Website, Social Media and Enquiries Privacy Notice
Grovefield Dental Surgery | How we use information from our website, social media, adverts and online enquiries | October 2026
This notice explains how Grovefield Dental Surgery uses information we collect through our website, social media, online adverts, enquiry and call-back forms, and online booking. Once you become a patient, our Patient Privacy Notice also applies.
Who we are
Grovefield Dental Surgery is run by Grovefield Dental Surgery Limited (company number 06550834). The company also trades as North Norfolk Dental Implant Centre from the same premises.
Grovefield Dental Surgery Limited is the "data controller" for your information. This means it is responsible for looking after it.
We are part of DV Dental Group, a group of five dental practices across Norfolk under the same ownership: Treetops Dental Practice, Norwich Dental Implant Centre, Golden Triangle Dental Practice, Grovefield Dental Surgery and North Norfolk Dental Implant Centre. Each practice is its own business. The group's back-office company, De Villiers Group Limited (company number 17149733), provides shared services such as marketing to each practice, on that practice's behalf.
Our Data Protection Lead is Dr Robbie de Villiers. You'll find contact details at the end of this notice.
What we collect
- What you tell us: your name, phone number and email address, which practice and treatment you're interested in, and any message you send
- If you book online: your appointment details and any deposit you pay. Card payments are handled by our payment provider, and we don't see your full card number
- From your device: your IP address, browser type and the pages you visit. We collect this through cookies (only if you agree) and through the advert measurement described below
- From social media: anything you send us by message, comment or a Facebook or Instagram form
Please don't include health details in public comments. If you send us health information privately, we will keep it confidential and treat it with the same care as your dental records.
Why we use it
| What we do | Our lawful basis |
| Reply to enquiries and call-back requests, and book appointments | Taking steps you have asked for before providing care. If you share health details, providing health care. |
| Take deposits | Our contract with you |
| Measure how well our adverts work (see below) | Our legitimate interests in knowing which adverts lead to enquiries |
| Keep our website working and secure | Our legitimate interests |
| Reply to reviews and social media posts | Our legitimate interests |
| Send you news and offers about our own services | Our legitimate interests. You can opt out at any time |
Measuring our advertising
When you request a call back from one of our web pages, we share limited details with Meta (Facebook and Instagram) to measure how well our adverts work. This is your phone number, your email address if you gave one and your first name. These are all converted into a code before they are sent, so they cannot be read. It also includes your IP address and browser type. We don't send your message or any health details.
Meta uses this to tell us whether an advert led to an enquiry. Meta is responsible for its own use of the information under its privacy policy, and may process it in the US.
We do this even if you decline cookies, because it does not use cookies on your device. To ask us to stop, contact the practice.
Cookies
Our website uses some cookies that it needs to work. We only use other cookies, such as analytics or advertising cookies, if you agree through our cookie banner. You can change your mind at any time. Our cookie policy lists the cookies we use.
Social media
Facebook and Instagram are run by Meta, which decides how it uses information on its own platforms. If you message us or fill in a Meta form, Meta passes what you send to us, and we use it to reply. Anything you post publicly can be seen by others. We will never confirm someone is a patient or discuss their care in a public reply.
Marketing
If you contact us about treatment, whether through our website, social media, by phone or by email, or you are already a patient, we may send you news and offers by email or text about services at Grovefield Dental Surgery and North Norfolk Dental Implant Centre. These can include treatments, appointment availability, dental plans and practice updates. Our marketing is sent by us, by DV Dental Group's back-office company De Villiers Group Limited, or by a marketing company we contract to act on our behalf. We will only send you news from other DV Dental Group practices if you tell us you'd like it, and we never pass your details to other companies for their own marketing.
You can opt out of emails, texts or both at any time by contacting the practice, or by using the unsubscribe link in any message.
Who we share it with
- our website and IT provider, and the providers of our online booking, email, text-message and payment services. They act on our instructions under a written contract
- Meta, for advert measurement as explained above
- another DV Dental Group practice, if it's better placed to help with your enquiry
We never sell your information.
How long we keep it
| Type of information | How long we keep it |
| Enquiries that don't lead to an appointment | 12 months after we were last in touch |
| Marketing preferences | Until you opt out. After that, we keep a note so we don't contact you again |
| If you become a patient | As set out in our Patient Privacy Notice |
Information sent outside the UK
Meta and some other online services process data in the US. These transfers are protected by the UK-US data bridge or by contracts approved under UK law.
Your rights
You have the right to:
- get a copy of the information we hold about you, including your dental records. This is usually free
- ask us to correct anything that is wrong. We can't delete an accurate clinical note, but we can add your comments to it
- ask us to delete your information, limit how we use it, or object to how we use it. We will usually still need to keep dental records for the periods set out in our Patient Privacy Notice
- ask us to send information you have given us to another organisation
- withdraw your consent at any time, where we rely on it
- tell us to stop marketing to you at any time
To make a request, contact the practice. You can ask in writing, by email or in person. We may need to check your identity first. We will reply within one month. If your request is complicated we may need up to two more months, and we will let you know if so.
Concerns and complaints
If you're unhappy with how we have handled your information, please contact us first. We will acknowledge your complaint within 30 days and keep you updated while we look into it.
If you're still not happy, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
Contact us
| Data Protection Lead | Dr Robbie de Villiers |
| Write to | Dr Robbie de Villiers, Grovefield Dental Surgery, 49 Yarmouth Road, North Walsham, Norfolk NR28 9AT |
| Phone | 01692 404863 |
| info@grovefielddentalsurgery.co.uk | |
| Data Protection Officer | Alexa de Villiers, alexa.devilliers@dvdental.co.uk, or write to her at the practice address |
Changes to this notice
We review this notice at least once a year. Last updated: October 2026.