Privacy policy

The data controller is [COMPANY NAME], UIC [UIC], registered at [ADDRESS], trading as T&Co Dental, with its practice at 34 Dame Gruev St., Plovdiv, Bulgaria.

For any questions about your personal data, email us at contact@tandcodental.com.

When you book online: name, phone number, email (optional), chosen dentist, date and time, reason for the visit, an optional note, and whether you'd like the visit covered by the NHIF.

The reason for the visit and the note may contain information about your health, which is a special category of personal data. We only process it with the explicit consent you give in the booking form.

When you use the contact form: name, email, phone (optional) and your message.

Technical data: the servers running this website may briefly store your IP address and browser information for security and abuse prevention.

To book, confirm and organise your appointment, send you a confirmation and a reminder (if you gave an email address), and contact you if something needs to change.

To reply to your enquiry.

To protect the website from spam and abuse.

Legal bases: steps taken at your request before entering into a contract for a medical service (Art. 6(1)(b) GDPR), explicit consent for health data (Art. 9(2)(a)), and legitimate interests in website security (Art. 6(1)(f)).

Online booking data is kept in the practice calendar until the visit and for up to 12 months afterwards, unless the law requires a longer period (for example for medical records).

Contact-form messages are kept for up to 12 months after the last correspondence.

We never sell your data or use it for advertising. We use trusted providers that process it on our behalf: Google (calendar and spreadsheets), Vercel (website hosting), Resend (email delivery) and Cloudflare (bot protection, if enabled).

The map is loaded from OpenFreeMap and reviews from Google; when they load, your browser sends its IP address to those services.

Some providers may process data outside the EU. In those cases transfers rely on an adequacy decision (such as the EU-US Data Privacy Framework) or standard contractual clauses.

This website does not use tracking or advertising cookies. If we ever add analytics that require consent, we'll ask for it first.

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email us at contact@tandcodental.com.

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).