Privacy Policy

                                                                                               Mayfair & Belgravia Chiropractic

 

This Privacy Policy explains in detail how Mayfair & Belgravia Chiropractic (“the clinic”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal information. It applies to all individuals who interact with the clinic in any capacity, including website visitors, prospective patients, current patients, former patients, and individuals making enquiries.

The clinic is committed to protecting personal data and respecting individual privacy. All personal information is handled in a lawful, fair, and transparent manner in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy should be read carefully, as it explains how personal data is managed in connection with chiropractic care, clinic operations, and use of the website.

Who We Are

 

Mayfair & Belgravia Chiropractic
Unit 4, 10 Portman Square
London, W1H 6AZ

For the purposes of UK data protection law, Mayfair & Belgravia Chiropractic acts as the Data Controller. This means the clinic determines how and why personal data is processed in relation to clinical care, communication, and operational activities.

Scope and Application of This Policy

 

This Privacy Policy applies to:

• Personal information provided directly to the clinic in person, by telephone, email, or online forms

• Information generated through clinical consultations, assessments, and treatment

• Administrative and operational data related to appointments and communication

• Technical data collected through use of the clinic’s website

This policy does not apply to third-party websites, platforms, or services that may be linked from our website. We encourage individuals to review the privacy policies of any third-party services they access independently.

Agreement to This Privacy Policy

 

By booking an appointment, attending the clinic, submitting personal information, communicating with us, or otherwise engaging with our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

Where required by law, explicit consent will be obtained prior to processing certain categories of personal data. In some cases, consent may be withdrawn; however, this may affect the clinic’s ability to provide care or services.

Types of Information We Collect

 

To provide safe, appropriate, and effective chiropractic care, the clinic may collect and process a range of personal information. This includes, but is not limited to, the following categories:

Personal Identification Information

 

• Full name

• Date of birth

• Postal address

• Email address

• Telephone number

Health and Medical Information

 

• Presenting symptoms and reasons for seeking care

• Relevant medical history and previous diagnoses

• Clinical assessment findings

• Treatment records and progress notes

• Correspondence relating to care and clinical decision-making

Health information is classified as special category data under UK GDPR and is handled with enhanced safeguards.

Administrative and Operational Information

 

• Appointment bookings and attendance records

• Cancellations, rescheduling, and no-show records

• Payment and invoicing information, where applicable

Communication Records

 

• Emails sent to or received from the clinic

• Telephone call records or summaries

• SMS appointment reminders and confirmations

Website and Technical Information

 

• IP address

• Browser type and device information

• Website usage data and cookies

Lawful Basis for Processing Personal Data

 

The clinic processes personal data only where there is a lawful basis to do so. These include:

Performance of a Contract

 

Processing is necessary to provide chiropractic care and related services requested by the individual.

Legal Obligation

 

Processing is required to comply with legal, regulatory, professional, and record-keeping obligations applicable to healthcare providers.

Legitimate Interests

 

Processing is necessary for the legitimate interests of the clinic, including administration, scheduling, communication, quality assurance, and service improvement, provided these interests do not override individual rights.

Provision of Healthcare

 

Processing of special category data is necessary for the assessment, diagnosis, treatment, and management of health conditions by a regulated healthcare professional.

How We Use Personal Information

 

Personal data is used strictly for purposes connected with the provision of chiropractic care and the operation of the clinic. These purposes include:

• Delivering safe, appropriate, and effective chiropractic assessment and treatment

• Maintaining accurate, complete, and compliant clinical records

• Communicating with individuals regarding appointments, care, or clinically relevant matters

• Sending appointment reminders and service-related notifications

• Managing clinic operations, compliance, audit, and professional obligations

• Improving clinic processes and service delivery

The clinic does not use personal data for unrelated purposes and does not engage in intrusive or excessive data processing.

Marketing and Communications

 

Service-related communications (such as appointment reminders or clinically relevant updates) form part of the care process and may be sent without additional consent.

The clinic does not send unsolicited marketing communications. Where optional communications are offered, individuals are provided with clear options to opt out at any time.

Sharing and Disclosure of Personal Information

 

The clinic does not sell, rent, or trade personal data.

Personal information may be shared only where necessary and appropriate, including with:

• Practice management and clinical record software providers

• IT, email, and SMS communication service providers

• Other regulated healthcare professionals, with explicit consent, where clinically appropriate

• Regulatory authorities, professional bodies, or legal entities where required by law

All third parties are required to process personal data securely and in accordance with UK data protection legislation.

Confidentiality and Professional Standards

 

All personal and clinical information is handled in accordance with professional confidentiality standards and regulatory requirements, including those set by the General Chiropractic Council (GCC).

Information is disclosed to third parties only where consent has been given or where there is a legal, regulatory, or safeguarding obligation to do so.

Data Storage and Security Measures

 

Personal data is stored securely using password-protected clinical systems and encrypted cloud-based platforms. Access is restricted to authorised clinic personnel who require access for legitimate purposes.

The clinic implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures are reviewed periodically to ensure ongoing effectiveness.

International Data Transfers

 

Where personal data is stored or processed outside the United Kingdom, appropriate safeguards are applied to ensure continued protection in line with UK GDPR requirements. This may include contractual safeguards or recognised adequacy mechanisms.

Data Retention

 

Clinical records are retained for a minimum of seven years from the date of the last appointment, in accordance with healthcare, regulatory, and legal requirements.

After the applicable retention period, data is securely deleted, anonymised, or otherwise disposed of in a manner that prevents unauthorised access or recovery.

Cookies and Website Usage

 

The clinic’s website uses cookies to support essential functionality and improve user experience. Cookies may collect limited technical information such as browsing behaviour, session duration, and device type.

Individuals can manage or disable cookies through their browser settings. Please note that disabling cookies may affect website functionality.

Individual Rights Under Data Protection Law

 

Under UK data protection law, individuals have the right to:

• Be informed about how personal data is collected and used

• Request access to the personal data held about them

• Request correction of inaccurate or incomplete information

• Request deletion of personal data where legally appropriate

• Object to or restrict certain types of data processing

• Withdraw consent where consent has been provided

Requests may be made by contacting the clinic using the details below. The clinic may need to verify identity before responding.

Complaints and Regulatory Oversight

 

If you have concerns about how personal data has been handled, you may raise these with the clinic directly.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority.

Changes to This Privacy Policy

 

This Privacy Policy may be updated periodically to reflect changes in legal requirements, regulatory guidance, clinic practices, or technological developments. The most current version will always be published on the clinic’s website.

Contact Information

 

For questions, requests, or concerns regarding personal data, or to request access to information held about you, please contact:

Email: info@mayfairbelgraviachiropractic.co.uk
Address: Unit 4, 10 Portman Square, London, W1H 6AZ