Stella Jackson Chiropractic is committed to safeguarding the privacy of our patients. This policy sets out how we will treat your personal information in accordance with the General Data Protection Regulation (“GDPR”) effective from 25 May 2018.

Who we are

We are Stella Jackson Chiropractic.

Our principal place of business is at 22 Doctor’s Acre, Hook, Hampshire, RG27 9UW. You can contact us by writing to us at this address or alternatively via:

Stella Jackson Chiropractic is registered with the Information Commissioners Office as a Data Controller for the purposes of processing your data. We collect personal and sensitive data as an essential part of the patient care process as required by the Chiropractors Act 1994 and our regulator, The General Chiropractic Council.

Data Protection Officer

Stella Jackson Chiropractic has decided that a Data Protection Officer is not required to be compliant with GDPR.

What data do we process and how?

We may process information contained in any enquiry you submit to us regarding services. The legal basis for this processing is consent.

We record and use the following categories of personal data in our patient files:

Our lawful basis of processing this data is one of contract and, for the provision of health-related services as a chiropractic clinic.

Appointment booking confirmations are sent by email and reminders are sent by text.

From time to time you may receive an email with regards to opening hours, special offers and policy changes. The legal basis for this processing is consent. We will ask for your consent to send you these messages and you have the right to withdraw your consent at any time.

We may process any of your personal data where necessary for the establishment, exercise or defence of legal claims, whether in-court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.

We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the protection of our business against risks.

In addition to the specific purposes for which we may process your personal data set out above, we may also process any of your personal data where it is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

Providing your personal data to others

Stella Jackson Chiropractic may from time to time provide your GP, insurance provider or healthcare professional with information about your care. You will be asked for your consent, however, we reserve the right to breach confidentiality should we consider there to be a legal obligation or vital interest to do so.

Your Rights: retaining and deleting your personal data

Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary.

We collect your name and email address in order to reply to your initial request. Your email and details will be deleted after 3 months of enquiry if you have not booked in as a new patient.

Whilst you are receiving treatment from our clinic we will continue to store and use your personal data. Once you have been discharged, we are required to retain your personal data for a minimum of 8 years.

If you believe any of the personal data we hold on you is inaccurate or incomplete, or you believe we should erase/stop using your data please contact stella.jackson@me.com. Any necessary corrections to your data will be made promptly.

You may request a copy of your data at any time.

Please make such a request in writing or by email to stella.jackson@me.com. Please provide the following information: your name, address, telephone number, email address and details of the information you require.

We will need to verify your identity so we may ask for a copy of your passport, driving license and/or recent utility bill.

The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.

Automated decision making and profiling

Stella Jackson Chiropractic does not use any system which uses automated decision making or profiling in respect of your personal data.

Data Breaches

Should your personal data that we control be lost, stolen or otherwise breached, where this constitutes a high risk to your rights and freedoms, we will contact you without delay. We will explain to you the nature of the breach and the steps we are taking to deal with it.

Should You Wish To Complain

If you consider that our processing of your personal information infringes data protection laws, please contact the Data Controller, given above, in the first instance in order to clarify any misunderstanding.

You can contact the ICO via their website: www.ico.org.uk should you wish to make a complaint about the way we are processing your personal data.

Social Media

Communications and actions through Social Media (such as Facebook) are subject to the Privacy Policies of those social media sites.

Stella Jackson Chiropractic cannot verify the security of data published via social media accounts. Please always use caution when posting or communicating via social media; personal and sensitive information should always be provided via an alternative means such as telephone or email.

Cookies

Google Analytics is a service provided provided by Google, Inc. (“Google”). Google Analytics uses cookies to help us analyze how users use our website. The information generated by these cookies (including your truncated IP address) is transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your, and other users’, use of our website, compiling reports for us on website activity and providing other services relating to website activity and internet usage. Please note that Google only receives your truncated IP address. This is sufficient for Google to identify (approximately) the country from which you are visiting our sites or accessing our players, but is not sufficient to identify you, or your computer or mobile device, individually.

Google maintain the document "How Google uses data when you use our partners' sites or apps" which provides more detailed information.

To opt-out of analysis by Google Analytics on our website, please visit http://tools.google.com/dlpage/gaoptout.

Amendments

Stella Jackson Chiropractic reserves the right to update this policy from time to time by publishing a new version on our Facebook page: https://n.facebook.com/StellaJacksonChiropractic.

To see the latest version of this policy please check this page.