# Privacy Policy
**Last updated: 6 August 2026**
DENTAL CARD LIMITED, trading as Dental Card Ireland, respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, apply for or use a Dental Card membership, communicate with us, or use our related services.
This policy is intended to comply with the General Data Protection Regulation, the Irish Data Protection Act 2018 and other applicable data-protection legislation.
## 1. Who we are
For the purposes of data-protection law, the data controller is:
**Legal company name:** DENTAL CARD LIMITED
**Trading name:** Dental Card Ireland
**Registered address:** 169 Castlemoyne, Balgriffin, Dublin 13, Ireland
**Company Registration Number:** 682584
**Telephone:** 085 187 7330
**Email:** [info@dentalcard.ie](mailto:info@dentalcard.ie)
**Website:** dentalcard.ie
The data controller is the organisation responsible for deciding how and why personal data is processed.
## 2. Scope of this Privacy Policy
This Privacy Policy applies to personal data processed in connection with:
* the Dental Card Ireland website;
* Dental Card membership applications and subscriptions;
* physical or digital membership cards;
* participating dental clinics;
* customer enquiries and support;
* payments, renewals, cancellations and refunds;
* marketing communications;
* promotions, competitions and referral programmes;
* interactions through email, telephone, SMS, WhatsApp, social media or online forms.
Participating dental clinics may have their own privacy policies and may act as independent data controllers in relation to dental treatment and clinical records.
## 3. Personal data we collect
The information we collect depends on how you interact with us.
### 3.1 Identity and contact information
We may collect:
* full name;
* date of birth, where required;
* postal address;
* email address;
* telephone number;
* membership or card number;
* profile photograph, where you choose to provide one;
* parent or guardian details where a membership relates to a minor.
### 3.2 Membership information
We may collect:
* selected membership plan;
* membership start date;
* renewal and expiry dates;
* membership status;
* membership benefits;
* participating clinic details;
* records showing whether a benefit has been used;
* membership cancellation or suspension information;
* information used to verify eligibility for a student or promotional plan;
* ISIC or other student-status information, where applicable.
### 3.3 Payment and transaction information
We may collect:
* subscription amount;
* payment status;
* transaction dates;
* invoice and receipt details;
* refund information;
* billing history;
* payment-provider reference numbers;
* limited payment-card information supplied by the payment provider, such as card type and the last four digits.
We do not normally receive or store your full payment-card number or security code. These details are processed by authorised payment providers.
### 3.4 Communications and customer-support information
We may collect information contained in:
* emails;
* telephone calls;
* contact forms;
* SMS messages;
* WhatsApp messages;
* social-media messages;
* complaints;
* feedback and reviews;
* customer-support enquiries;
* records of decisions or actions taken in response to an enquiry.
Telephone calls may be recorded only where this is clearly communicated and where a valid legal basis exists.
### 3.5 Website, device and technical information
When you use our website or digital services, we may collect:
* IP address;
* browser type;
* device type;
* operating system;
* pages visited;
* dates and times of access;
* referral source;
* cookie identifiers;
* website interactions;
* approximate location derived from an IP address;
* technical and security logs.
### 3.6 Marketing information
We may collect:
* marketing preferences;
* consent records;
* email opening and link-click information;
* responses to campaigns;
* promotion or referral participation;
* information about how you heard about us.
### 3.7 Clinic and treatment-related information
Dental Card Ireland provides a membership and benefit service. We do not generally provide dental treatment and do not normally require complete dental or medical records.
A participating dental clinic may process information concerning:
* medical history;
* dental history;
* diagnosis;
* X-rays;
* prescriptions;
* treatment plans;
* clinical notes;
* consent to treatment.
The participating clinic will normally act as an independent data controller for this information.
We may receive limited treatment-related information where necessary to:
* confirm that a membership benefit applies;
* record that a benefit has been used;
* investigate suspected misuse;
* resolve a billing or membership query;
* manage a complaint;
* comply with a legal obligation;
* establish, exercise or defend a legal claim.
We will not request complete clinical records unless this is necessary, proportionate and legally permitted.
