Privacy Policy
Last updated: 5 November 2026
This policy explains how personal data is used when you visit nvldentalmarketing.co.uk, get in touch, book a call, or receive an email from me about my services. It covers my own business dealings. It does not cover patient enquiry data that I handle for dental practices; in that case the practice is the controller and I act as its processor under a written data processing agreement.
1. Who I am
The controller is Benjamin Neville, a sole trader trading as NVL Dental Marketing, 61 Cotswold Street, Liverpool, L7 2PY. Email: ben@nvldentalmarketing.co.uk. I am registered with the Information Commissioner's Office (ICO), registration reference ZC277591.
2. What data I collect and why
| Situation | Data | Purpose | Lawful basis |
|---|---|---|---|
| You email me or book a discovery call | Name, email address, phone number, practice name, and anything you tell me in your message or booking form | To reply, arrange and hold the call, and discuss my services | Taking steps at your request before a contract (Article 6(1)(b)), or legitimate interests (Article 6(1)(f)) |
| I contact you about my services (business-to-business outreach) | Your name, job role, practice name, business email address and phone number | To tell dental practice owners and managers about my services | Legitimate interests (Article 6(1)(f)). I have documented a legitimate interests assessment |
| You visit this website and accept analytics cookies | Pages viewed, approximate location, device and browser type, and a cookie identifier | To understand how the site is used and improve it | Consent (Article 6(1)(a)) |
| You make a choice in the cookie banner | Your consent choice and a record of when it was made | To remember your choice and show we respected it | Legal obligation and legitimate interests |
| Business records | Contact and transaction details of clients | Invoicing, tax and accounting | Contract and legal obligation |
3. Where I get your data from (outreach)
When I contact a practice owner or manager I have not spoken to before, I obtain your details from publicly available sources such as your practice's website, Companies House, Google Maps and LinkedIn. I only send marketing emails to businesses that are limited companies or LLPs, or to addresses where consent has been given. Every email identifies me, and you can opt out at any time by replying "no thanks". I will then stop contacting you and keep your address on a suppression list so that I do not contact you again.
4. Special category data
I do not ask for or want health information through this website. Please do not include medical details in emails or booking forms.
5. Who I share data with
I use the following providers to run my business. They process data on my behalf under their own data protection terms:
- Google (Google Workspace for email and storage, Google Tag Manager and Google Analytics)
- Calendly (discovery call booking)
- Netlify (website hosting)
- CookieYes (cookie consent banner and consent records)
- My accountant and, where needed, HMRC and other authorities, to meet legal obligations
I do not sell personal data.
6. International transfers
Some of these providers are based in, or use infrastructure in, the United States or other countries outside the UK. Where that happens, transfers rely on a recognised safeguard such as the UK's adequacy arrangements for certified US organisations, or standard contractual clauses with the UK addendum.
7. How long I keep data
- Enquiries and call bookings: up to 12 months after our last contact, unless we become client and contractor, in which case records are kept for the life of the contract plus six years for tax and legal purposes.
- Outreach contacts who do not reply: up to 12 months from the last email.
- Suppression list (email addresses of people who have opted out): kept indefinitely, so that I do not contact you again.
- Website analytics data: up to 14 months.
- Financial records: six years after the end of the tax year.
8. Your rights
You have the right to access your data, have it corrected or erased, restrict or object to its use, and receive a copy in a portable format where applicable. You can object to direct marketing at any time and I will always honour that. Where I rely on consent, you can withdraw it at any time through the "Cookie settings" link in the footer. To exercise any right, email ben@nvldentalmarketing.co.uk. I will reply within one month.
9. Complaints
If you are unhappy with how I have used your data, please contact me first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
10. Security
Accounts are protected with two-step verification and a password manager, and data is held on encrypted services. I do not send personal data by unencrypted channels.
11. Changes
I will update this policy when my processing changes and revise the date at the top.