Privacy Policy
Data Controller
TheSpineandSoulltd
Collected Personal Data
Name, email address, phone number, date of birth, medical history, details of symptoms and conditions, treatment notes, payment information, and appointment records.
Purpose of collecting data
To provide chiropractic treatment and clinical care, to book and manage patient appointments, to send appointment reminders and follow-up communications, to process payments, and to maintain accurate clinical records as required by GCC regulations.
YOUR DATA
Data Retention 8 years from date of last treatment
Third Parties We Share Data With Calendly for appointment booking, Meta Platforms for advertising purposes. No patient data is ever sold to third parties.
Legal Basis for Processing Provision of healthcare services and legitimate interest
How We Protect Your Data All patient records are stored securely and accessed only by treating practitioners
Your Rights You have the right to access, amend or request deletion of your personal data at any time by contacting us at [your email]