What we hold about you, and about practices.
Two kinds of personal data: the few details our subscribers give us, and the names of people that appear in the public records DentalGraph is built from.
Last updated 20 October 2026.
1. Who we are
The controller of your personal data is Implants Local Limited (company number 16197776, registered office Ayton Firs Hall, Great Ayton, Middlesbrough, TS9 6JB). Contact us about anything on this page at privacy@dentalgraph.net.
2. What DentalGraph is
A database of dental practices built from public registers, council and company records and practices’ own websites, joined into one record per practice, with the source and date of every fact. It is sold to businesses that supply dental practices. We hold no patient information.
3. If you have an account
What we hold: your email address, name, organisation, the kind of user you are (rep, lab, owner and so on), your country, the territories, lists, searches and notes you save, and records of your sign-ins and use of the service. Payments are handled by Stripe: we keep your subscription status and plan, never your card number.
Why, and our lawful basis: to provide the service you subscribed to (contract); to keep it secure, prevent misuse and improve it (our legitimate interests); to send the weekly email you switch on, which you can stop with one click (contract, and your choice); and to keep accounting records (legal obligation).
4. If you are named in a public record
What we hold: the professional details that public sources publish about people connected with dental practices: company directors and people with significant control (with appointment dates, and month and year of birth as Companies House publishes them); dentists on the General Dental Council register with their registration numbers; people named on practices’ own websites, with their role; and business contact details published by the practice. In the United States, the equivalents are the federal provider registry (NPPES) and state licence boards.
Where it comes from: the care regulators (the Care Quality Commission, Healthcare Improvement Scotland, Healthcare Inspectorate Wales and the Regulation and Quality Improvement Authority), Companies House, the General Dental Council register, council planning records, public procurement notices, practices’ own websites and the Internet Archive, and practices’ Google business listings. We record the source and date of each fact and do not combine it with anything private.
Why, and our lawful basis: our legitimate interest, and our subscribers’, in understanding the dental market and contacting dental businesses about their work. We limit it to people’s professional roles, to what their own registers and businesses publish, and we hold nothing sensitive about anyone. Subscribers can see these details as their plan allows; company financial filings are never shown to a practice-owner account.
5. Who processes the data for us
Supabase (our database, hosted in London), Vercel (the website, hosted in London), Amazon Web Services (the jobs that read public sources, file storage and email), Anthropic (an AI model that reads the text of practices’ websites into facts, under terms that do not let it train on that text) and Stripe (payments). Each acts on our instructions under a contract. No decision with a legal or similarly significant effect on anyone is made by automated means. Where one of them handles data outside the UK, the transfer is covered by UK adequacy regulations or the provider’s standard contractual safeguards. We do not sell personal data, and we use no advertising or analytics tools.
6. How long we keep it
Account data: while your account exists, and deleted within 30 days of you closing it. Payment and accounting records: six years, as tax law requires. Public-record facts: kept as dated history, marked as old once past their refresh period and never shown as current; removed when you ask (see your rights).
7. Your rights
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict how we use it, and for a copy of account data you gave us in a portable form. You have the right to object to us holding or showing your details on the grounds of our legitimate interests: if you are named in a public record and object, we stop showing your personal details to subscribers unless we have compelling grounds to keep doing so. You can object to direct marketing at any time, and we will stop.
Email privacy@dentalgraph.net; we reply within one month. If you are a director or dentist and a public register is wrong, the register is the place to correct it; tell us too and we will read it again.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
8. Cookies
Only the ones the service needs: a sign-in cookie, a cookie that remembers your country, and an access cookie for invited previews. No advertising or analytics cookies, so we do not ask for consent.
9. Security
Data is encrypted in transit, access to it is limited to the people and systems that need it, and secrets are kept out of our code.
10. Changes
We will update this page when what we do changes, and tell subscribers by email about anything significant. Our terms and data processing terms cover the rest.