Data Processing and Security

1. Overview

DentalHire, operated by Just Mooching Ltd (Company Number: 16855929), is committed to protecting the personal data of our users. This page describes the technical and organisational measures we take to keep your data secure and process it in accordance with UK GDPR.

2. Encryption

• All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
• Passwords are stored using one-way cryptographic hashing — we never store passwords in plain text.
• Sensitive data at rest is encrypted using industry-standard encryption protocols.
• Payment card details are never stored on our servers — they are handled entirely by our PCI-compliant payment provider.

3. Access Controls

• Access to user data is restricted to authorised personnel on a need-to-know basis.
• Admin access is protected by role-based permissions and authentication.
• All administrative actions are logged in an audit trail (see Section 7).
• Users can only access their own account data and data shared with them through the platform's normal functionality.

4. Manual GDC Verification Process

To ensure the integrity of our marketplace, all dentist GDC registration numbers are manually verified by our admin team. The process is as follows:

• When a dentist enters their GDC number, it is stored with a "pending" verification status.
• Our admin team checks the GDC number against the public GDC register (gdc-uk.org).
• If the registration is confirmed, the dentist's status is updated to "verified".
• If the registration cannot be confirmed, the status is set to "rejected" with notes explaining the reason.
• All verification actions are recorded in the audit log, including who performed the verification and when.

GDC numbers are processed only for the purpose of verifying professional registration. They are not shared with other users on the platform.

5. Data Backups

• Platform data is backed up regularly to prevent data loss in the event of a system failure.
• Backups are encrypted and stored securely.
• Backup retention periods are defined in line with our data retention policy (see our Privacy Policy).
• Backup and recovery procedures are tested periodically to ensure reliability.

6. Data Deletion Procedures

Users may request deletion of their personal data at any time. Our data deletion process:

• Requests can be submitted through our Contact and Support page.
• We verify the identity of the requester before processing any deletion.
• Personal data is deleted from active systems within 30 days of a verified request.
• Some data may be retained for longer where required by law (e.g. payment records for tax compliance) — see our Privacy Policy for retention periods.
• Backups containing deleted data are overwritten in line with the backup retention schedule.

7. Audit Logging

We maintain an audit log of key administrative actions, including GDC verification decisions, subscription changes, and plan upgrades/downgrades. Each log entry records who performed the action, when it was performed, and what changed. Audit logs are retained for security and compliance purposes.

8. Security Reporting Process

If you believe you have identified a security vulnerability or if you suspect your data has been compromised, please report it to us immediately:

• Email: hello@dentalhire.uk

We take all security reports seriously and will investigate promptly. In the event of a personal data breach, we will notify affected users and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, in accordance with UK GDPR requirements.