This website uses cookies to improve your experience. We assume you are ok with this, but you can opt-out if you wish. Read More
________________________________________
1. Introduction
Complete Health Clinic Limited (“we”, “us”, “our”), trading as Complete Health Clinic, is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and safeguard your personal data in accordance with:
• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)
This policy applies to patients, website users, and anyone who interacts with our services.
Where data is used for audit or outcomes measurement (such as Chiropractic Outcomes), we ensure it is anonymised or pseudonymised wherever possible and handled in accordance with UK GDPR.
________________________________________
2. Data Controller
Complete Health Clinic Limited is the data controller of your personal data.
Registered Address:
27 Melbourne Terrace
Clevedon
BS21 6HQ
United Kingdom
Telephone: 01275 349006
General Enquiries: reception@completehealthclinic.com
Data Protection Lead: Chris Thorpe
Email: gdpr@completehealthclinic.com
We are registered with the Information Commissioner’s Office (ICO).
________________________________________
3. The Data We Collect
Personal Identification Data
• Full name
• Address
• Email address
• Phone number
Medical & Special Category Data
• Medical history
• Treatment records and clinical notes
• GP details
(This is classified as special category data and requires enhanced protection.)
Administrative Data
• Appointment history
• Booking details
• Communications with us
Technical & Website Data
• IP address
• Website usage data via cookies and analytics tools
CCTV Data
• Video recordings captured on-site (see Section 6)
________________________________________
4. How We Collect Your Data
We collect data through:
• Telephone bookings
• In-person registration
• Online booking via PracticeHub
• Website forms
• Email or phone communications
• Patient intake forms
• CCTV systems
________________________________________
5. How We Use Your Data (Legal Basis)
We only process your data where a lawful basis applies.
Where we rely on legitimate interests, we have carried out a Legitimate Interests Assessment (LIA).
________________________________________
Healthcare Provision
Legal basis:
• Article 6(1)(b) – Contract
• Article 9(2)(h) – Healthcare
Used to:
• Assess and treat patients
• Maintain clinical records
• Communicate about care
________________________________________
Administration
Legal basis:
• Contract
• Legal obligation
Includes:
• Appointments
• Record keeping
• Regulatory compliance
________________________________________
Chiropractic Outcomes
Legal basis:
• Legitimate interests
• Healthcare provision
We may use anonymised or pseudonymised data to:
• Monitor treatment effectiveness
• Improve patient outcomes
• Support clinical standards
Your right:
You can object to your data being used for this purpose at any time.
This will not affect your care.
________________________________________
Marketing
Legal basis:
• Consent
We will only send marketing if you have opted in.
You can withdraw consent at any time.
We retain records of consent.
________________________________________
Service Communications
Legal basis:
• Contract
• Legitimate interests
Includes appointment reminders and essential updates.
________________________________________
6. CCTV (Important Information)
We use CCTV to maintain a safe and secure environment.
Purpose
• Protect patients and staff
• Prevent and detect crime
• Investigate incidents
Locations
• External entrance and gate
• Car park
• Reception
• Internal corridors
CCTV is not used in treatment rooms or private areas.
Lawful Basis
Legitimate interests.
Retention
Footage is kept for 28 days, then automatically deleted unless required.
Access
Access is restricted to authorised personnel.
Footage may be shared with law enforcement where required.
Signage
Clear signage is displayed on-site.
Your Rights
You may request access to CCTV footage of yourself, subject to legal limitations.
________________________________________
7. How We Store and Protect Your Data
We use secure systems including:
• PracticeHub
• Microsoft Office 365
• WordPress
We ensure all providers operate under Data Processing Agreements.
Security measures include:
• Restricted access
• Password protection
• Staff confidentiality obligations
________________________________________
8. Data Sharing
We do not routinely share your data.
We may share when:
With your consent
• Your GP or healthcare providers
For audit and standards
• Pseudonymised data (e.g. Chiropractic Outcomes)
Legal requirement
• Where required by law or regulators
Service providers
We use trusted third parties (e.g. PracticeHub, Mailchimp, Meta, Google Analytics) who process data under strict safeguards.
________________________________________
9. International Transfers
Some services may process data outside the UK.
We ensure protection through:
• UK-approved Standard Contractual Clauses (SCCs)
• Adequacy regulations
________________________________________
10. Data Retention
• Adults: 7–8 years
• Children: until age 25
CCTV: 28 days
________________________________________
11. Cookies
We use:
• Essential cookies
• Analytics cookies
• Marketing cookies
Non-essential cookies are only used with your consent.
________________________________________
12. Your Rights
You have the right to:
• Access your data
• Correct inaccuracies
• Request deletion
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent
Contact: gdpr@completehealthclinic.com
________________________________________
13. Children’s Data
We treat patients under 18.
• Parental consent is obtained where required
• Children under 16 may consent where deemed Gillick competent
________________________________________
14. Data Breaches
If a breach occurs:
• We assess risk immediately
• Notify the ICO if required
• Inform affected individuals where necessary
________________________________________
15. Complaints
Contact us first with any concerns (see Section 2 above for details).
You may also contact:
Information Commissioner’s Office
www.ico.org.uk
0303 123 1113
________________________________________
16. Professional Regulation
Our practitioners are regulated by:
• General Chiropractic Council (GCC)
• Health and Care Professions Council (HCPC)
________________________________________
17. Changes
We may update this policy periodically.
The latest version will always be available on our website.
This website uses cookies to improve your experience. We assume you are ok with this, but you can opt-out if you wish. Read More
Preferences