Everybody Chiropractic – Website Privacy Policy

Last updated: 01/08/2025

​

By booking an appointment (online, by phone, or in-person), you agree to the clinic's privacy policy.

​

Everybody Chiropractic (“we”, “us”, or “our”) is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, make an enquiry, or book an appointment.

Our website: www.everybodychiropractic.co.uk
Clinic address: Unit 1 Kingfishers Court, Northfield Farm Lane, Witney, OX28 1UE
Data Controller: Everybody Chiropractic Ltd

If you have any questions about this policy, you can contact us at:
📧 info@everybodychiropractic.co.uk
📞 01993 875 754

​

1. What Information We Collect

We may collect the following information when you use our website or interact with the clinic:

​

1.1 Information You Provide Directly

• Name

• Contact details (email, telephone number)

• Appointment information

• Enquiry form submissions

• Health information when voluntarily provided (e.g., through consultation or intake forms)

1.2 Automatically Collected Information

When you visit our website, we may collect:

• IP address

• Browser type and version

• Pages visited and time spent

• Device information

• Cookies and tracking data (see Section 8)

​​

1.3 Payment Information

Payments made through online booking systems may collect card details via secure third-party payment processors.
We do not store or have access to your full payment card details.

​

2. How We Use Your Information

We use your data to:

• Process enquiries and appointment bookings

• Provide chiropractic, massage, physiotherapy, or wellness services

• Communicate important updates about your care or appointments

• Improve our website and user experience

• Maintain clinical and administrative records

• Comply with legal, regulatory, and insurance requirements

• We never sell or share your personal data with third parties for marketing purposes.

​

3. AI-Assisted Processing (Clinical Support Tools)

To enhance clinical accuracy and efficiency, we may use AI-assisted tools for:

• Diagnostic support

• Producing clinical summaries or consultation documentation

• Analysing anonymised patient intake data to improve care quality

 

AI Privacy Measures

When AI tools are used:

• All identifying details are removed

• The data is fully anonymised in line with UK GDPR requirements

• Only the minimum necessary information is processed

• AI tools never replace clinical judgement

• No identifiable patient data is shared with third-party systems

 

4. Legal Basis for Processing (UK GDPR)

We process personal data under the following lawful bases:

• Consent – e.g., when you submit a form or opt in to emails

• Contract – to provide treatment and manage your appointments

• Legal obligation – maintaining clinical records as required by the GCC

• Vital interests – in rare cases where essential for your safety

• Legitimate interest – improving clinic operations and website experience

• Special Category Data (health information) – processed under the lawful basis of provision of healthcare by regulated professionals

 

5. How We Store & Protect Your Data

We take data security extremely seriously.

Your information is stored securely through one or more of the following:

• Encrypted clinical software

• Secure email servers

• Password-protected systems

• Restricted staff access

• Secure UK or EEA-based data centres

• Encrypted backups

We ensure all staff accessing your data are trained in confidentiality and GDPR compliance.

 

6. Sharing Your Information

We only share your data when necessary, such as:

• With clinical software providers

• With payment processors

• With other healthcare professionals when you give explicit consent

• If required by law (e.g., safeguarding, court orders)

We never sell your data or share it for third-party marketing.

 

7. How Long We Keep Your Data

We retain patient data in line with GCC and HMRC requirements:

• Chiropractic clinical records: 8 years after last visit

• Children’s records: until age 25 or 26 if seen at age 17

• General enquiries via website: up to 12 months

• Marketing preferences: until you opt out

After these periods, data is securely deleted or anonymised.

 

8. Cookies & Website Tracking

Our website may use cookies to:

• Improve site functionality

• Personalise user experience

• Analyse website performance

• Support booking system integration

You can manage or disable cookies through your browser settings.

We may use tools such as:

• Google Analytics

• Meta Pixel (Facebook)

• Booking platform cookies

These tools collect anonymous or pseudonymised data only.

 

9. Your Rights Under UK GDPR

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion (“right to be forgotten”) where appropriate

• Restrict or object to certain processing

• Request data portability

• Withdraw consent at any time

• Make a complaint to the ICO (Information Commissioner’s Office)

To exercise any of these rights, email: info@everybodychiropractic.co.uk

 

10. Third-Party Links

Our website may contain links to external websites.
We are not responsible for the content or privacy practices of these external sites.

 

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
The latest version will always be available on our website.

​​​