Privacy Policy

This policy describes what Find Top Dentists actually collects and does. Where a practice is worth knowing about — such as recording your IP address — it is stated rather than left out.

What we collect

When you use the contact form: your name, email address, the role you select (which includes “Patient”), your subject and your message. We also record the IP address and browser user-agent the message was sent from, to help us deal with abuse of the form.

When a nomination is submitted: everything entered in the questionnaire — the nominee's name, credentials, contact details, practice details, biography and photograph, their licence number and state, and a statement about their standing. We record the IP address the nomination was sent from. Where a colleague submits the nomination, we also collect their details.

When anything is signed: the exact wording you agreed to, the name you typed as your signature, the date and time, your IP address and your browser user-agent. This is kept as the record of what was agreed.

When a case study is submitted: clinical before-and-after photographs and an accompanying description. These relate to a patient rather than to the submitting dentist. They are held privately until reviewed, and are published only where the dentist has confirmed in writing that they hold the patient's authorisation. See Terms for how to have published material removed.

If you hold an account: your name, email address and a hashed password. Sessions record an IP address and user-agent.

Cookies

This site sets two cookies, both strictly necessary and both first-party. One keeps you signed in and remembers your session; the other protects forms against cross-site request forgery. Sessions expire after two hours of inactivity. Typefaces are served from this site, so viewing a page sends nothing to anyone else.

There is no analytics on this site. No Google Analytics, no tag manager, no advertising pixel, no session recording, and nothing that profiles you or follows you to other sites.

Who else receives data

• Google (Gmail API). Email we send — confirmations, replies, password resets — is delivered through a Google account, so the contents pass through Google.
• Our hosting provider, which stores the database and uploaded files.

We do not sell or rent personal information, and we do not share it for advertising. We may disclose information where the law requires it.

How long we keep it

Indefinitely, unless you ask us to remove it or an administrator deletes it. Nothing expires automatically. Backups of the database are taken regularly and may retain a copy for a period after deletion.

Asking for a copy, a correction, or removal

Write to us through the contact form and say what you want. You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it — including a published dentist profile. There is no self-service tool for this; a person handles each request, and we will respond.

Security

The site is served over HTTPS. Passwords are stored hashed, session cookies are not readable by JavaScript, forms are rate-limited, and unreviewed clinical photographs are kept on storage the web server will not serve publicly. No system is perfectly secure, and we cannot guarantee it.

Children

This site is intended for adults and we do not knowingly collect information from children. If a case study concerns a minor, the authorisation is the responsibility of the submitting dentist and their patient's parent or guardian. Tell us and we will remove anything submitted in breach of that.

Changes

If this policy changes we will update the date above. Questions can be sent through the contact form.