Privacy Policy

1. About Us

DentalHire ("we", "us", "our") is operated by Just Mooching Ltd, a company registered in England and Wales under company number 16855929. We are the data controller responsible for your personal data in relation to this platform.

This Privacy Policy explains how we collect, use, and protect your personal information when you use DentalHire, the UK's direct dental hiring marketplace. It complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following categories of personal data:

2.1 Account Information

Your name, email address, password (encrypted), and role selection (practice or dentist) when you create an account.

2.2 GDC Numbers

If you register as a dentist, we collect your General Dental Council (GDC) registration number. This is manually verified by our admin team against the public GDC register to confirm your professional status.

2.3 Profile Information

Information you provide on your profile, including your location, postcode, role type, qualifications, experience, availability, salary expectations, and practice details such as address, practice type, and team size.

2.4 Videos

Profile videos and application videos that you upload. These are stored securely and displayed on your profile or application as applicable. Premium members have access to video upload features.

2.5 CV Uploads

Your curriculum vitae (CV) uploaded as part of your dentist profile or job application. CVs may contain personal data including your employment history, education, and contact details.

2.6 Messages

The content of messages you send to and receive from other users through the platform's messaging system. Messages are used to facilitate direct communication between practices and dentists.

2.7 Payment Information

When you purchase a premium subscription, payment is processed by our payment provider (Base44 Payments). We do not store your full card details — these are handled securely by the payment provider. We retain records of transactions (amount, date, status) for accounting and subscription management purposes.

2.8 Device and Analytics Information

We collect technical information about your device, browser, IP address, and how you interact with the platform. This includes usage data such as pages visited, features used, and timestamps. We use this information to improve the platform and monitor for security issues.

3. Purpose of Processing

We process your personal data for the following purposes:

• Creating and managing your account
• Verifying your identity and GDC registration (for dentists)
• Displaying your profile to other users (practices or dentists)
• Facilitating direct communication and job applications between users
• Processing subscription payments and managing premium features
• Maintaining the security and integrity of the platform
• Complying with legal and regulatory obligations
• Improving and developing the platform's features and user experience

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Consent (Article 6(1)(a)) — for processing videos, CVs, and cookie data where you have given consent.
• Contract (Article 6(1)(b)) — for processing your account, profile, and application data to provide the service you requested.
• Legal obligation (Article 6(1)(c)) — for retaining records required for accounting, tax, and regulatory compliance.
• Legitimate interests (Article 6(1)(f)) — for analytics, security monitoring, and platform improvement, where our interests do not override your rights.

For special category data (such as health information that may be included in a CV), we rely on your explicit consent under Article 9(2)(a) of UK GDPR.

5. Data Retention

We retain your personal data only for as long as necessary:

• Active accounts: Data is retained while your account is active and for 12 months after account closure.
• GDC verification records: Retained for the duration of your account plus 6 years for audit purposes.
• Messages: Retained for the duration of your account.
• Payment records: Retained for 6 years from the date of transaction for tax and accounting compliance.
• Consent records: Retained for the duration required to demonstrate compliance with UK GDPR.
• Analytics data: Aggregated and anonymised where possible; raw data retained for up to 24 months.

You may request deletion of your data at any time (see Section 8). We will delete or anonymise your data once the retention period expires or when you exercise your right to erasure, unless we are required to retain it by law.

6. International Data Transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area (EEA). Where any data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other transfer mechanisms recognised under UK GDPR. You may contact us for more information about the safeguards we use for international transfers.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data ("right to be forgotten").
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent — withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint — with the Information Commissioner's Office (ICO).

8. Subject Access Requests

You can submit a subject access request (SAR) to find out what personal data we hold about you and how we use it. To make a request, please contact us using the details in Section 10 or use our Contact and Support page. We will respond within one month of receiving your request. We may need to verify your identity before disclosing information.

9. Cookies

We use cookies and similar technologies to operate the platform and improve your experience. For full details about the cookies we use and how to manage them, please see our Cookie Policy.

10. Contact Details

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• Company: Just Mooching Ltd
• Company Number: 16855929
• Email: hello@dentalhire.uk

11. Complaints

If you believe we have not handled your personal data in accordance with this policy or UK GDPR, you have the right to complain to the Information Commissioner's Office (ICO):

• ICO Website: ico.org.uk
• ICO Helpline: 0303 123 1113

We would appreciate the opportunity to address your concerns directly before you approach the ICO. Please contact us first using the details above.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.