Privacy Policy

Dental X-ray Hub ("the Service") is a clinical tool used by licensed dental practices to capture, view, and store dental X-ray images. This policy describes what information the Service and its accompanying Chrome extension collect, how it is used, and how it is protected.

Who this policy applies to

The Service is distributed privately to dental practices that have signed up with Dental Wellness Group. It is not a consumer product and is not available to the general public. Patients do not interact with the Service directly; their clinician operates it on their behalf.

What we collect

• X-ray images captured from the practice's imaging hardware via a local bridge service running on the clinic computer.
• Patient identifiers (name, date of birth, practice patient ID) associated with each image, as supplied by the practice management system (Dentally).
• Clinician account information (email, workspace membership) for authentication and audit logging.
• Local extension settings such as workspace ID, authentication token, and UI preferences, stored in the browser viachrome.storage.

How we use it

• To upload, store, and display X-ray images for the practice that captured them.
• To associate images with the correct patient record inside the practice's workspace.
• To authenticate clinicians and maintain an access audit log.
• To diagnose technical errors and improve reliability.

We do not sell, share, or use clinical data for advertising, analytics, profiling, or AI model training.

Where the data lives

Images and metadata are stored in the practice's private cloud workspace, hosted on Vercel and Supabase infrastructure in the UK/EU region. Access is restricted to authenticated members of that workspace.

The Chrome extension

The browser extension runs only on app.dentally.co, on the local clinic bridge (localhost:8765), and on the Dental X-ray Hub backend. It does not read, transmit, or modify data on any other website.

Retention

Clinical images are retained for as long as the practice maintains an active subscription, in line with UK dental record-keeping requirements (currently 11 years for adults, or until age 25 for minors — whichever is longer). Practices may request export or deletion of their data at any time.

Your rights (UK GDPR)

Practices and their patients have the right to access, correct, export, or request deletion of personal data held by the Service. Requests should be directed to the contact below; we respond within 30 days.

Contact

Data controller: Dental Wellness Group
Contact: jay@dental-wellness.co.uk