsible for complying with its own data protection obligations.
10. Dental laboratory subcontracting
From time to time it may be necessary to use another dental laboratory, manufacturer or specialist supplier in connection with a dental case.
Where this involves personal information, we will only provide information reasonably necessary for the service being performed and will take appropriate steps to protect patient confidentiality and personal information.
Where overseas suppliers or laboratories are used, the provisions concerning international transfers in this notice will also apply.
11. International transfers
Some of the organisations providing software, information technology, cloud hosting, communications or other services to us may process information outside the United Kingdom.
Where personal information is transferred internationally, we will ensure that an appropriate legal mechanism is used where required.
Depending upon the destination and circumstances, this may include:
A country covered by UK adequacy regulations.
The UK Extension to the EU US Data Privacy Framework where applicable.
The International Data Transfer Agreement.
The UK Addendum to approved contractual clauses.
Another transfer mechanism permitted under UK data protection law.
We will take reasonable steps to ensure that personal information continues to receive appropriate protection.
Further information regarding the safeguards applying to a particular transfer can be requested using the contact details in this notice.
12. Website information
When you visit our website, certain technical information may be collected automatically.
This may include:
Internet Protocol address.
Browser type.
Device information.
Operating system.
Pages visited.
Date and time of visits.
Referring website.
General location information derived from technical data.
We may use this information to maintain the security and operation of our website, understand how it is used and improve its performance.
13. Cookies
Our website may use cookies and similar technologies. Some cookies are necessary for the website to operate correctly. Other cookies may be used for analytics or other purposes.
Where consent is legally required before a cookie or similar technology is placed on your device, we will seek that consent. Further information should be provided through our cookie notice or website cookie control system.
14. Communications
When you contact us by telephone, email, our website or another communication method, we may retain information relating to your enquiry and our response.
We use this information to:
Respond to enquiries.
Provide customer service.
Maintain appropriate business records.
Resolve problems or complaints.
Protect our legitimate business interests.
Meet legal or regulatory obligations.
15. Complaints
If you make a complaint to us, we may process the information contained in your complaint in order to investigate and respond to it.
Where reasonably necessary, information may be shared with another organisation involved in the complaint, our insurers, professional advisers, regulators or another person where permitted or required by law.
We will only disclose information that is appropriate and reasonably necessary in the circumstances.
16. Recruitment and employment
If you apply for employment with us, we may process information provided as part of your application and recruitment process.
This may include:
Contact details.
Employment history.
Qualifications.
References.
Information provided during interviews.
Right to work information.
Other information reasonably required for recruitment.
Information relating to unsuccessful candidates will be retained only for an appropriate period in accordance with our retention policy and applicable legal requirements.
Where a person becomes an employee, further information will be processed for employment, payroll, pension, taxation, health and safety, administration and legal compliance purposes.
17. How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy legal, regulatory, contractual, accounting and professional requirements.
The appropriate retention period depends upon the type of information concerned.
We take into account matters including:
The nature and sensitivity of the information.
The purpose for which it is held.
Medical device and traceability requirements.
Tax and accounting requirements.
Contractual requirements.
Potential complaints or legal claims.
Regulatory requirements.
The interests and rights of individuals.
Information that is no longer required will be securely deleted, destroyed or anonymised in accordance with our retention procedures.
More detailed information regarding particular retention periods can be provided upon request.
18. Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, disclosure or alteration.
Measures may include, where appropriate:
Access controls.
Passwords and authentication.
Encryption.
Secure data transmission.
Secure backups.
Antivirus and security systems.
Staff confidentiality requirements.
Staff training.
Physical security.
Secure disposal procedures.
Supplier security requirements.
Access to personal information is limited to people who have a genuine need to use it.
19. Data breaches
We maintain procedures for identifying, investigating and responding to personal data breaches.
Where a breach creates a level of risk requiring notification under data protection law, we will notify the Information Commissioner's Office and affected individuals where legally required.
20. Your data protection rights
Depending upon the circumstances, you may have rights including:
Right to be informed
You have the right to receive information about how your personal information is collected and used.
Right of access
You may request confirmation of whether we process your personal information and request a copy of the information we hold about you.
Right to rectification
You may ask us to correct personal information that is inaccurate or complete information that is incomplete.
Right to erasure
In certain circumstances you may ask us to delete your personal information. This right is not absolute. We may need to retain information where there is a lawful reason or legal obligation to do so.
Right to restrict processing
In certain circumstances you may ask us to restrict the way in which your information is processed.
Right to data portability
Where applicable, you may have the right to receive certain personal information in a structured, commonly used and machine readable format or request that it is transferred to another organisation.
Right to object
You may have the right to object to processing based upon legitimate interests or certain other lawful bases.
Rights concerning automated decisions
You may have rights relating to decisions made solely through automated processing where those decisions have legal or similarly significant effects.
We do not currently use solely automated decision making to make significant decisions concerning patients or customers.
21. Exercising your rights
To exercise any of your data protection rights, please contact:
Dye & Golze Dental Laboratory Ltd, Unit 9,
Heather Court, Shaw Wood Way,
Doncaster, DN2 5YL
Email: dyeandgolzedental@hotmail.co.uk
Telephone: 01302 343815
We may need to request information to confirm your identity before responding to certain requests.
We will respond within the period required by applicable data protection law.
There is normally no charge for exercising your data protection rights. However, a fee may be permitted by law in limited circumstances.
22. Information received from dentists and dental practices
If you are a patient, we may have received your personal information from your dentist or dental practice rather than directly from you.
Your dentist or dental practice should provide information about how your information is used as part of your dental treatment.
If you have questions concerning the original collection of your information or your treatment records, you may wish to contact your dentist or dental practice in the first instance.
You may also contact us regarding information held by Dye & Golze Dental Laboratory Ltd using the details contained in this notice.
23. Children
We do not operate our website specifically for children or market dental laboratory services directly to children.
We may nevertheless process information relating to children where a dental laboratory product or service is required as part of their dental treatment.
Such information will normally be supplied to us by the child's dentist, dental practice or other healthcare professional and will be processed only where there is an appropriate lawful basis and, where relevant, an appropriate condition for processing health information.
24. Links to other websites
Our website may contain links to websites operated by other organisations. We are not responsible for the privacy practices of other websites. You should read the privacy information provided by the relevant organisation when visiting another website.
25. Complaints about our use of personal information
If you have concerns about how we have handled your personal information, we would encourage you to contact us first so that we have an opportunity to investigate and respond.
You also have the right to complain to the Information Commissioner's Office.
Information Commissioner's Office,
Wycliffe House, Water Lane,
Wilmslow, Cheshire,
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
26. Changes to this privacy notice
We may update this privacy notice from time to time to reflect changes in our business, technology, services or legal and regulatory requirements.
The current version will be published on our website and the date at the beginning of the notice will show when it was most recently updated.
Where a change materially affects how personal information is used, we will take reasonable steps to bring that change to the attention of affected individuals where required.
27. Contact us
If you have any questions concerning this privacy notice or the way in which Dye & Golze Dental Laboratory Ltd processes personal information, please contact:
Dye & Golze Dental Laboratory Ltd, Unit 9,
Heather Court, Shaw Wood Way,
Doncaster, DN2 5YL
Email: dyeandgolzedental@hotmail.co.uk
Telephone: 01302 343815
Website: www.dyeandgolzedentallab.co.uk
