Privacy Policy

This policy explains how ADAP collects and uses personal information on adap.org.uk, written for UK GDPR.

Last updated: 18 October 2026

1. Who we are

The Association of Dentists in Aesthetic Practice ("ADAP", "we", "us") is the data controller for personal information collected through this website. Our details are:

Legal name and registered address: ADAP UK LIMITED - 19 Highfield Road, Edgbaston, Birmingham, England, B15 3BH
Contact for privacy matters: admin@adap.org.uk

This policy applies to visitors to adap.org.uk, people who apply to join ADAP, and members who use the Members Area.

2. Information we collect

We collect only what we need to run the website, assess applications and manage membership.

Documents such as qualification certificates can contain personal details. We ask applicants to upload only what we have requested. We do not ask for photo ID, health information or other special category data.

Payment card details are handled by our payment provider and are not stored by ADAP.

3. How we use information and why

UK data protection law requires us to have a lawful basis for each use.

We do not use your information for automated decision-making that has legal or similarly significant effects.

4. Who we share it whith

We do not sell personal information. We share it only with the people and services needed to run ADAP:

Membership team and authorised ADAP staff and committee members, to review applications and manage membership.
Wix, which hosts the website and stores forms, accounts, uploaded documents and membership data. Wix also sends our automatic emails and provides the cookie banner (through Usercentrics).
Stripe, which processes membership and joining-fee payments.
Microsoft 365, which we use for ADAP email. ADAP also uses Microsoft Word and Excel to manage applicant and member information.
External printing companies, which print welcome packs and their contents. These do not contain members' personal details. Any documents containing personal information are printed in-house by the Membership Officer.
Our website developer, who has access to the site to maintain it.
postcodes.io, a free UK postcode lookup service. When you search Find a Member, the postcode you type is sent to it to work out distances. A member's postcode is also sent to it when their directory entry is saved. No other personal information is sent.
OpenStreetMap and unpkg, which show the map on Find a Member. Your browser contacts them to load the map, so they can see your IP address and the area you are viewing.
Instagram (Meta), which provides the Instagram feed shown on the News & Events page.
Members of the public, only for details you have agreed to show in the Find a Member directory. The directory lists your name, specialty, business address, email address and telephone number. Members are clearly told before their directory details are published.
Regulators, accreditation bodies, examination providers, event organisers and other authorised partners, where this is needed for ADAP's work. Relevant regulators, accreditation bodies and partners who may receive member data include the General Dental Council (GDC), Joint Council for Cosmetic Practitioners (JCCP), British College of Aesthetic Medicine (BCAM), Save Face, British Dental Association (BDA), IAAFA, ACE, CMAC, Information Commissioner's Office (ICO) and the Department of Health and Social Care (DHSC), where applicable. This sharing is kept transparent and has a lawful basis.
Authorities, where the law requires it.

These providers act on our instructions or under their own data protection terms.

5. How long we keep it, and how we protect it

Retention. We keep information only as long as we need it.

Security. Documents are stored in our website platform's secure data store and are visible only to the applicant who uploaded them and to authorised ADAP reviewers. Access is by account login. No online system is completely secure, so we also limit who at ADAP has access.

International transfers. Some of our providers, including Wix and Stripe, may process data outside the UK. Where they do, they rely on safeguards recognised under UK data protection law. Wix transfers data to its parent company in Israel, which the UK recognises as providing adequate protection, and uses standard contractual clauses or similar approved safeguards for any other transfers. Stripe relies on the UK Extension to the EU-U.S. Data Privacy Framework and the UK International Data Transfer Addendum.

6. Your rights, cookies and contact

Your rights. Under UK GDPR you can ask us to:

give you a copy of the personal information we hold about you
correct information that is wrong or incomplete
delete your information, where we have no reason to keep it
restrict or object to how we use it
move your information to another provider, where this applies
withdraw consent at any time, where we rely on consent

To use any of these rights, email admin@adap.org.uk. We aim to reply within one month.

Complaints. If you are unhappy with how we handle your information, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies. The website uses cookies that are needed for it to work, such as keeping you logged in and keeping the site secure. These are always on. When you first visit, a cookie banner lets you accept or deny Functional, Analytical and Marketing cookies, or choose by category. These are only used if you accept them. You can change your choice at any time through the cookie settings. ADAP does not run its own analytics or marketing tools. The Instagram feed on the News & Events page is provided by Instagram (Meta), which sets its own cookies and collects information such as your IP address when the feed loads. These cookies are set by Meta, not by ADAP, and are covered by Meta's own cookie policy.

Changes. We may update this policy. The date of the latest version will appear at the top of this page.

Contact. admin@adap.org.uk