## 4. How we collect personal data
We may collect personal data:
* directly from you;
* through our website or membership platform;
* through a digital-wallet or membership-card platform;
* from a participating dental clinic;
* from a parent, guardian or other person arranging membership on your behalf;
* from an employer, university, student organisation or business partner;
* from payment processors;
* from marketing and analytics providers;
* from referral partners;
* from publicly available sources;
* when you communicate with us through telephone, email, messaging services or social media.
Where we receive your personal data from another source, we will provide the information required by data-protection law within the applicable time limit, unless an exemption applies.
## 5. How we use personal data and our lawful bases
We process personal data only where we have a valid legal basis.
### 5.1 Creating and managing your membership
We use your information to:
* register your membership;
* create and issue your membership card;
* provide access to membership benefits;
* verify membership status;
* administer renewals;
* process cancellations;
* manage suspensions or expirations;
* provide customer support;
* maintain membership records.
**Lawful basis:** performance of a contract or taking steps at your request before entering into a contract.
### 5.2 Processing payments
We use payment and transaction information to:
* collect subscription fees;
* manage recurring payments;
* issue receipts and invoices;
* process refunds;
* reconcile payments;
* manage failed payments;
* prevent fraud and payment abuse.
**Lawful basis:** performance of a contract, compliance with legal obligations and our legitimate interests in operating and protecting our business.
### 5.3 Confirming membership benefits with clinics
We may share or verify limited information with participating clinics to:
* confirm that your membership is active;
* confirm your selected membership plan;
* explain the benefits available under that plan;
* record use of a membership benefit;
* investigate suspected misuse;
* resolve a membership dispute.
**Lawful basis:** performance of a contract and our legitimate interests in providing and protecting the membership service.
### 5.4 Providing customer support
We use your information to:
* answer questions;
* resolve technical or payment problems;
* manage complaints;
* investigate service issues;
* maintain records of our communications.
**Lawful basis:** performance of a contract and our legitimate interests in providing effective customer support.
### 5.5 Sending essential service communications
We may send communications concerning:
* account activation;
* payment confirmation;
* failed payments;
* membership renewal;
* membership expiry;
* changes to membership benefits;
* changes to terms or policies;
* security alerts;
* service interruptions;
* cancellation or suspension.
These are administrative communications and are not direct marketing.
**Lawful basis:** performance of a contract, compliance with legal obligations and legitimate interests.
### 5.6 Marketing communications
Where permitted by law, we may send information about:
* Dental Card membership plans;
* participating clinics;
* new membership benefits;
* promotions and offers;
* dental services;
* competitions or referral programmes;
* relevant news and updates.
Where consent is required, we will ask for consent before sending marketing.
You may withdraw consent or object to marketing at any time.
**Lawful basis:** consent or legitimate interests, depending on the circumstances and applicable law.
### 5.7 Website operation, analytics and improvement
We may use website and technical information to:
* operate and secure the website;
* identify and fix errors;
* analyse website performance;
* understand how visitors use our services;
* improve our products and customer experience;
* measure marketing performance;
* prevent fraudulent or malicious activity.
**Lawful basis:** legitimate interests for essential operation, security and service improvement, and consent for non-essential analytics or advertising cookies.
### 5.8 Legal, accounting and regulatory purposes
We may process personal data to:
* maintain financial and accounting records;
* comply with tax obligations;
* respond to regulatory or law-enforcement requests;
* establish, exercise or defend legal claims;
* enforce our terms and conditions;
* investigate fraud;
* protect our rights, customers, clinics and business.
**Lawful basis:** compliance with legal obligations and legitimate interests.
## 6. Legitimate interests
Where we rely on legitimate interests, these interests may include:
* operating and improving our membership service;
* providing customer support;
* protecting accounts and payment systems;
* preventing fraud and misuse;
* maintaining accurate business records;
* managing relationships with participating clinics;
* promoting relevant services to existing customers where legally permitted;
* establishing or defending legal claims.
We consider whether our interests are overridden by your rights and freedoms before relying on this basis.
You may object to processing based on legitimate interests. We will stop the processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.
## 7. Special-category personal data
Health information is classified as special-category personal data under GDPR.
Dental Card Ireland does not normally require detailed health or dental records to manage a membership.
