Privacy Policy

Who we are

myline aligners is a UK dental laboratory producing clear aligners and retainers for dental practices. Our address is 35 Artillery Ln, London E1 7LP and you can reach us at info@mylinealigners.co.uk.

For the case information a dental practice sends us, the practice is the data controller and myline aligners acts as a data processor, handling the data only to manufacture and deliver the appliance. For our own website visitors, practice registrations and portal accounts, we are the data controller.

Information we collect

• Case submissions (guest case form and portal): dentist name and email, practice name and postcode, phone number, patient full name, chosen service, submission method, notes for the lab, and any uploaded scan or STL files.
• Practice registration: practice name, your name, email, phone, practice address, optional notes and the names and emails of associated dentists.
• Portal accounts: name, email, clinic membership, role and permissions, password (stored only as a secure hash), sign-in timestamps, and an audit log of changes made in the portal.
• Order and billing records: case status, production progress, dates, pricing, invoices and payment status.
• Website analytics: aggregated page views, approximate country, device type and referring site. No advertising or cross-site tracking cookies are used.

Patient names submitted with a case are health-related information. We ask practices to send only what is needed to produce the appliance and never to include full medical records.

Why we use it and our legal basis

• To produce, track and deliver cases — performance of a contract.
• To create and secure portal accounts — performance of a contract.
• To send case, approval and reminder emails — contract and legitimate interests.
• To invoice and keep financial records — legal obligation.
• To measure website use — consent, via the cookie banner.

How the data is stored

Case, account and invoice data is stored in our Supabase (PostgreSQL) database with row-level security, so each practice can only see its own cases. Uploaded scan files are held in access-controlled storage and are served only through authenticated links. Transactional email is sent through Resend. Passwords are never stored in readable form, and access to production data is limited to authorised myline staff. Data is hosted on servers in the UK/EU or in countries covered by UK adequacy regulations or standard contractual clauses.

How long we keep it

Case and clinical-production records are kept for up to 11 years in line with UK dental record-keeping expectations. Invoices and accounting records are kept for 6 years as required by HMRC. Portal accounts are kept while active and deleted within 6 months of a practice leaving. Analytics data is retained in aggregated form only.

Sharing

We share data only with the suppliers who help us run the service — our hosting and database provider, our email provider and our courier for delivery — and with professional advisers or authorities where the law requires. We never sell personal data.

Cookies

Essential cookies keep you signed in to the portal and protect forms from abuse; they cannot be switched off. Analytics cookies are only used if you choose "Accept all" in our cookie banner. You can change your mind at any time by clearing your browser storage for this site, and the banner will appear again.

Your rights

Under UK GDPR you can ask for a copy of your data, correction, deletion, restriction, portability, or object to processing, and withdraw consent where we rely on it. Email info@mylinealigners.co.uk and we will respond within one month. Patients should contact their own dental practice first, as the practice controls their record. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes

We may update this policy; the date at the top always shows the current version. See also our Terms & Conditions.