Privacy policy
UK GDPR compliant
Last updated: January 2025
Your privacy is important to us at Wantage Chiropractic & Physiotherapy Clinic. This policy explains how we collect, use, and protect your personal information in accordance with UK data protection laws.
Information we collect
- Personal identification information (name, email, phone number, address)
- Medical history and health information relevant to your treatment
- Appointment and treatment records
- Payment and billing information
- Communications with our clinic
- Website usage data and cookies (see our cookie policy)
How we use your information
- Provide and manage your healthcare services and treatments
- Schedule appointments and send appointment reminders
- Process payments and maintain billing records
- Communicate with you about your care and our services
- Comply with legal and regulatory requirements
- Improve our services and patient care quality
- Send relevant health information and clinic updates (with consent)
Information security & protection
- We implement appropriate technical and organisational security measures
- All health records are maintained in accordance with NHS guidelines
- Compliance with the Data Protection Act 2018 and UK GDPR
- Regular security audits and staff training on data protection
- Secure, encrypted storage of all digital patient records
- Limited access to patient information on a need-to-know basis
Your rights under UK GDPR
- Right to access your personal information
- Right to request corrections to your information
- Right to request deletion of your information (subject to legal requirements)
- Right to object to processing of your information
- Right to request data portability
- Right to withdraw consent where processing is based on consent
- Right to lodge a complaint with the Information Commissioner's Office (ICO)