Privacy notice
Last updated: 2 November 2026
Endo by Mo is a referral-based, non-surgical endodontic service provided by Dr Mohamad Almallah DMD (Hons), GDC 310921, at Poynton House Dental Surgery, 40 Shropshire Street, Market Drayton, TF9 3DD.
This notice explains how information relating to this website and enquiries may be handled. Arrangements for a future secure clinical referral portal are described separately below and are not yet operational.
Who to contact
For privacy questions or requests concerning Endo by Mo, contact dr.mosaal@gmail.com.
ICO registration number: Pending — to be added following registration.
Data-controller arrangements: The respective responsibilities of Dr Almallah and Poynton House Dental Surgery for referral information and clinical records are being confirmed. This notice will be updated once those arrangements have been documented. Using the practice's records system does not, by itself, determine controller status.
Information collected through this website
This is currently an informational website. The referral form, where displayed, is a demonstration only and must not be used to submit identifiable patient details, radiographs or medical information. A secure clinical referral submission service is not yet available.
If you contact Dr Almallah by email, the information you choose to provide (such as your name, contact details and message) may be used to respond to your enquiry. Please do not send identifiable patient information, clinical records or radiographs by ordinary email.
Why information may be used
Professional contact enquiries may be handled to respond to requests and administer the referral service. Depending on the circumstances, the lawful basis may be legitimate interests or steps taken at your request before entering into an arrangement. Any future processing of patient health information will require an appropriate UK GDPR Article 6 lawful basis and Article 9 condition, as well as relevant confidentiality safeguards, before the secure portal is activated.
Clinical referrals and practice records — planned workflow
Once a secure referral service is launched, referring dentists are expected to submit referrals for initial review by Dr Almallah. Where a patient proceeds to treatment, relevant information will be entered into Poynton House Dental Surgery's clinical records system. The final controller/processor roles, data-sharing terms, access controls, hosting, security, retention and patient-information arrangements must be confirmed before this workflow goes live.
Clinical records held within Poynton House's system will also be subject to the practice's applicable privacy information and record-management procedures.
Website technology and cookies
The website is hosted using Cloudflare infrastructure. Technical information, such as IP addresses and request metadata, may be processed to deliver and protect the website. The site's use of analytics, cookies and any additional third-party services must be checked against the live deployment; this notice will be updated if non-essential cookies or other services are introduced. Where required, consent will be obtained before setting non-essential cookies.
Sharing and international processing
Information may be handled by relevant service providers where necessary for website operation or professional correspondence. Any applicable international transfers and contractual safeguards must be verified against the services actually used before publishing a finalised notice.
How long information is kept
Professional enquiry messages should be retained only for as long as necessary for the purpose of the enquiry and any applicable legal or professional obligations. Specific retention periods for website enquiries and any future referral records will be documented once the operational arrangements are finalised. Clinical records follow the applicable practice record-retention policies and legal requirements.
Your information rights
Depending on the circumstances, you may have rights to access, rectify or erase personal data, restrict or object to processing, and request data portability. Some rights are subject to exemptions, particularly for clinical records. To make a request, contact dr.mosaal@gmail.com. You can also raise concerns with the Information Commissioner's Office (ICO).
Updates to this notice
This notice will be reviewed and updated before the secure referral portal begins collecting patient information, after ICO registration is confirmed, and whenever material changes occur in the website's data processing.
Important: This is an interim website privacy notice. It does not replace the final data-protection review or the documented arrangements required before handling patient referrals online.