Your privacy, in plain words

Who we are

Dencorp Ltd is a company registered in England and Wales (company number 10836406), with its registered office at 4 Westbury Gardens, Luton LU2 7DW. Dencorp Ltd runs this website and is the data controller for it. It is registered with the Information Commissioner's Office (ICO) under reference ZB138001.

For any question about your data, or to reach our data protection officer, email hello@dencorp.org.uk.

This notice is about dencorp.org.uk. Each of our clinics has a website of its own, with its own privacy notice.

What this website collects

You can read this website without telling us who you are. It has no accounts and no passwords. We ask for your details in three places only: when you ask us to book a consultation, when you apply for a job, and when you ask for investor information.

Like every website, our server records technical details of each visit, such as your IP address, your browser and the pages you open, to keep the site secure and working. We keep these records for a limited time and do not use them to identify you.

Asking for a consultation

The booking form asks for your name, email address and phone number and whether you need dental or medical care, and lets you choose a clinic, a service, a day and a time of day, and write a message. We also record the IP address the request came from, to protect the form from abuse.

We use what you send to call or email you back and arrange your appointment. The request is read by our head office team and by the team of the clinic you chose.

Please tell us no more about your health in the message than we need to book the right appointment. Whatever you tell us about your health is used only to arrange your care.

Once you have an appointment you are a patient of that clinic, and your details are then kept in its patient record, under the clinic's patient privacy notice.

Applying for a job

The application form asks for your name, email address and phone number, a cover note if you wish to write one, and your CV. We also record the IP address the application came from.

We use them only to consider you for the role and to contact you about it. Your CV is stored privately on our server and can be opened only by the people in our team who deal with recruitment. They open it in our office system, or from a private link in the email that tells them your application has arrived; the link stops working when your application is deleted.

Asking for investor information

The form on our investors page asks for your name and email address and, if you wish, your organisation, your phone number and a message. We also record the IP address the request came from.

We use them only to answer your request and to send you the information you asked for, after confirming that we may. The request is read by our head office team.

When you contact us

If you email us, we use what you send to reply. Our mailboxes are provided by Microsoft.

If you message us on WhatsApp, we use what you send to reply and, if you ask, to arrange your care. WhatsApp is run by Meta, under its own privacy policy.

Why we are allowed to use your details

UK data protection law lets us use personal data only for a reason it recognises. Ours are:

• A consultation request: you asked us to arrange care for you (steps taken at your request before a contract, UK GDPR article 6(1)(b)). What you tell us about your health is used to provide health care (article 9(2)(h)).
• A job application: you asked us to consider you for a role (article 6(1)(b)), and we have a legitimate interest in recruiting the right people (article 6(1)(f)).
• A request for investor information: you asked us for it (article 6(1)(b)), and we have a legitimate interest in talking to people who may invest in the group (article 6(1)(f)).
• The server's technical records: our legitimate interest in keeping the website secure and working (article 6(1)(f)).
• Visitor statistics and advertising measurement: your consent (article 6(1)(a)), which you give or refuse in the cookie banner. You can change your mind at any time with "Cookie settings" at the bottom of every page.

You do not have to give us your details, but without them we cannot arrange a consultation or consider an application.

How long we keep it

We delete a consultation request 12 months after you sent it. If you become a patient, your record is kept by the clinic under the rules for health records.

We delete a job application, together with your CV, 6 months after you sent it, which leaves time to fill the role and to answer any question about the decision. If you join us, your application becomes part of your staff record instead.

We delete a request for investor information 24 months after you sent it, unless a conversation with you is still going on.

We keep a new patient registration sent on a clinic's website until it is approved and becomes your patient record with that clinic. One that is rejected, or that nobody answers, we delete 12 months after it was rejected or sent.

You can ask us to delete any of these sooner.

Who else handles it

We do not sell your details and we do not pass them on for marketing. A few companies handle them for us, only on our instructions:

• IONOS provides the server this website runs on;
• Cloudflare stands between you and that server, to protect the website and make it faster;
• Microsoft provides our email;
• Twilio carries the WhatsApp messages you send to our number and our answers;
• Google provides our visitor statistics (Google Analytics) and measures our adverts (Google Ads), with cookies only if you accept them;
• when we switch on email or text alerts for our team, Postmark delivers the emails and Twilio the text messages. An alert carries your name and phone number and, for a job application, your email address and the name of your CV file. The CV itself is not attached to it.

Some of these companies are based outside the UK. Where they handle your details abroad, it is under contract terms that include the safeguards UK data protection law requires.

Cookies

This website sets three cookies of its own. They are essential: they make the site and its forms work and remember your cookie choice, and they do not track you. They need no consent under UK law.

• dencorp-session: keeps the site working as you move between pages (2 hours).
• XSRF-TOKEN: protects the forms against forged requests (2 hours).
• ndc_consent: remembers your cookie choice (1 year).

We also use Google Analytics to count visits and to see how people find and use this website, and Google Ads to see which of our adverts bring people to it. They store cookies on your device only if you choose "Accept" in the cookie banner:

• _ga, _ga_*: Google Analytics: tell one visit from another, so that we can count visits and see which pages are read (2 years).
• _gcl_au, _gcl_aw, _gcl_ag, _gcl_gb: Google Ads: remember that you came from one of our adverts, so that we can tell which advert led to a consultation request or to a visit to one of our clinics' websites (3 months).

If you accept and you came from one of our adverts, Google also keeps a cookie of its own for the same purpose and the same three months (GCL_AW_P, on google.com, doubleclick.net and googleadservices.com).

If you choose "Essential only", Google Analytics and Google Ads set no cookie and read none. Google is still told that a page was opened, without a cookie to tell one visitor from another, so that visits can be estimated.

If you arrive from one of our Google adverts, the address of the page carries a click identifier: a code for that click on the advert, which does not name you. When you send a consultation request, or follow a "Book online now" button to one of our clinics' websites, Google Ads is told that this happened, so that we know which advert works. Nothing you type into a form is sent to Google. If you chose "Essential only", Google Ads is told without cookies and with the click identifier removed; Google Analytics is told the address of the page you opened as it stands.

We use Google Ads on this website only to measure our adverts. Whatever you choose, the website tells Google not to use your visit for personalised advertising or to add you to an advertising audience.

You can change your choice at any time with "Cookie settings" at the bottom of every page.

Other services we use

Our fonts are our own files, served from this website, so no other company is asked for them. The maps on the clinics and contact pages are drawn from OpenStreetMap, with a script served by unpkg. Neither sets a cookie; like any website you open, they see your IP address when your browser asks them for the map.

Links to our clinics' websites, to Google Maps and to other websites take you to sites with privacy notices of their own.

Your rights

Under UK data protection law you can ask for a copy of the personal data we hold about you, ask us to correct or delete it, object to or limit how we use it, and ask for it to be passed to you or someone else. Email hello@dencorp.org.uk and we will reply within one month.

Complaints

If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Last updated 9 October 2026