Privacy Notice

Complete Health Clinic Limited (trading as Complete Health Clinic)

Last updated: May 2026

________________________________________

1. Introduction

Complete Health Clinic Limited (“we”, “us”, “our”), trading as Complete Health Clinic, is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and safeguard your personal data in accordance with:

• UK General Data Protection Regulation (UK GDPR)

• Data Protection Act 2018

• Privacy and Electronic Communications Regulations (PECR)

This policy applies to patients, website users, and anyone who interacts with our services.

Where data is used for audit or outcomes measurement (such as Chiropractic Outcomes), we ensure it is anonymised or pseudonymised wherever possible and handled in accordance with UK GDPR.

________________________________________

2. Data Controller

Complete Health Clinic Limited is the data controller of your personal data.

Registered Address:

27 Melbourne Terrace

Clevedon

BS21 6HQ

United Kingdom

Telephone: 01275 349006

General Enquiries: reception@completehealthclinic.com

Data Protection Lead: Chris Thorpe

Email: gdpr@completehealthclinic.com

We are registered with the Information Commissioner’s Office (ICO).

________________________________________

3. The Data We Collect

Personal Identification Data

• Full name

• Address

• Email address

• Phone number

Medical & Special Category Data

• Medical history

• Treatment records and clinical notes

• GP details

(This is classified as special category data and requires enhanced protection.)

Administrative Data

• Appointment history

• Booking details

• Communications with us

Technical & Website Data

• IP address

• Website usage data via cookies and analytics tools

CCTV Data

• Video recordings captured on-site (see Section 6)

________________________________________

4. How We Collect Your Data

We collect data through:

• Telephone bookings

• In-person registration

• Online booking via PracticeHub

• Website forms

• Email or phone communications

• Patient intake forms

• CCTV systems

________________________________________

5. How We Use Your Data (Legal Basis)

We only process your data where a lawful basis applies.

Where we rely on legitimate interests, we have carried out a Legitimate Interests Assessment (LIA).

________________________________________

Healthcare Provision

Legal basis:

• Article 6(1)(b) – Contract

• Article 9(2)(h) – Healthcare

Used to:

• Assess and treat patients

• Maintain clinical records

• Communicate about care

________________________________________

Administration

Legal basis:

• Contract

• Legal obligation

Includes:

• Appointments

• Record keeping

• Regulatory compliance

________________________________________

Chiropractic Outcomes

Legal basis:

• Legitimate interests

• Healthcare provision

We may use anonymised or pseudonymised data to:

• Monitor treatment effectiveness

• Improve patient outcomes

• Support clinical standards

Your right:

You can object to your data being used for this purpose at any time.

This will not affect your care.

________________________________________

Marketing

Legal basis:

• Consent

We will only send marketing if you have opted in.

You can withdraw consent at any time.

We retain records of consent.

________________________________________

Service Communications

Legal basis:

• Contract

• Legitimate interests

Includes appointment reminders and essential updates.

________________________________________

6. CCTV (Important Information)

We use CCTV to maintain a safe and secure environment.

Purpose

• Protect patients and staff

• Prevent and detect crime

• Investigate incidents

Locations

• External entrance and gate

• Car park

• Reception

• Internal corridors

CCTV is not used in treatment rooms or private areas.

Lawful Basis

Legitimate interests.

Retention

Footage is kept for 28 days, then automatically deleted unless required.

Access

Access is restricted to authorised personnel.

Footage may be shared with law enforcement where required.

Signage

Clear signage is displayed on-site.

Your Rights

You may request access to CCTV footage of yourself, subject to legal limitations.

________________________________________

7. How We Store and Protect Your Data

We use secure systems including:

• PracticeHub

• Microsoft Office 365

• WordPress

We ensure all providers operate under Data Processing Agreements.

Security measures include:

• Restricted access

• Password protection

• Staff confidentiality obligations

________________________________________

8. Data Sharing

We do not routinely share your data.

We may share when:

With your consent

• Your GP or healthcare providers

For audit and standards

• Pseudonymised data (e.g. Chiropractic Outcomes)

Legal requirement

• Where required by law or regulators

Service providers

We use trusted third parties (e.g. PracticeHub, Mailchimp, Meta, Google Analytics) who process data under strict safeguards.

________________________________________

9. International Transfers

Some services may process data outside the UK.

We ensure protection through:

• UK-approved Standard Contractual Clauses (SCCs)

• Adequacy regulations

________________________________________

10. Data Retention

• Adults: 7–8 years

• Children: until age 25

CCTV: 28 days

________________________________________

11. Cookies

We use:

• Essential cookies

• Analytics cookies

• Marketing cookies

Non-essential cookies are only used with your consent.

________________________________________

12. Your Rights

You have the right to:

• Access your data

• Correct inaccuracies

• Request deletion

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent

Contact: gdpr@completehealthclinic.com

________________________________________

13. Children’s Data

We treat patients under 18.

• Parental consent is obtained where required

• Children under 16 may consent where deemed Gillick competent

________________________________________

14. Data Breaches

If a breach occurs:

• We assess risk immediately

• Notify the ICO if required

• Inform affected individuals where necessary

________________________________________

15. Complaints

Contact us first with any concerns (see Section 2 above for details).

You may also contact:

Information Commissioner’s Office

www.ico.org.uk

0303 123 1113

________________________________________

16. Professional Regulation

Our practitioners are regulated by:

• General Chiropractic Council (GCC)

• Health and Care Professions Council (HCPC)

________________________________________

17. Changes

We may update this policy periodically.

The latest version will always be available on our website.