Most privacy policies are written to protect the organisation rather than to inform the reader. This one tries to do the second thing, setting out in ordinary language what happens to information when you visit these pages.
The short version is that these pages are static. There is nothing here for you to fill in, nothing that asks who you are, and nothing that records what you looked at. What follows explains the few points at which any information moves at all, and what your rights are regardless.
What this website asks you for
Nothing. There is no enquiry form, no sign-up, no newsletter box, no account, no comment field and no search box anywhere on this site. Because none of those exist, there is no route by which you could submit your name, your email address, your phone number, your postcode or anything else through these pages, whether deliberately or by accident.
That changes what the rest of this policy can meaningfully be about. Policies describing how your enquiry is stored, who reads it and how long it is kept are describing something this website does not do. It also follows that no marketing list is built from these pages, no profile of you is assembled, and nothing you do here is used to target advertising at you elsewhere.
Web fonts and the one third party involved
There is a single genuine exception to the picture above, and it is the sort of detail most policies quietly omit. The typefaces used across this site are loaded from Google's font service rather than being served from the site itself. When a page opens, your browser makes a request to Google's servers to fetch those font files.
A request of that kind necessarily carries your IP address, along with routine technical information your browser sends to any server it contacts, such as which browser and operating system you are using. That information reaches Google as the operator of the font service. It is not something the site collects, stores or has access to, but it is a transfer that occurs, and you are entitled to know it happens.
What Google does with that information is governed by its own privacy terms rather than this policy. If avoiding the request matters to you, the fonts could be served locally instead, removing the third-party connection entirely; that is a technical change to the site rather than something you can switch off.
No other third-party service loads when a page opens. There are no advertising networks, social media widgets, embedded video players, live chat, review widgets or tracking pixels anywhere in these pages.
Cookies and similar technologies
A cookie is a small file a website asks your browser to keep, usually so it can recognise you later or record what you did. Cookies are what make analytics, advertising and login sessions possible, and they are why consent banners exist.
These pages set no cookies. There is no analytics package, tag manager, advertising tracker or measurement script of any kind, and nothing is written to your browser's local storage. That is why you have seen no cookie banner: there is nothing to consent to. If measurement is introduced later, non-essential cookies require your consent before they are set, not merely a notice telling you they exist.
Hosting and server records
Every website is delivered by a server, and servers ordinarily keep access logs recording which files were requested, when, and from which IP address. This is standard infrastructure behaviour rather than a deliberate collection decision, and it happens beneath the level of the pages themselves.
What this site's host records, how long it keeps it, and whether it is ever reviewed are not things this policy can state with confidence, because they are determined by the hosting arrangement rather than by these pages. Rather than guess at a retention period that sounds plausible, this policy says openly that the detail needs confirming with the site operator.
Where such logs exist, the usual lawful basis is legitimate interests: keeping a service running securely, diagnosing faults and identifying abuse are ordinary operational needs, and an IP address in a technical log is a proportionate way of meeting them.
Links that take you elsewhere
Some pages link outwards, including to regional websites operated under a related brand and to a video hosted on a third-party platform. Following any of those takes you onto a site this policy does not cover, where that site's own privacy terms apply and information may be collected in ways these pages do not, including through cookies and analytics. It is worth reading the policy of any site where you intend to submit information about yourself.
Your rights under UK data protection law
UK GDPR gives you a set of rights over personal data relating to you, and those rights exist whether or not a particular website makes much use of them. In summary, you can ask what personal data an organisation holds about you and receive a copy; ask for inaccurate data to be corrected; ask for data to be erased in certain circumstances; ask for processing to be restricted while a dispute is resolved; ask to receive certain data in a portable format; and object to processing carried out on the basis of legitimate interests.
You can also complain to the Information Commissioner's Office, the UK's independent data protection regulator, if you believe your data has been handled improperly. You do not need permission to do so, and you can complain without having raised the matter with the organisation first, although doing so is usually quicker.
In practice, because these pages collect nothing directly, a request about them would most likely concern hosting logs rather than anything held about you as an identified individual. Requests are ordinarily answered within one month, and no charge applies unless one is clearly excessive or repetitive.
Children and young people
This site is written for adults considering a cosmetic treatment and is not directed at children. Because no information is collected through these pages, no data relating to a child is gathered here either.
Teeth whitening is subject to legal restrictions concerning age in the UK, and whether treatment may lawfully be provided to a young person is a matter for the provider and their clinical judgement rather than something a website can determine. A parent or guardian with a concern about a young person's information should raise it with the site operator directly.
Security, and being realistic about it
The most effective privacy protection on this site is structural rather than technical: information that is never collected cannot be lost, leaked or misused. With no forms, no accounts and no database of visitors, there is no store of personal information here to be breached.
The measures that remain relevant are the ordinary ones, chiefly serving pages over an encrypted connection so that what passes between your browser and the server cannot be read in transit. No arrangement is perfect, and any claim that a website is completely secure should be treated with scepticism.
Changes to this policy
This policy describes the site as it currently stands. Adding a form, introducing analytics, embedding a third-party widget or connecting a booking system would each change what it needs to say, and in most of those cases the policy would have to be updated before the change went live rather than afterwards.
Where a change involves non-essential cookies or similar tracking, your consent is required in advance. Continuing to use a site is not consent, and a banner that merely announces tracking has already started does not meet the standard.
Raising a question about your information
Here the policy has to be candid. There is currently no email address, telephone number or postal address published anywhere on this website, so there is no contact route this page can point you to for a data protection request.
That is a genuine gap rather than an oversight here, and inventing a plausible-looking inbox would be worse than acknowledging it: a request sent somewhere that does not exist goes unanswered while you believe it has been made.
Nothing about that gap affects the rights themselves. They are conferred by law and remain exercisable, including by complaint to the Information Commissioner's Office. If a contact route is published in future it belongs in this section.
Common questions about privacy on this site
Scope of this policy
This policy covers these pages only. It does not extend to any separately operated regional website, social media presence, booking system or third-party platform, each of which would have its own terms. Statements here reflect what could be verified in the pages themselves at the time of writing, and where this policy says a detail requires confirmation, that is an accurate description of the position rather than a placeholder awaiting removal.