Privacy Policy
How Quality Dental Tourism collects, uses and protects your personal data, including health information you choose to share.
Who we are
Quality Dental Tourism (“we”, “us”) is the controller for personal data collected through qualitydentaltourism.co.uk. Contact: contact@qualitydentaltourism.co.uk.
What we collect and why
- Enquiry details (name, email, phone, treatment interest and message): to respond and propose an appropriate partner. Legal basis: consent and taking steps at your request.
- Health information you later choose to share (for example dental history, X-rays or photos): requested separately and shared with a selected clinic only after explicit consent. Legal basis: explicit consent under Article 9(2)(a) UK GDPR.
- Consent-based measurement: Google Analytics 4, PostHog and the standalone Microsoft Clarity project after Statistics consent; Meta and Microsoft UET after Marketing consent. Microsoft UET measures page visits, WhatsApp contact attempts and server-verified leads, with Clarity disabled inside the UET tag. Google Ads is disabled until QDT-owned conversion identifiers are configured. Clarity provides masked heatmaps and session playback; the whole page and every form are masked before it loads, and custom events contain only fixed, allowlisted names. These services are blocked when the relevant consent is refused or withdrawn. Microsoft explains its processing in the Microsoft Privacy Statement.
- WhatsApp contact: our WhatsApp links do not load a WhatsApp or Meta tracker when the page opens. If you choose a WhatsApp link, your browser opens WhatsApp and Meta may receive your IP address, phone or account details and the message you send under its own privacy terms.
Who we share it with
We do not send an initial enquiry to every partner. We first propose a suitable clinic and disclose its identity. Information is shared with that selected clinic only after you agree. Romanian partner clinics are in the EU/EEA. Website measurement providers process limited device and event data only under the consent choices described above. We do not sell personal data.
Retention
Website enquiries are kept for up to 24 months from the last contact, unless a longer period is needed for an ongoing relationship, a legal obligation or a dispute. You can ask us to delete information sooner where the law allows.
Your rights
You can request access, correction, deletion or restriction, object where applicable, or withdraw consent at any time by emailing contact@qualitydentaltourism.co.uk. You can also complain to the UK Information Commissioner at ico.org.uk.
Cookies
Complianz records your choices. Necessary storage supports security and consent. Statistics consent enables Google Analytics 4, PostHog and the standalone Microsoft Clarity project. Marketing consent enables Meta conversion measurement and Microsoft UET. Google Ads remains disabled until QDT-owned conversion identifiers are configured. Clarity is disabled inside the UET tag, remains Statistics-only, masks the whole page and every form before loading, and sends only fixed, allowlisted event names. No enquiry or health fields are sent to measurement or advertising platforms. Use the cookie banner or the Manage cookies link in the footer to refuse or withdraw consent. The separate Cookie Policy lists the current services and cookies detected on the site. Microsoft explains its processing in the Microsoft Privacy Statement.
Optional PostHog internal analysis
Updated 15 September 2026. Statistics consent alone does not enable this option. If you separately select internal journey analysis and save your choice, we use a random browser identifier on this website to count repeat activity, broad interactions and a form start followed by an observed successful submission within 24 hours. This is internal website analysis, not advertising targeting or evidence of a booking. Refusing it does not affect your enquiry.
The local-storage entries seo_control_ph_journey_choice_v1 and seo_control_ph_journey_id_v1 expire 30 days after your explicit choice. Normal visits do not extend them. Each website has its own identifier; we do not match you across our websites or devices. Linked events use only broad home, contact, legal or other-content categories and fixed interaction/form labels, without names, contact details, exact URLs, treatment choices, message contents or files. PostHog EU Cloud processes these events in Frankfurt. Replay, automatic capture, person profiles and advertising exports are disabled.
We analyse a rolling period of up to 12 months. Browser expiry or withdrawal stops future linkage and clears the local identifier; it does not delete earlier server events. PostHog documents one year of event storage on Free plans and seven years on paid plans, with deletion enforcement rolling out separately. Our project settings do not expose their event-retention or enforcement values, so we cannot promise automatic deletion at one year. See PostHog event retention.
To withdraw, reopen Cookie settings or Manage cookies, untick internal journey analysis and save; rejecting Statistics also withdraws it. To request access or deletion, use the privacy contact shown in this policy and mention PostHog internal analysis. We will assess the request and coordinate with PostHog where needed; we may be unable to locate anonymous events once their random browser identifier is no longer available. Withdrawal is not a completed server-erasure request. Do not send dental records or other health information for an analytics request.
ChatGPT Ads conversion measurement
Updated 7 September 2026. With your Marketing consent, this website can send OpenAI the fact that a WhatsApp or email button was clicked. A click does not mean a message was sent or an enquiry was received. Measurement is separate from the information you choose to send us.
Our server sends only the generic click-event name, a random event identifier, the event time, this website’s home address and, when available after consent, the OpenAI ad-click reference. We do not send form contents, names, email addresses, phone numbers, uploaded files, health information, treatment-page addresses, page titles, referrers or your browser IP address or user agent. The OpenAI browser SDK and automatic customer-data matching are not used. Each event is opted out of future user-level personalisation.
If an OpenAI ad-click reference is available after consent, the first-party pfa_cg_oppref cookie can retain it for up to 30 days for attribution. It is removed when Marketing consent is withdrawn. We retain aggregate delivery counters and the latest delivery time/status, plus short-lived local duplicate-prevention and abuse-control records; no enquiry or customer record is attached. OpenAI processes received conversion events under its applicable privacy terms, including any international processing described there.
Use the website’s cookie controls to decline or withdraw Marketing consent. The website, email, WhatsApp links and enquiry form still work. No pre-consent clicks are replayed. See OpenAI’s privacy policy for its data handling and rights information.