We are Chiro Health Ltd operating as Braintree Chiropractic and Back Pain Clinic, Stansted Chiropractic and Back Pain Clinic and Lexden Chiropractic and Back Pain Clinic as well as operating from Douglas Grove Surgery Witham. Our main office is Stansted Chiropractic Clinic, 20 Cambridge Road, Stansted, Essex CM24 8BZ. Telephone 01279  815336. Email info@greatback.co.uk. For the purposes of processing your personal data we are the controller.

 This notice is to explain why we collect your personal information and how we use it.

 We record and use the following categories of personal data:

• Name, address, telephone numbers, email address, date of birth, health information including medical history, diagnosis and treatment.  Our lawful basis of processing this data is one of Legal Obligation. We are bound by legal requirements to hold our patients medical data under the rules of the General Chiropractic Council and the Heath and Care Professions Council and without it we would be unable to do our job effectively or safely.
• For clients who only attend the clinics for massage then Chiro Health has a Legitimate Interest as we need personal data, medical history and the treatment given to be able to look after you effectively and safely.

 Whether you are a Chiropractic Patient, a Physiotherapy Patient or a Massage Client we will only examine or treat you with your explicit consent.

 We have a Legal Obligation to retain your records for 8 years after your last appointment or for 8 years after your 18^th birthday if you are a child, but after this period you can ask us to delete your records if you wish.  Otherwise, we will retain your records indefinitely in order that we can provide you with the best possible care should you need to see us at some future date.

 Your paper records are kept in staff controlled areas and in secured storage and electronic records are stored on central servers that are password protected and encrypted.

 We will never share your data with anyone who does not need access without your written consent.

 From time to time we may have to get our IT consultants to perform tasks which might give them access to your personal data but not your medical notes.  We ensure that they sign a confidentiality statement.

 We may remind you of upcoming appointments by text message, email or post if you have given us your details as part of our service.  If you do not wish to have this then please inform us.

 You have the right to see what personal data of yours we hold and you can also ask us to correct any factual errors.  Provide the legal minimum period has elapsed, you can also ask us to erase your records.

 We want you to be confident that we are treating your personal data responsibly, and that we are doing everything we can to ensure that the only people who can access your data have a genuine need to do so.

 If you feel that we are mishandling your personal data in some way, you have the right to complain.  Complaints need to be sent in writing to the Data Controller at the main office as detailed above.

If you are not satisfied with our response, then you have the right to raise the matter with the Information Commissioner’s Office.