Privacy Policy & Data Governance

Last updated: 27 September 2026

Secure enquiry service: Website enquiries and professional referrals are transmitted to Dr Firas Daoudi's central team at info@firasdaoudi.com through an authenticated email-delivery service. The website application does not intentionally retain a persistent copy. Information may then be shared with the independent dental practice selected by the sender for the purpose of responding to the enquiry.

1. Data Controller Name & Contacts

The legal Data Controller responsible for your information under the UK GDPR is Dr Firas Daoudi (Operating as Firas Daoudi Ltd), located at 2 Upper Wimpole Street, London, W1G 6LD. For governance queries, contact our team via email at info@firasdaoudi.com or via phone at +44 7356009962. ICO Registration Number: ZC036261.

2. Hosting & Infrastructure Providers

Our data-split edge environment is deployed on Vercel Platform Infrastructure, Resend email delivery and Google Workspace, protected by Cloudflare Edge Security Network firewalls. All technical system queries execute within our United Kingdom (Local Regional Node Edge Placement) framework using Industry-Standard Transit Encryption & Encrypted Rest Storage protocols.

3. Data Processors & Destinations

Website enquiries are delivered to the central firasdaoudi.com mailbox. If an enquiry becomes part of a patient's care, relevant information may subsequently be entered into the applicable practice's clinical record system:

Resend: Encrypted transactional delivery of website enquiries and referral notifications to the central firasdaoudi.com mailbox.
Google Workspace: Secure receipt and administration of website enquiries in the central firasdaoudi.com practice mailbox.
Dentally (Chameleon Internet Ltd): Clinical practice management, patient record storage, and Central London scheduling integration.
Software of Excellence / EXACT (Henry Schein Inc.): Clinical practice management, referral tracking, and Teddington/Chigwell branch database storage.

4. Segregated Retention Periods

Data Category	Retention / Deletion Window
Unconverted General Enquiries	12 months from receipt, after which the enquiry and associated attachments are deleted unless they have been incorporated into a patient record.
Unconverted Professional Referrals	12 months from receipt, after which the referral and associated attachments are deleted unless they have been incorporated into a patient record.
Enquiries Incorporated Into a Patient Record	Managed under the applicable clinical-record retention policy.
Website Server Storage	None. Enquiry information and attachments are processed in memory and transmitted directly by encrypted email; no persistent copy is intentionally stored by the website application.

5. Lawful Bases for Processing

Processing Patient Enquiries: Consent & Contract: Essential to establish, arrange, and deliver private clinical consultations.
Processing Health Data (Photos/Scans): Special Category Data - Article 9(2)(h): For the provision of dental diagnosis, treatment, and healthcare management.
Processing Peer Referrals: Legitimate Interests: Necessary to maintain professional dental continuity between general practitioners and our clinical team.

6. Patient Rights & ICO Information

Under the UK Data Protection Act, you maintain clear statutory rights regarding your records:

Right of Access: You have the right to request a complete copy of the private clinical records we hold on file.
Right to Rectification: You can request immediate modifications to correct any inaccurate biometric or biographical details.
Right to Erasure: You may request the deletion of non-clinical data where statutory healthcare archiving windows do not apply.
Right to Restriction: You can ask us to pause processing your data while a dispute or identity check is being evaluated.
ICO Complaint Right: You retain the legal right to file an inquiry or complaint directly with the UK Information Commissioner’s Office (ico.org.uk).

7. Enquiry Attribution and Practice Sharing

When you visit the site, first-touch enquiry attribution may be held temporarily in your browser session, including the landing page, referring page and any campaign parameters in the URL. This information is not displayed publicly, is not used for third-party advertising, and is sent with an enquiry only if you choose to submit the form. It helps us understand which information and outreach activities lead to genuine enquiries. Enquiry details and attribution are delivered securely to Dr Firas Daoudi’s central team and may then be shared with the independent dental practice you select, solely for responding to your enquiry and measuring service enquiries.

8. Website Analytics

This website uses Plausible Analytics to count visits in aggregate. Plausible uses no cookies, stores nothing on your device and does not build profiles of individuals. It records page views, the referring website, campaign (UTM) parameters, approximate country, and device and browser type. Plausible and its analytics data are hosted in the European Union.