Effective date: 3 November 2026
Calderfield Limited, trading as Linda AI ("we", "our", "us"), is the controller of the personal data described in this policy, except where section 4 says otherwise.
This policy applies to:
| Who | Data | Purpose | Lawful basis |
|---|---|---|---|
| Website visitors | Pages visited, time on site, device type, IP address | Understand and improve website performance | Consent (analytics cookies) |
| People who contact us | Name, email, phone, organisation, message content | Respond to enquiries and provide support | Legitimate interests (responding to you) |
| Prospective clients | Name, role, practice name, business contact details | Contact you about our services | Legitimate interests (promoting our business); you can object at any time |
| Current clients | Contact details, account and billing details, platform usage | Provide the service, manage the contract, invoice | Contract |
| Platform users (practice staff) | Name, work email, login and activity data | Provide access to the platform and keep it secure | Contract |
| All of the above | Any of the data above | Comply with legal obligations, resolve disputes, enforce agreements | Legal obligation; legitimate interests |
Where we hold business contact details that you did not give us directly, they came from your practice, from publicly available sources (such as your practice website or professional profile) or from a business data provider.
You are not required by law or contract to provide us with personal data. If you do not, we may not be able to respond to you or provide the service.
We only send marketing to people who have opted in or where we have a legitimate interest in contacting a business. Every marketing message includes a way to unsubscribe.
When a dental practice uses Linda to answer calls, send messages, book appointments, send recalls and confirmations, or take deposits, the practice is the controller of its patients' data and we are its processor. We process that data only on the practice's instructions and under a written data processing agreement.