Privacy Policy

1. Who we are

Dr. Mitachi ("we", "us", "our") operates a dental clinic at str. Academician Sergiu Rădăuțanu 9, MD-2045, Chișinău, with a UK coordination office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UK. We are the data controller for personal data collected through this website.

For any data protection enquiries, contact us at hello@drmitachi.com or call 020 3655 947.

2. What data we collect

We collect the following categories of personal data:

• Identity data: full name, age, country of residence.
• Contact data: email address, phone number.
• Health and medical data: dental photographs, CT scans (CBCT/DICOM files), panoramic X-rays, and descriptions of dental concerns submitted via our remote assessment form.
• Enquiry data: messages submitted via the contact form, including service interest.

3. Lawful basis for processing

We process your personal data on the following bases under UK GDPR:

• Explicit consent (Article 9(2)(a)): for processing special category health data (CT scans, dental images, medical descriptions). You provide this consent via the mandatory checkbox on our remote assessment form.
• Legitimate interest (Article 6(1)(f)): for responding to general enquiries and coordinating treatment logistics.
• Contract performance (Article 6(1)(b)): when processing data necessary to deliver treatment services you have agreed to.

4. How we use your data

• To assess your dental case and provide a remote treatment plan.
• To respond to enquiries submitted via the contact form.
• To coordinate treatment scheduling, travel logistics, and aftercare.
• To communicate with you about your treatment.

5. Medical data handling

CT scans, dental photographs, and other medical images submitted through our remote assessment form are:

• Transmitted via 256-bit SSL/TLS encryption.
• Stored on secure servers located in the European Union, provided by our email and hosting infrastructure partners.
• Retained for a maximum of 24 months from the date of submission, unless you proceed with treatment, in which case records are retained for the duration of the clinical relationship plus 11 years (in line with dental record-keeping best practices).
• Not shared with any third parties for marketing or commercial purposes. Medical data is only accessed by the Dr. Mitachi clinical team for the purpose of treatment assessment and delivery.

6. Data sharing

We do not sell your data. We share personal data only with:

• Resend (email delivery provider) — to send form submission notifications to our clinical team. Resend processes data in accordance with their privacy policy and GDPR obligations.
• Vercel (hosting provider) — our website is hosted on Vercel infrastructure within the EU/US. No personal data is stored persistently by Vercel.

7. International data transfers

Your data may be transferred between the UK, EU, and the Republic of Moldova for the purpose of clinical assessment and treatment delivery. Moldova is not currently covered by a UK adequacy decision; however, we ensure appropriate safeguards are in place, including processing data only within our own clinical team and applying strict access controls.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), subject to legal retention requirements.
• Restrict processing of your data.
• Data portability — receive your data in a structured, commonly used format.
• Withdraw consent at any time for processing based on consent.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email us at hello@drmitachi.com.

9. Cookies

This website uses only essential cookies required for the site to function. We do not use tracking cookies, analytics cookies, or third-party advertising cookies. The Trustpilot widget embedded on some pages may set its own cookies — please refer to Trustpilot's cookie policy for details.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.