Privacy notice
Who we are
Ystradgynlais Dental Lounge, 17 Commercial Street, Ystradgynlais, Swansea SA9 1HD, is operated by RMDP Limited (company number 11024128). We are the data controller for your information and are registered with the Information Commissioner’s Office under number ZA270787. Our data protection lead is Dr Roshahn Martin, contactable at reception@ystraddp.com or 01639 843423.
What we collect
Your name, date of birth, address, phone and email; NHS number; medical history and medications; dental records, X-rays and scans (including CBCT); treatment plans, consent forms and appointment history; payment details; correspondence; CCTV images recorded at the practice. From referring clinicians we also receive referral forms about you.
Why we use it and our lawful basis
To provide dental care and keep accurate records (UK GDPR Art 6(1)(b) and (e); Art 9(2)(h) health care, under the Dentists Act, GDC Standards and our NHS contract); to claim NHS payments and report to NHS Wales (Art 6(1)(c)); to take payments (Art 6(1)(b)); to send appointment reminders and recalls (Art 6(1)(f)); CCTV for the safety and security of patients, staff and premises (Art 6(1)(f)); marketing only with your consent (Art 6(1)(a)); to handle complaints and legal claims; to meet our regulators (Healthcare Inspectorate Wales, GDC).
Who we share it with
NHS Wales and the NHS Business Services Authority; Powys Teaching Health Board; our practice management software supplier (Pearl Dental Software); dental laboratories; other clinicians we refer you to or who refer you to us; Tabeo, which administers our dental plans; our IT, website and email providers; our indemnity and legal advisers; regulators and the courts where the law requires. We never sell your data.
Website and forms
Our contact and referral forms send your details to the practice by email (reception@ystraddp.com). We keep them only to respond to you. Cookies: We use the Complianz cookie consent tool to ask for your consent and to remember your choice; it stores small cookies whose names begin with “cmplz_”. Our Google reviews section is provided by Trustindex: its script runs only if you accept marketing cookies, although the review photos are shown from Google and Trustindex servers. Our fonts are hosted on our own website. We do not use any analytics or advertising tools at present.
How long we keep it
Dental records: adults 11 years after your last treatment; children until their 25th birthday or 11 years after last treatment, whichever is longer, in line with the NHS Wales records retention schedule. CCTV: 30 days, unless footage is needed to investigate an incident, in which case we keep it until the matter is closed. Financial records 7 years. Website enquiries 12 months.
Your rights
You can ask for a copy of your records, ask us to correct them, object to or restrict some uses, ask for deletion where the law allows, and withdraw consent to marketing at any time. Write to the practice address or reception@ystraddp.com. We answer within one month.
Complaints
Raise it with us first. You can also complain to the ICO: ico.org.uk, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow SK9 5AF.
Last updated: 19 October 2026.