Where health-related information is provided to us or is necessary to resolve a complaint or benefit issue, we will process it only where both a lawful basis and an applicable special-category condition exist. This may include:
* your explicit consent;
* the establishment, exercise or defence of legal claims;
* reasons of substantial public interest permitted by law;
* another condition allowed under applicable data-protection legislation.
Participating clinics are responsible for their own clinical records and privacy obligations.
## 8. Sharing personal data
We may share personal data with trusted organisations where necessary and lawful.
Recipients may include:
* participating dental clinics;
* membership-card and digital-wallet providers;
* website hosting providers;
* cloud-storage and IT providers;
* customer-support platforms;
* email, SMS and messaging providers;
* payment processors;
* accounting and bookkeeping providers;
* marketing and analytics providers;
* professional advisers, including solicitors, accountants, auditors and insurers;
* employers, universities, student organisations or partners that arrange membership, where appropriate;
* government departments;
* tax authorities;
* courts;
* regulators;
* law-enforcement bodies;
* prospective purchasers, investors or successors in connection with a business sale, merger or restructuring.
Service providers that process data on our behalf are required to protect the information and use it only for authorised purposes.
Participating dental clinics may act as separate and independent data controllers for treatment and clinical records.
## 9. Payment processing
Payments may be processed by third-party providers such as SumUp, Stripe or another approved payment processor.
The payment provider may collect and process:
* payment-card details;
* billing details;
* authentication information;
* transaction information;
* fraud-prevention information.
Payment providers process personal data under their own privacy policies and legal obligations.
Dental Card Ireland generally receives only the information necessary to confirm and manage the transaction.
## 10. International data transfers
Some of our service providers may process personal data outside Ireland or outside the European Economic Area.
Where personal data is transferred to a country that has not received an adequacy decision from the European Commission, we will use an appropriate transfer mechanism where required, such as:
* European Commission Standard Contractual Clauses;
* an adequacy decision;
* binding corporate rules;
* another mechanism permitted by data-protection law.
We may also apply supplementary technical or organisational safeguards where appropriate.
You may contact us for more information about relevant international-transfer safeguards.
## 11. Data retention
We keep personal data only for as long as necessary for the purpose for which it was collected and to meet legal, accounting, tax, fraud-prevention and dispute-resolution requirements.
Typical retention periods may include:
* **Active membership data:** for the duration of the membership.
* **Membership and transaction records:** generally for at least six years after the relevant transaction or end of the membership, where required for accounting, tax or legal purposes.
* **Invoices and accounting records:** for the period required by Irish tax and company law.
* **Customer-support communications:** generally for up to six years, depending on the nature of the enquiry or dispute.
* **Complaint and legal-claim records:** for the period necessary to resolve the matter and for any applicable limitation period.
* **Marketing consent records:** for as long as necessary to demonstrate consent and manage opt-out preferences.
* **Marketing contact information:** until consent is withdrawn, an objection is made, or the information is no longer required.
* **Cookie and analytics information:** according to the duration stated in our cookie settings or Cookie Policy.
* **Incomplete applications:** for a limited period necessary to provide support, manage abandoned applications and prevent fraud.
* **Security logs:** for a limited period appropriate to security and fraud-prevention requirements.
Where information is no longer required, it will be securely deleted, anonymised or destroyed.
## 12. Cookies and similar technologies
Our website may use cookies, pixels, local storage and similar technologies.
### Strictly necessary cookies
These are required for the website, membership, payment, account or security functions to operate.
### Analytics cookies
These help us understand how visitors use the website and how the website performs.
### Functional cookies
These remember preferences and provide enhanced functionality.
### Advertising and marketing cookies
These may be used to measure campaigns, understand referrals or display relevant advertising.
Non-essential cookies will be used only after valid consent has been obtained, where consent is required.
You can manage your cookie preferences through our cookie banner and your browser settings.
Further information may be provided in a separate Cookie Policy.
## 13. Direct marketing and communication preferences
You may opt out of direct marketing at any time by:
* clicking the unsubscribe link in an email;
* replying STOP to an eligible SMS;
* changing your communication preferences;
* contacting us at [info@dentalcard.ie](mailto:info@dentalcard.ie).
Opting out of marketing will not stop essential communications about your membership, payments, security or service changes.
