Privacy Policy

Last updated: 14 August 2026

This Privacy Policy explains how Alevian Health ("we", "us", "our") collects and uses personal information when you use our services, including:

• Odenta - a patient-facing service to help arrange emergency dental appointments.
• DAN (Dental Access Network) - a practice-facing portal used by dental practices to manage emergency cases and bookings.

Who we are

Alevian Health is the controller of personal data processed through Odenta and DAN. "Controller" means we decide how and why your personal data is used.

Contact: info@alevianhealth.com

What we collect

Patients (Odenta)

When you use Odenta, we may collect:

• Identity and contact details you provide
• Location details such as postcode (to route you to nearby care)
• Information about your dental problem (symptoms and optional images)
• Appointment and booking details (offered slot times and confirmations)
• Technical information necessary to operate the service (for example session/security data)

Practices (DAN)

When a dental practice uses DAN, we may collect:

• Practice and user details (name, address, contact details)
• Account and login details (managed via our authentication provider)
• Availability and capacity information (to support routing)
• Operational information (case status, timestamps, and audit records)

Special category data (health information)

Some information collected through Odenta may be health information (for example symptom descriptions or images). This is "special category" data under UK GDPR. Where we process this, we apply additional safeguards and rely on an appropriate Article 9 condition (for example, where processing is necessary for the provision of health care / management of health services, or where you choose to provide health information to arrange care).

How we use your information

We use personal information to:

• Provide Odenta and DAN (including routing, booking and communications)
• Enable dental practices to review and accept assigned cases
• Maintain the safety, security, and integrity of the platform
• Handle support requests and resolve issues
• Meet legal, regulatory, and accounting requirements

Lawful bases for processing

Under UK GDPR we rely on the following lawful bases where applicable:

• Contract - where processing is necessary to provide the service you request (for example arranging an appointment and confirming booking details).
• Legitimate interests - where necessary to operate, secure, and improve the service (for example security, fraud prevention, and platform reliability), balanced against your rights.

Who we share information with

We may share information with:

• Assigned dental practices - patient information is shared only with the practice that accepts the appointment, and only as needed to deliver care.
• Payment providers - payments are processed by Stripe. We do not store full card details.
• Infrastructure providers - hosting, databases, monitoring and email delivery used to run the service.
• Authorities and advisers - where required by law or to protect rights and safety.

International transfers

Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards (such as contractual protections) to protect your information.

Security

We use technical and organisational measures designed to protect personal information. This includes encryption in transit (HTTPS/TLS), encryption at rest where supported by providers, role-based access controls, and audit logging of key actions.

Data retention

We keep personal information only as long as necessary for the purposes described above, including supporting appointments, handling support queries, and meeting legal and accounting requirements.

Your rights

You may have rights under UK GDPR including the right to access, correct, delete, restrict, or object to processing of your personal information, and the right to data portability. You also have the right to complain to the Information Commissioner's Office (ICO).

To exercise your rights, contact us at info@alevianhealth.com.

Please include the subject line "Data Request" and enough details for us to locate your record (for example your email and booking reference if you have one).

Cookies

We use strictly necessary cookies and similar technologies to operate the service, including security, routing, session continuity and storing your cookie preference. Our cookie preference record is kept for up to 180 days unless you update it sooner.

With Analytics consent, Google Analytics 4 and Microsoft Clarity may run to help us understand website use and improve Odenta. Google Analytics may use cookies such as _ga and related property cookies; Google's published default for _ga is up to 2 years. Microsoft Clarity may use cookies such as_clck and _clsk; Clarity playback data is retained for 30 days and click, heatmap, labelled or favourited session data is retained for up to 9 months.

With Advertising consent, Google Ads conversion measurement may run for submitted leads. Google Ads may use advertising and conversion cookies such as _gcl_* and related Google advertising cookies; Google lists advertising-product cookies with durations that vary by cookie and service.

We do not put names, contact details, postcode, symptoms, clinical information, case IDs or tokens into analytics or advertising events. You can change or withdraw non-essential cookie consent at any time using Cookie settings. When consent is withdrawn, we send updated denied consent signals and clear applicable first-party analytics, Microsoft Clarity and Google Ads cookies where technically possible.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the Last updated date above.