Samuel MoultYour data
Privacy policy
Last updated: 20 October 2026
In short: this website sets no cookies and has no tracking or analytics. If you email or call me, I use your details to reply and to work with you, and nothing else. I never sell your data.
Who I am
This website belongs to Samuel Moult, a dental marketing consultant trading as a sole trader in the United Kingdom. I am the data controller for the personal information described in this policy.
Email: [email protected]
Phone: +44 7459 718467
What this policy covers
This policy explains how I handle personal information when you visit samuelmoult.com, get in touch with me, or work with me as a client. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The information I collect
When you visit this website
I don't use cookies, analytics, advertising pixels or tracking tools. The fonts and images are hosted on this website, so your browser doesn't contact Google or other third parties to load them.
My hosting provider, Cloudflare, keeps short-term technical logs (such as IP address, browser type and the pages requested) to keep the site secure and protect it from attacks. I don't use these logs to identify visitors.
The "Find practices like yours" tool runs entirely in your browser. Your answers are not sent or stored anywhere.
When you contact me
If you email or call me, I'll receive the details you choose to share, such as your name, role, practice name, location, phone number, email address and message. The email form on this website doesn't send anything itself. It opens your own email app with a message ready for you to send.
When you become a client
I keep business contact details for the people I work with, my agreements, invoices and the records of the work I do. I may also see practice information such as marketing performance, reviews and anonymous reports.
I don't need patient records to do my work, and I ask practices not to send me information that identifies patients. Where I do handle personal information on a practice's behalf, I act as a data processor under our agreement and only follow the practice's instructions.
If I contact you about my services
I sometimes get in touch with dental practices that might benefit from my services. To do this, I use business contact details from public sources, such as practice websites, Google listings, LinkedIn, Companies House and NHS and CQC directories. I keep the person's name, role, practice name, business email or phone number, and a note of any contact we've had.
I rely on legitimate interests for this. I only send unsolicited marketing emails to limited companies and other corporate bodies, as the Privacy and Electronic Communications Regulations allow. I contact sole traders and partnerships by phone or LinkedIn, or by email only once they've agreed to it.
You can object at any time. Reply "no thanks" or email [email protected] and I'll stop straight away and keep only a note not to contact you again.
How I use your information, and my lawful basis
| What I do | Lawful basis |
|---|---|
| Reply to your enquiry and arrange a conversation | Legitimate interests |
| Deliver the services we've agreed, and invoice for them | Contract |
| Keep financial and tax records | Legal obligation |
| Keep this website secure | Legitimate interests |
| Contact practices that might benefit from my services | Legitimate interests (and consent, where the law requires it for email) |
| Send occasional updates about my services, if you ask for them | Consent, which you can withdraw at any time |
Who I share your information with
I never sell your personal data. I only share it with:
- Service providers I use to run my business, such as Google Workspace (email and documents) and Cloudflare (website hosting)
- AI tools I use in my work, as described below
- Agencies and partners working on a client's marketing, only where that client has agreed
- My accountant and HM Revenue & Customs, where the law requires it
Some of these providers may store data outside the UK. Where they do, they use legal safeguards approved under UK data protection law, such as the International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework.
Use of AI tools
I use AI tools, such as Claude and ChatGPT, to help with drafting, research, analysis and design. Here's how I keep that safe:
- Only Claude is used on anything that contains patient or staff personal information, and that information is redacted where appropriate
- Other AI tools, such as ChatGPT, are only used on content with no personal information in it
- I keep the client information I share with them to the minimum needed for the task
- Everything an AI tool produces is checked and edited by me before it's used
- AI is never used to make decisions about you that have legal or similarly significant effects
- This website doesn't use AI chatbots, and it makes no automated decisions about visitors
More detail is in my terms of use. Clients can ask me not to use AI tools on their work at any time.
How long I keep your information
| Information | How long |
|---|---|
| Enquiries that don't lead to work | 2 years from our last contact |
| Client contracts, invoices and financial records | 6 years after the end of the tax year they relate to, as HMRC requires |
| Prospect details, if we don't go on to work together | 12 months from our last contact, or straight away if you ask (I keep a note not to contact you again) |
| Client working files | Up to 2 years after our work ends, unless the client asks me to delete them sooner |
| Website security logs | Kept by Cloudflare for a short period, in line with its own policy |
Keeping your data secure
I use password-protected accounts with two-factor authentication, encrypted connections (HTTPS) and reputable, secure service providers. Only I have access to client files unless a client agrees otherwise. If a data breach ever affects you, I'll tell you and report it to the Information Commissioner's Office (ICO) where required.
Your rights
Under UK data protection law, you have the right to:
- Be told how your information is used, which is what this policy is for
- Get a copy of the information I hold about you
- Have inaccurate information corrected
- Have your information deleted, unless I have to keep it by law
- Restrict or object to how I use it, including for marketing
- Receive your information in a portable format
- Withdraw your consent at any time, where I rely on it
To use any of these rights, email [email protected]. I'll normally respond within one month, free of charge.
Cookies
This website doesn't set any cookies or use similar tracking technology, so there's nothing to accept or decline. If that ever changes, I'll update this policy and ask for your consent before setting any non-essential cookies.
Complaints
If you're unhappy with how I've handled your information, please contact me first so I can put it right. You can also complain to the Information Commissioner's Office:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk
Changes to this policy
I may update this policy from time to time. The date at the top shows when it last changed.