This Privacy Policy is intended for the UK operation of Nala Chiropractic and should be read alongside any specific notices provided to patients at the point of collecting personal data.
1. Who We Are
Nala Chiropractic ("Nala Chiropractic", "we", "us", or "our") is a chiropractic healthcare practice operating in the United Kingdom. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, request an appointment, or receive services from us.
Our processing of personal data is intended to comply with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Personal Data We May Collect
Depending on how you interact with us, we may collect:
- Identity information such as your name and date of birth where relevant to your care.
- Contact information such as your email address, telephone number, and address.
- Appointment and booking information, including appointment history and communications relating to appointments.
- Health information, including information about symptoms, medical history, injuries, conditions, treatment, and other information relevant to your care.
- Payment and transaction information where you purchase services from us.
- Information you provide when contacting us by email, telephone, website forms, social media, or other communication channels.
- Technical information about your use of our website, such as IP address, browser type, device information, and website activity, where collected through appropriate technologies.
3. Health and Special Category Data
Health information is special category data under UK GDPR. Where we process health information as part of providing chiropractic care, we do so on an appropriate lawful basis and under an applicable condition for processing special category data.
Health information is treated as confidential and is used primarily for assessing, providing, managing, and documenting your care, maintaining appropriate clinical records, communicating with you about your care, and meeting applicable professional, legal, regulatory, and insurance requirements.
4. How We Use Personal Data
We may use personal data to:
- Respond to enquiries and requests.
- Arrange, manage, and administer appointments.
- Provide chiropractic and related healthcare services.
- Assess and manage your care and maintain appropriate clinical records.
- Communicate with you about appointments, treatment, services, and administrative matters.
- Process payments and manage accounts where applicable.
- Maintain the security and operation of our website and systems.
- Improve our services and patient experience.
- Meet legal, professional, regulatory, insurance, and accounting obligations.
- Handle complaints, disputes, claims, and potential legal proceedings.
5. Lawful Bases for Processing
Depending on the circumstances, we may process personal data because it is necessary to perform a contract or take steps at your request before entering into a contract, to comply with a legal obligation, for our legitimate interests, or because you have provided consent.
For health and other special category data, we will rely on an appropriate additional condition under UK GDPR and applicable law. The specific lawful basis may depend on the nature and purpose of the processing.
6. Information Collected Through Our Website
If you submit an enquiry, contact form, or appointment request, we may use the information you provide to respond to you and manage your request. Submitting a form does not necessarily mean that an appointment has been confirmed.
We recommend that you do not include unnecessary sensitive medical information in general website contact forms or ordinary email messages. Where detailed health information is required, we may provide a more appropriate method for collecting it.
7. Sharing Personal Data
We do not sell or rent your personal data. We may share personal data where reasonably necessary with:
- Healthcare or professional providers involved in your care, where appropriate and lawful.
- Service providers who support our website, IT, hosting, booking, payment, communications, or administrative operations.
- Professional advisers, insurers, or legal representatives where reasonably necessary.
- Regulators, public authorities, law enforcement agencies, or other bodies where required or permitted by law.
Where third parties process personal data on our behalf, we expect appropriate contractual, confidentiality, and security arrangements to be in place.
8. International Data Transfers
Some technology and service providers may process personal data outside the United Kingdom. Where personal data is transferred internationally, we will take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place as required by applicable UK data protection law.
9. Cookies and Similar Technologies
Our website may use cookies and similar technologies to provide essential functionality, understand website usage, improve performance, and support other website features.
Where consent is legally required for non-essential cookies or similar technologies, we will seek consent before using them. You can also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.
10. Marketing Communications
Where we send marketing communications, we will do so in accordance with applicable UK privacy and electronic marketing laws. Where consent is required, we will obtain it before sending marketing communications.
You can opt out of marketing communications at any time by using the unsubscribe option provided or by contacting us.
11. Data Security
We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, misuse, alteration, or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
12. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, professional, regulatory, insurance, accounting, and record-keeping requirements.
The appropriate retention period may vary depending on the type of information and the circumstances. Clinical and patient records may be retained for longer periods than ordinary website enquiries where required by applicable professional or legal requirements.
13. Your Data Protection Rights
Subject to applicable legal conditions and exemptions, you may have the right to:
- Request access to personal data we hold about you.
- Request correction of inaccurate or incomplete personal data.
- Request erasure of personal data in certain circumstances.
- Request restriction of processing in certain circumstances.
- Object to certain processing, including processing based on legitimate interests.
- Request data portability where the relevant legal conditions apply.
- Withdraw consent where processing is based on consent.
These rights are not absolute and may be subject to legal exemptions, particularly where information must be retained for healthcare, legal, regulatory, or professional purposes.
14. How to Exercise Your Rights
To exercise your data protection rights or ask questions about our use of your personal data, please contact Nala Chiropractic using the contact details published on our main website.
We may need to verify your identity before responding to certain requests. We will respond within the timeframe required by applicable data protection law.
15. Complaints About Data Protection
If you have concerns about how we handle your personal data, please contact us first so that we can investigate and attempt to resolve your concern.
You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe that your personal data has been handled unlawfully. Information about the ICO and how to make a complaint is available through the ICO's official website.
16. Third-Party Websites
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, security, or content of external websites. We encourage you to review the privacy policies of third-party websites before providing personal information.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or data processing practices. The updated version will be published on this page with a revised date.
18. Contact Us
If you have questions about this Privacy Policy or wish to make a data protection request, please contact Nala Chiropractic using the contact details available on our main website.