Crystal Marruganti Science & Oral Healthcare (“we”, “our”, “the practice”) is committed to protecting the privacy, confidentiality and security of all personal information collected through this website. This Privacy Policy explains how personal data is collected, used, stored and protected, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the General Dental Council (GDC) Standards for the Dental Team.

By using this website, you consent to the practices described in this policy.

1. Data Controller

The Data Controller responsible for this website is:

Dr Crystal Marruganti
Marruganti Oral Healthcare Ltd
London, UK

Email: marruganti@gmail.com

2. What Personal Data We Collect

We may collect the following categories of personal data when you visit this website or contact us:

Information submitted through forms or email:

Name
Email address
Phone number
Professional details (for referral or speaking enquiries)
Any information voluntarily provided in a message

Automatically collected information:

IP address
Website usage statistics
Browser type and device information
Cookies (see section below)

No clinical records are collected or processed through this website.

3. Lawful Basis for Processing Personal Data

We process personal data under the following lawful bases:

Consent: when you submit a form or request information.
Legitimate interests: to respond to enquiries, manage referrals, maintain website security and improve user experience.
Legal obligation: to comply with GDC, data protection and professional standards.

Where clinical information is processed following an enquiry or referral, it is handled under:

Provision of healthcare (special category data – Article 9(2)(h) UK GDPR).

4. How We Use Your Personal Data

Personal data submitted via this website may be used to:

Respond to enquiries about periodontal treatment
Process referral requests from dental professionals
Arrange appointments or consultations
Provide information about professional speaking engagements
Maintain accurate administrative records
Improve the website and its functionality
Meet GDC requirements for confidentiality and record keeping
Ensure patient safety, continuity of care and quality assurance

We do not use personal data for direct marketing without explicit consent.

5. Confidentiality and GDC Compliance

As a registered dental professional, Dr Marruganti adheres strictly to the GDC Standards for the Dental Team, which require:

Maintaining patient confidentiality
Protecting personal information from misuse or unauthorised disclosure
Only sharing information when justified, necessary and permitted
Ensuring data is accurate, relevant and up to date

Confidentiality is upheld in all communication and data handling.

6. Sharing of Personal Data

Personal data is only shared when necessary and lawful, including:

With referring dental professionals to ensure safe and coordinated care
With secure technology providers (e.g., website hosting) under GDPR-compliant contracts
When required by law or regulatory bodies (e.g., GDC, CQC if relevant)

We never sell personal data to third parties.

7. Data Retention

Personal data submitted through the website is kept only for as long as necessary to:

Respond to your enquiry
Provide requested services
Meet legal or professional obligations
Maintain accurate records

Clinical correspondence or referral communications may be retained in line with professional standards (typically 10 years), but no clinical information is stored on this website.

8. Data Security

We take appropriate technical and organisational measures to protect personal data, including:

Secure hosting and encrypted connections (SSL)
Restricted access to personal information
Compliance with GDC confidentiality requirements
Secure disposal or anonymisation of data when no longer needed

While no online system is entirely risk-free, we take all reasonable steps to safeguard your information.

9. Cookies & Website Analytics

This website may use cookies and similar technologies to improve user experience and analyse website performance. Cookies can be disabled in your browser settings at any time.

If Google Analytics or similar tools are enabled, IP anonymisation is applied wherever possible.

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of data (where legally appropriate)
Restrict or object to certain processing
Withdraw consent where consent is the lawful basis
Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, please contact:
marruganti@gmail.com

11. Links to External Websites

This website may contain links to external sites. We are not responsible for the privacy practices or content of those websites.

12. Changes to This Policy

This Privacy Policy may be updated periodically to reflect legal or operational changes. The updated version will be posted on this page with a revised “Last updated” date.