Click HERE

For

Book Online

Patient Privacy Policy

This privacy notice gives a summary of how Spine Align Wellness collects and processes your personal data during and after your time as a patient under the General Data Protection regulations (GDPR) 2018. The data controller is the Chiropractor and sole trader of Spine Align Wellness. We collect the following data: Identity, Contact, Special category, Financial and Transaction Data. We use different methods of collecting data from and about you including through: direct interactions with yourself, third parties such as referrers, Insurance companies and Solicitors. We will use your personal data to register you as a new patient or to take steps to register you as a new patient and to comply with our obligations under our contract, namely to provide you with the necessary physical examination and treatment. We may use your personal data to collect and recover money owed to us and to uphold our legal and regulatory obligations. We may have to share your personal data with other parties such as professional healthcare practitioners, service providers, professional advisors, HM Revenue & Customs, regulators and other authorities based in the United Kingdom who require reporting of processing activities in certain circumstances and third parties to whom we may choose to sell, transfer or merge parts of our business or assets. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. All information provided will be treated as confidential and data will only be accessible to staff of the clinic only where it is necessary for them to undertake their duties. We will retain your personal data securely in either paper files or electronically for as long as you, the patient, remain a patient of the clinic, and thereafter for a period of eight years. You have the legal right to request access, correction or erasure of your personal data and information. You also have the right to object to processing, request the restriction of processing and request the transfer of your personal information to another party. You have the right to withdraw consent at any time. If you would like to exercise any of the above rights, please contact the Data Controller in writing. There will not be a fee for the above data rights.