Privacy policy

Last updated: 24 August 2026. This policy explains what personal information Romania Dental Tourism collects when you contact us about dental treatment in Bucharest, why it is needed, how long it is kept and what you can ask us to do with it. Questions can be sent to hello@romaniadentaltourism.co.uk.

Who is responsible for your data

Romania Dental Tourism operates this website and handles your first enquiry. When your case moves to treatment planning, the treating dental clinic in Bucharest becomes responsible for your clinical records as an independent controller under Romanian and EU law. The clinic’s legal and registration details are provided in writing with your treatment plan before you commit to treatment.

Information you give us

An enquiry may contain your name, email address, phone number, country, requested treatment and message. If you choose to provide photographs, X-rays, scans, dental history or medical information, that material is special category health data and receives additional protection.

Information collected automatically

The web server keeps standard access and security logs containing information such as an IP address, browser type and requested page. These logs are used to keep the website available and secure, not to create a patient profile.

With your Statistics permission, Google Analytics 4 and PostHog measure aggregate website use. PostHog is configured without persistent identifiers, automatic event capture, session recording, heatmaps or exact URLs. With separate Marketing permission, a server-verified Google Analytics lead may be reported to Google Ads. Meta Pixel measures consented page visits and receives only broad Contact and Lead event names without custom parameters; Meta’s health and wellness controls may block those lower-funnel events. Microsoft Advertising Universal Event Tracking (UET) measures aggregate visits, contact clicks and confirmed enquiry completions. Google Analytics audience import, personalised advertising signals and user-provided data collection are disabled. Meta Core Setup is on, automatic matching and automatic events are off, and the Meta traffic allow list is restricted to this domain. The Microsoft UET tag is also connected to Microsoft Clarity for interaction analytics such as heatmaps and session playbacks. These advertising services are not requested or updated until the matching consent is enabled. We do not send any name, email address, phone number, message, requested treatment, photograph, X-ray or clinical history from our forms to these measurement services, and every form is explicitly marked for Clarity masking. A confirmed enquiry is recorded only as the broad event generate_lead after validation and storage. A WhatsApp selection is kept separate as whatsapp_click or Contact and is not treated as a qualified lead. The cookie policy explains each category and how to change your choice.

Why we use information

We use ordinary contact information to answer an enquiry and take steps requested before a possible contract. Photographs, X-rays and dental or medical history are used only with the explicit consent requested on the enquiry form so a dentist can assess the case. A treating clinic uses clinical information to plan, deliver and follow up treatment under its contract and legal record-keeping duties. Essential server and security information is used for our legitimate interest in operating a safe website. Optional Statistics and Marketing measurement is based on the privacy choice you make on the site.

We do not sell personal data, give enquiry information to advertisers or add someone to a marketing list because they requested a quote.

Who can see information

The coordinator handling an enquiry and the clinical team assessing the case can see the information needed for that work. Hostinger stores the website and its database, and email providers carry messages between us. If you use WhatsApp, the conversation is also processed by WhatsApp Ireland Limited under its own terms.

Google Analytics and PostHog receive only the limited measurement information described above after Statistics permission. Google Ads, Meta, Microsoft Advertising UET and Microsoft Clarity receive only the limited interaction and conversion signals described above after the matching optional permission. None receives the contents of an enquiry or clinical files from our forms. Information may also be disclosed where an authority lawfully requires it.

Where information is held

Website enquiries are stored in the site database on EU-based hosting. Where a service provider processes data outside the EU or UK, the transfer relies on an applicable adequacy decision or contractual safeguards.

How long we keep it

An enquiry that does not lead to treatment is kept for up to 24 months and can be deleted sooner on request. Photographs and X-rays sent for an assessment that does not proceed are deleted within 12 months or sooner on request. The treating clinic keeps records of completed treatment for the period required by Romanian medical-record law. Server logs have a short rolling retention set by the hosting provider.

Your rights

You can ask for a copy of personal data, correction of inaccurate information, deletion where no legal retention duty applies, restriction or objection, or a portable copy. You can also withdraw consent, which stops future processing based on that consent. Email hello@romaniadentaltourism.co.uk; requests are answered within one month and without charge.

If you are not satisfied, you can contact the UK Information Commissioner’s Office at ico.org.uk or the Romanian authority ANSPDCP at dataprotection.ro.

Children and security

The website is intended for adults. We do not knowingly collect information about anyone under 16 without a parent or guardian. The site uses HTTPS, access to enquiry records is restricted to accounts that need it, and clinical images are shared only with clinicians assessing the case. If a breach created a risk to your rights, we would follow the applicable notification duties.

Changes to this policy

If the way information is handled changes, this page and its date will be updated. Material changes affecting people who have already contacted us will be communicated where appropriate.