We may retain limited information on a suppression list to ensure that we respect your opt-out request.
## 14. Your data-protection rights
Subject to applicable law, you may have the right to:
* request access to your personal data;
* request correction of inaccurate or incomplete information;
* request deletion of your personal data;
* request restriction of processing;
* object to processing based on legitimate interests;
* object to direct marketing;
* request portability of certain personal data;
* withdraw consent at any time where processing is based on consent;
* request information about international-transfer safeguards;
* lodge a complaint with a supervisory authority;
* not be subject to certain decisions based solely on automated processing that produce legal or similarly significant effects.
These rights are not absolute. Legal requirements or exemptions may limit how they apply.
To exercise your rights, contact:
**Email:** [info@dentalcard.ie](mailto:info@dentalcard.ie)
**Telephone:** 085 187 7330
We may ask for information necessary to verify your identity.
We will normally respond without undue delay and within one month. This period may be extended by up to two additional months where a request is complex or numerous, but we must explain the extension. ([Homepage | Data Protection Commission][1])
## 15. Complaints
Please contact us first if you have concerns about how your personal data has been handled.
You also have the right to lodge a complaint with the Irish Data Protection Commission:
**Data Protection Commission**
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
Current contact and complaint details are available through the Data Protection Commission’s official website.
## 16. Children and minors
Our services are not intended to be purchased independently by a child who does not have the legal capacity to enter into a contract.
Where a membership is arranged for a minor, we may require:
* the details of a parent or legal guardian;
* parental or guardian authorisation;
* information necessary to create and manage the membership.
We process children’s personal data with particular care and only to the extent necessary to provide the service and comply with applicable law.
## 17. Automated decision-making
We do not currently use solely automated decision-making that produces legal or similarly significant effects concerning members.
We may use automated systems for routine activities such as:
* membership-renewal reminders;
* failed-payment notifications;
* card activation or expiry;
* fraud or account-security alerts;
* customer segmentation for marketing;
* routing customer-support requests.
Where we introduce legally significant automated decision-making, we will provide the information and safeguards required by law.
## 18. Data security
We use appropriate technical and organisational measures designed to protect personal data against:
* unauthorised access;
* accidental loss;
* destruction;
* alteration;
* unlawful disclosure;
* misuse.
These measures may include:
* access controls;
* passwords and authentication;
* encryption;
* secure hosting;
* staff confidentiality requirements;
* backups;
* software updates;
* security monitoring;
* contractual protections with service providers.
No electronic system is completely secure, but we review our security measures in light of the nature and risks of the processing.
## 19. Data breaches
Where a personal-data breach occurs, we will assess the risk to affected individuals.
Where required by law, we will:
* notify the Data Protection Commission;
* notify affected individuals where the breach is likely to result in a high risk;
* document the breach and the steps taken in response.
## 20. Third-party websites and participating clinics
Our website or communications may contain links to:
* participating dental clinics;
* payment providers;
* digital-wallet services;
* social-media platforms;
* third-party websites.
These organisations may process personal data independently and under their own privacy policies.
Dental Card Ireland is not responsible for the privacy practices of independent third parties. You should review their privacy information before submitting personal data.
## 21. Changes to this Privacy Policy
We may update this Privacy Policy to reflect:
* changes to our services;
* changes to service providers;
* new technologies;
* changes to data-processing activities;
* legal or regulatory developments.
The current version will be published on our website with the date of the latest update.
Where a change materially affects how we use personal data, we may provide additional notice by email, through the website or through the membership platform.
The Irish Data Protection Commission recommends that a privacy policy accurately reflect an organisation’s actual processing activities, including its purposes, recipients and retention periods, and that it be reviewed regularly. ([Homepage | Data Protection Commission][2])
## 22. Contact us
For questions, requests or complaints concerning privacy, contact:
**DENTAL CARD LIMITED**
Trading as Dental Card Ireland
169 Castlemoyne
Balgriffin
Dublin 13
Ireland
**Company Registration Number:** 682584
**Email:** [info@dentalcard.ie](mailto:info@dentalcard.ie)
**Telephone:** 085 187 7330
**Website:** dentalcard.ie
---
