Caterham Chiropractic Clinic Privacy Policy

Caterham Chiropractic Clinic values your privacy and is committed to protecting your personal data. This policy outlines how we collect, use, store, and share your information in compliance with the UK General Data Protection Regulation (UK GDPR) and applicable cookie regulations.

 

Who We Are

Caterham Chiropractic Clinic (“we”, “our”, “us”) is dedicated to providing chiropractic care while safeguarding the personal data of our customers, staff, and website visitors. 

 

What Information We Collect

We may collect and process the following types of personal data: 

  • Name, address, and contact details (phone number, email address). 
  • Sensitive health and medical information required for chiropractic services. 

 

How We Use Your Data

We use your data for purposes including: 

  • Providing chiropractic services and updates regarding the clinic. 
  • Managing appointments and communication. 
  • Enhancing website functionality and user experience. 
  • Ensuring compliance with legal and regulatory obligations. 
  • We may send you emails with relevant health-related information. 

Caterham Chiropractic Clinic adopts a ‘soft opt-in’ approach, which allows us to send marketing emails or texts using customer data collected when a customer shows interest in or uses our services. This applies only if you have visited our website or used our services. 

 

How We Share Your Data

We may share your data with: 

  • Authorised third-party service providers (e.g., payment processors, customer relationship managers, medical practice management software). 
  • Regulatory authorities, if legally required. 

We ensure that all third parties comply with UK GDPR requirements and have their own privacy policies in place.


Data Storage and Retention

Chiropractors in the UK are legally required to retain patient records for eight years from the last visit or, if the patient is a child, until their 25th birthday (or 26th if they were 17 at the end of treatment). 

At Caterham Chiropractic Clinic, we securely store your data in compliance with UK GDPR regulations. Your information is kept electronically on our digital record-keeping platform, Practice Hub, which adheres to strict data protection standards. Data may also be stored on a password-protected computer or in physical form within a locked filing cabinet on our premises, ensuring its safety at all times. 


External Links

Our website may include links to external websites that might interest you. As part of your care, we may also send you links to other websites, such as exercise rehabilitation videos on YouTube. Please note, once you click these links and leave our website, we have no control over the content or practices of these external websites. We cannot be held responsible for the security or privacy of any information shared on these sites, as they are not covered by our privacy policy. We recommend reviewing the privacy policies of the websites you visit and exercising caution when sharing your personal data. 


Marketing and Social Media

We use advertising platforms such as social media sites for communication and engagement. These sites are subjective to their respective terms, conditions, and privacy policies. Users should exercise caution and protect their privacy when interacting on these platforms, as neither this website nor its owners will request personal or sensitive information via social media.

Caterham Chiropractic Clinic may use testimonials, including the name of the author, for promotional purposes. Comments made publicly, such as on social media or Google Reviews, may be copied, screenshot, and shared. Testimonials can be featured on our website, social media, marketing materials, and with employees or service users. Where consent isn’t provided, anonymised testimonials or those without identifiable data may be used. Caterham Chiropractic Clinic reserves the right to publish unedited comments, testimonials, or posts from social media platforms.

Caterham Chiropractic Clinic operates an email marketing program to inform visitors about our products and services. Users may subscribe through an automated process or via prior written agreement. Subscriptions comply with UK Spam Laws, GDPR, and the Privacy and Electronic Communications Regulations 2003. Our email campaigns may include tracking features to refine future content based on user activity. Subscribers can opt out at any time using the automated unsubscribe option detailed in each email. If unavailable, clear instructions for unsubscribing will be provided. We are committed to ensuring compliance and transparency in all email communications.


Your Rights

Under UK GDPR, you have the following rights: 

  • Right to access your data. 
  • Right to rectify inaccurate data. 
  • Right to erasure (right to be forgotten). 
  • Right to restrict processing. 
  • Right to data portability. 
  • Right to object to processing. 

You may exercise these rights by contacting us directly using the details provided in the “Contact Us” section below. 


Cookies Policy  

We use cookies on our website to enhance user experience and analyse website traffic. When you visit our website, you will be prompted to accept or manage cookie preferences. You can modify your cookie settings at any time through your browser. 

Cookies enable web applications to interact with you personally, allowing them to adapt their functionality based on your preferences and behaviours. A cookie is a small file that seeks your consent to be stored on your computer’s hard drive. Once approved, the file helps analyse web traffic or notifies you when visiting specific websites.


Changes to This Policy

We may update this policy periodically to reflect legal changes or improve clarity. The latest version will always be available on our website.  Last updated March 2025.


Confidentiality

We are bound by the General Chiropractic Council’s regulations regarding the sharing of your information with other medical or relevant health professionals. We require your written consent before sharing records, notes, x-rays, or personal information. Detailed explanations of these protocols are available upon request.


Contact Us

If you have questions about this privacy policy or wish to exercise your rights, please contact the data controller: