Privacy Policy
Last updated: 8 March 2026
1. Who we are
DentistAlert (“we”, “us”, “our”) is operated by Jake Cussans. We are registered with the UK Information Commissioner’s Office (ICO). Our contact email is hello@dentistalert.co.uk.
2. What data we collect
We collect the following personal data when you use our service:
- Account information — email address and password (hashed) when you create an account.
- Location data — postcode and search radius you provide to set up alerts. We convert your postcode to geographic coordinates using postcodes.io.
- Subscription data — payment details are processed securely by Stripe. We store your Stripe customer ID and subscription tier but never your card details.
- Newsletter signups — email address, and optionally your postcode, when you subscribe to our newsletter.
- Usage data — pages visited, features used, and technical information (browser type, device) collected via Google Analytics 4 using anonymised cookies.
3. How we use your data
We use your personal data to:
- Send you alerts when NHS dental practices near your saved postcode(s) start accepting new patients.
- Manage your account and subscription.
- Send our newsletter (only if you opt in).
- Improve the service through anonymised analytics.
- Comply with legal obligations.
4. Legal basis for processing
Under UK GDPR, we process your data on the following bases:
- Contract — to provide the service you signed up for (alerts, account management).
- Consent — for newsletter emails and non-essential cookies. You can withdraw consent at any time.
- Legitimate interest — for anonymised analytics to improve our service.
5. Who we share data with
We share data only with the following third-party processors, all of whom have appropriate data protection agreements in place:
- Supabase (database hosting) — stores your account and alert data.
- Stripe (payments) — processes subscription payments.
- Resend (email) — delivers alert and account emails.
- Beehiiv (newsletter) — manages newsletter distribution.
- Vercel (hosting) — serves the website.
- Google Analytics — anonymised usage statistics.
We do not sell your personal data to any third party.
6. Data retention
We keep your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.
Newsletter subscriber data is retained until you unsubscribe.
7. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data.
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interest.
To exercise any of these rights, email us at hello@dentistalert.co.uk. We will respond within 30 days.
8. Cookies
We use the following cookies:
- Essential cookies — required for authentication and site functionality. These cannot be disabled.
- Analytics cookies — Google Analytics 4, used to understand how visitors use the site. These are set only with your consent.
For full details including specific cookie names and durations, see our Cookie Policy.
9. NHS data
Practice information displayed on this site (names, addresses, accepting patient status) is sourced from the publicly available NHS Service Search API. This is public data and does not contain personal information about individual patients or staff.
10. Changes to this policy
We may update this policy from time to time. We will notify registered users of material changes by email. The “last updated” date at the top of this page will always reflect the most recent version.
11. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint.