Privacy Policy

1. Who we are

Two organisations are responsible for your information, at different stages. Under data protection law each is a "controller" for its own part.

Aesthetic AG Ltd — this website and your enquiry

Aesthetic AG Ltd is the company through which Dr. Albert Gajdos practises. It is responsible for this website, for any enquiry or referral you submit through it, and for the analytics and advertising described below.

Smile Rooms Windsor — your dental records

Dr. Albert practises at Smile Rooms in Windsor. Once you become a patient, the practice holds your clinical dental records and is the controller for them, in line with its own privacy notice and its obligations as a registered dental provider.

Dr. Albert Gajdos is registered with the General Dental Council, registration number 256157.

In practice: everything you send through this website comes to Aesthetic AG Ltd first. If you go on to be treated, your clinical records are created and held by the practice.

2. What we collect

When you submit a consultation enquiry

• Your name, email address and telephone number
• What you tell us about your smile goals, in your own words
• Any photographs of your teeth or smile you choose to upload — always optional
• Which consents you gave, and the date, time and IP address they were given from

When a dentist refers a patient

• The referring dentist's name, GDC number, practice, email and telephone number
• The patient's name, date of birth (optional), email and telephone number
• The clinical reason for referral, urgency, and any background the dentist provides
• Any clinical images, scans or reports attached to the referral

When you simply browse the site

If — and only if — you agree to analytics or advertising cookies, we collect information about how you use the site: pages viewed, approximate location (city level), device and browser type, and how you arrived. If you decline, none of this is collected. Full detail is in our Cookie Policy.

3. Health information

We only collect it because you have chosen to tell us, in order that Dr. Albert can give you a meaningful answer about your treatment options. We rely on your explicit consent to hold and use it, alongside the healthcare provisions of Article 9 where treatment follows.

You are never obliged to upload photographs or describe your dental history to get in touch. You are welcome to send a brief message, or simply call the practice instead.

4. Our legal basis

Data protection law requires us to have a specific reason for each use of your information.

Where we rely on consent, you can withdraw it at any time and it will not affect anything done before you withdrew it. See Your rights.

5. How we use your information

• To reply to your enquiry and arrange a consultation
• To let Dr. Albert review what you've described before you meet
• To plan, provide and record your dental treatment
• To respond to referrals and keep the referring dentist informed
• To keep the records we're legally required to keep
• To understand how the website is used, so we can improve it — only with your consent
• To measure whether our advertising works — only with your consent
• To send you offers and news — only if you asked us to

6. Advertising and analytics

We advertise our practice on Meta (Facebook and Instagram), Google, TikTok, Snapchat and LinkedIn. To know whether that advertising works, we need to be able to see that someone who clicked an advert later got in touch.

Nothing loads until you agree. When you first visit, all analytics and advertising tools are switched off. They are only activated if you accept them in the cookie banner, and you can change your mind at any time from our Cookie Policy.

If you accept advertising cookies

These platforms may set cookies to recognise your browser, so they can report that an advert led to a visit and show our ads to people with broadly similar interests. We keep these audiences broad and general — never based on a specific treatment or dental condition.

If you also tick the advertising box on our enquiry form

Separately, and only if you tick that optional box, we may share your email address and phone number with those platforms in a hashed form. Hashing converts your details into an irreversible string of characters before they leave this website — the platform can check whether it matches an existing account, but cannot read your actual email or number.

This is used only to confirm that an advert led to an enquiry, and to reach people with similar general interests. The event we send says nothing more than "someone submitted a contact form."

7. What we never do

• Send your photographs to any advertising platform, in any form
• Send the contents of your enquiry message to any advertising platform
• Tell any advertising platform which treatment you asked about, or anything about your dental health
• Build advertising audiences around a specific treatment or condition — for example, a list of people who looked at veneers
• Sell your personal information to anyone, ever
• Use your before-and-after photographs publicly or in marketing without asking you separately, in writing

8. Who we share information with

• Smile Rooms Windsor — the practice where Dr. Albert treats patients, so your appointment and care can be arranged
• Our email provider (Resend) — delivers your enquiry to our inbox
• Our website host (Vercel) — serves this website and processes form submissions in transit
• Our secure database and file storage (Supabase) — stores your enquiry details and any photographs you upload, in an encrypted database and private file store hosted in the EU
• Advertising and analytics platforms — Google, Meta, TikTok, Snapchat and LinkedIn, only with your consent and only as described above
• Dental laboratories and specialists — where your treatment requires it
• Regulators, insurers or legal advisers — where we are required or entitled to by law

Everyone we use is bound to protect your information and may only use it on our instructions.

9. Transfers outside the UK

Some of the technology providers above are based in, or store data in, the United States. Where information is transferred outside the UK, it is protected by safeguards approved for UK use — either an adequacy decision or the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses.

Your clinical records are held by the practice in the UK, and the enquiry details and photographs you submit through this website are stored within the EU. If you decline advertising and analytics cookies, no information about your visit leaves the UK for those purposes.

10. How long we keep it

11. How we protect it

This website is served entirely over an encrypted connection (HTTPS), and anything you submit is encrypted in transit. Enquiries are delivered directly to a monitored practice mailbox rather than being stored in a database on this website. Access is limited to Dr. Albert and the staff who need it to arrange your care.

12. Your rights

Under UK data protection law you have the right to:

• Be told what information we hold about you and why — this policy is part of that
• Ask for a copy of the information we hold about you
• Have mistakes corrected
• Ask us to delete your information, where we're not legally required to keep it
• Ask us to pause using your information while a concern is looked into
• Object to us using your information, including for marketing
• Ask for your information in a portable format
• Withdraw consent at any time, without affecting what came before

To exercise any of these, email info@smilerooms.co.uk. We'll respond within one month, and we won't charge you.

Clinical records are held by Smile Rooms Windsor — if your request concerns those, we'll help you direct it to the practice.

Changing your cookie choices

You can change your analytics and advertising choices at any time from our Cookie Policy page.

Unsubscribing from marketing

Every marketing email has an unsubscribe link at the bottom. You can also just reply and ask, or email us. Unsubscribing never affects your dental care.

13. Children

This website is intended for adults. We don't knowingly collect information from anyone under 18 through it. Where a young person is treated at the practice, their records are handled with the appropriate consent from a parent or guardian, under the practice's own procedures.

14. Changes to this policy

If we change how we use your information, we'll update this page and change the date at the top. Where a change materially affects you, we'll tell you directly — and if it relies on your consent, we'll ask again rather than assume.

15. Contact and complaints

For anything about your information, please contact us first — we'd rather put it right.

We have not appointed a Data Protection Officer. As a single practitioner we're not required to, and Dr. Albert is personally responsible for these matters.

If you're not satisfied

You have the right to complain to the Information Commissioner's Office, the UK's data protection regulator. You can do that without contacting us first, though we'd appreciate the chance to help.