Privacy policy

Last updated: 4 September 2026. This policy explains what personal information Romania Dental Tourism collects when you contact us about dental treatment in Bucharest, why it is needed, how long it is kept and what you can ask us to do with it. Questions can be sent to hello@romaniadentaltourism.co.uk.

Who is responsible for your data

Romania Dental Tourism operates this website and handles your first enquiry. When your case moves to treatment planning, the treating dental clinic in Bucharest becomes responsible for your clinical records as an independent controller under Romanian and EU law. The clinic’s legal and registration details are provided in writing with your treatment plan before you commit to treatment.

Information you give us

An enquiry may contain your name, email address, phone number, country, requested treatment and message. If you choose to provide photographs, X-rays, scans, dental history or medical information, that material is special category health data and receives additional protection.

Information collected automatically

The web server keeps standard access and security logs containing information such as an IP address, browser type and requested page. These logs are used to keep the website available and secure, not to create a patient profile.

With your Statistics permission, Google Analytics 4, PostHog and the standalone Microsoft Clarity project measure aggregate website use. Google Analytics and PostHog record a confirmed enquiry only as generate_lead after the website has validated and stored it, and record a WhatsApp selection separately as whatsapp_click. PostHog standard analytics is memory-only. The optional 30-day internal-analysis identifier requires separate consent. Automatic event capture, session recording, heatmaps and exact URLs remain disabled. Clarity provides heatmaps and session playback with the whole page, every form and every form field masked before it loads; its custom events contain only fixed, allowlisted names. With separate Marketing permission, a server-verified enquiry may be reported to Google Ads as an aggregate conversion. Meta Pixel measures consented page visits and receives only broad Contact and Lead event names without custom parameters; Meta’s health and wellness controls may block those lower-funnel events. Microsoft Advertising Universal Event Tracking (UET) measures aggregate visits, whatsapp_click and confirmed generate_lead events. Clarity is disabled inside the UET tag. Google Analytics audience import, personalised advertising signals and user-provided data collection are disabled. Meta Core Setup is on, automatic matching and automatic events are off, and the Meta traffic allow list is restricted to this domain. These services are not requested or updated until the matching consent is enabled. We do not send any name, email address, phone number, message, requested treatment, photograph, X-ray or clinical history from our forms to these measurement services. A WhatsApp selection is not reported as a Google Ads conversion or treated as a qualified lead. The cookie policy explains each category and how to change your choice.

Why we use information

We use ordinary contact information to answer an enquiry and take steps requested before a possible contract. Photographs, X-rays and dental or medical history are used only with the explicit consent requested on the enquiry form so a dentist can assess the case. A treating clinic uses clinical information to plan, deliver and follow up treatment under its contract and legal record-keeping duties. Essential server and security information is used for our legitimate interest in operating a safe website. Optional Statistics and Marketing measurement is based on the privacy choice you make on the site.

We do not sell personal data, give enquiry information to advertisers or add someone to a marketing list because they requested a quote.

Who can see information

The coordinator handling an enquiry and the clinical team assessing the case can see the information needed for that work. Hostinger stores the website and its database, and email providers carry messages between us. If you use WhatsApp, the conversation is also processed by WhatsApp Ireland Limited under its own terms.

Google Analytics, PostHog and the standalone Microsoft Clarity project receive only the limited measurement information described above after Statistics permission. Google Ads, Meta and Microsoft Advertising UET receive only the limited interaction and conversion signals described above after Marketing permission. None receives the contents of an enquiry or clinical files from our forms. Information may also be disclosed where an authority lawfully requires it.

Where information is held

Website enquiries are stored in the site database on EU-based hosting. Where a service provider processes data outside the EU or UK, the transfer relies on an applicable adequacy decision or contractual safeguards.

How long we keep it

An enquiry that does not lead to treatment is kept for up to 24 months and can be deleted sooner on request. Photographs and X-rays sent for an assessment that does not proceed are deleted within 12 months or sooner on request. The treating clinic keeps records of completed treatment for the period required by Romanian medical-record law. Server logs have a short rolling retention set by the hosting provider.

Your rights

You can ask for a copy of personal data, correction of inaccurate information, deletion where no legal retention duty applies, restriction or objection, or a portable copy. You can also withdraw consent, which stops future processing based on that consent. Email hello@romaniadentaltourism.co.uk; requests are answered within one month and without charge.

If you are not satisfied, you can contact the UK Information Commissioner’s Office at ico.org.uk or the Romanian authority ANSPDCP at dataprotection.ro.

Children and security

The website is intended for adults. We do not knowingly collect information about anyone under 16 without a parent or guardian. The site uses HTTPS, access to enquiry records is restricted to accounts that need it, and clinical images are shared only with clinicians assessing the case. If a breach created a risk to your rights, we would follow the applicable notification duties.

Changes to this policy

If the way information is handled changes, this page and its date will be updated. Material changes affecting people who have already contacted us will be communicated where appropriate.