Privacy Policy
Privacy
This privacy notice applies between you, the user of our services and DF Chiro Ltd who are the owner and provider of those services.
We take the privacy of your information very seriously and by using our services you are accepting and consenting to our processing and use of your data as contained within this privacy notice.
Please read the following policy carefully to understand our views and practices regarding your personal data and how we will treat it.
Definitions and interpretation
In this privacy notice, the following definitions are used:
Data: collectively all information that you submit to DF Chiro Ltd via our Website, or through our personal data, medical history and consent to treatment forms. This definition incorporates, where applicable, the definitions provided in the Data Protection Act 1998 and the General Data Protection Regulations;
DFChiro Ltd: a company incorporated in England whose registered office is 25a Gilesgate, Durham, DH1 1QW and trades under the name of Durham Family Chiropractic
User or you: any third party that accesses the services and is not either employed by DF Chiro Ltd and acting in the course of their employment or engaged as a consultant providing services to DF Chiro Ltd and accessing the provision of such services.
Website: the website www.durhamchiropractic.co.uk and any sub-domains of this site unless expressly excluded by their own terms and conditions.
Scope of this privacy notice
This privacy notice applies only to the actions of DFChiro Ltd and Users with respect to the services provided by us. It does not extend to any other services or websites that can be accessed from this website including, but not limited to, any links we may provide to social media websites.
What data we collect
In general terms, we may collect the following data, which may include personal data, from you:
- Name
- Contact Information such as
- email addresses
- postal addresses
- telephone numbers
- date of birth
- employment details
- next of kin contact
- GP and surgery
- private health care
- Medical History and information
In terms of our website, we may collect the following:
- IP address
- geographical location
- browser type and version
- operating system & referral source
- length of visit
- page views & website navigation paths
- And any other information about the timing, frequency and pattern of your service use
Our privacy notice applies to all the above. Any or all of the above data may be required by us from time to time in order to provide you with good and services.
How do we collect your data
We collect your data through our website contact forms, newsletter sign up form which is on our website, email communication, direct telephonic communication and in person on our initial consultation or spinal assessment forms.
How we use your data
We, Df Chiro Ltd are the “data controller” as defined by data protection regulations.
We will use your data for the following reasons:
- to provide health services to you
- for internal record keeping;
- for direct billing
- for referral letters
- transfer of records
- for private health insurance records
- for analysing and improving your treatment;
- for transmission by email, text message and social media of promotional materials that may be of interest to you;
- for contact reminders regarding your appointments and treatment plan
- where we have a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute).
in each case, this will be in accordance with this privacy notice.
How we store your data
We secure the original paper copy of your individual records on our premises, 25a Gilesgate, DH1 1QW. Your personal details are entered onto our processing system, Atlas. It is a legal requirement that we hold your records for eight years after your last appointment. After eight years your data will be removed from our system and your paper records will be shredded. All email and website contact correspondence are deleted annually from our system.
Our Legal basis for processing your data
We are required to advise you of our legal basis for processing your data. DF Chiro Ltd collects and uses customers’ personal data because is it necessary for:
- the purposes of clear consent to process your personal data and for us to provide you with treatment
- the purposes of performance of a contract for services of health care treatment (to which you are party) or in order to take steps at your request prior to entering into a contract
- the pursuit of our legitimate interests (a treatment or product that you have used in the past)
- to comply with our legal obligations.
We may also seek your consent for processing and if we do, you have the right to withdraw this at any time. However, we only rely on consent as a legal basis for processing in relation to sending direct marketing communications to customers via email, text message or by social media.
Retention Policy
We will not retain your data for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of data. Data retention periods maybe legally imposed upon us or we may need to retain data to protect the vital interests of you or another natural person. However the longest we will normally hold any personal data is eight years after your last treatment, at which time it will be deleted from our systems
Providing your personal data to others
In order to make certain services available to you, we may need to share your personal data with some of our service partners. These include IT, Atlas Chiropractic System, marketing (with your consent), professional health care service providers, or document destruction services
DF Chiro Ltd only allows its service partners to handle your personal data when we have confirmed that they apply appropriate data protection and security controls. We may also impose contractual obligations on service providers relating to data protection and security, which mean they can only use your data to provide services to DF Chiro Ltd and to you, and for no other purposes.
All financial transactions relating to our services on the website are handled by our payment services providers, Paypal. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. You can find information about the payment services providers’ privacy policies and practices at:
Your data will be encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). All payment service providers adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council. PCI-DSS requirements help ensure the secure handling of credit card information by our store and it’s service providers.
We may also disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure
DF Chiro Ltd will not disclose your personal data to any third party, except as set out above We will never sell or rent our customer data to other organisations for marketing purposes.
Cookies
Our websites use cookies to collect information. This includes information about browsing and purchasing behaviour by people who access our websites. This includes information about pages viewed, products purchased and the customer journey around our websites.
What are cookies?
Like most websites, our website uses cookies to collect information. Cookies are small data files which are placed on your computer or other devices (such as smart ‘phones or ‘tablets’) as you browse this website. They are used to ‘remember’ when your computer or device accesses our websites. Cookies are essential for the effective operation of our websites and to help you shop with us online. They are also used to tailor the products and services offered and advertised to you, both on our websites and elsewhere.
Information collected
Some cookies collect information about browsing and purchasing behaviour when you access this website via the same computer or device. This includes information about pages viewed, products purchased and your journey around a website. We do not use cookies to collect or record information on your name, address or other contact details. DF Chiro Ltd can use cookies to monitor your browsing and purchasing behaviour.
How are cookies managed?
The cookies stored on your computer or other device when you access our websites are designed by our website provider and are necessary to enable you to a make purchases on our website;
What are cookies used for?
The main purposes for which cookies are used are:
- For technical purposes essential to effective operation of our websites, particularly in relation to on-line transactions and site navigation.
- To enable DF Chiro Ltd to collect information about your browsing and shopping patterns, including to monitor the success of campaigns, competitions etc.
- To enable DF Chiro Ltd to meet its contractual obligations to make payments to third parties when a product is purchased by someone who has visited our website from a site operated by those parties.
How do I disable cookies?
If you want to disable cookies you need to change your website browser settings to reject cookies. How you can do this will depend on the browser you use.
What happens if I disable cookies?
This depends on which cookies you disable, but in general the website may not operate properly if cookies are switched off. If you only disable third party cookies, you will not be prevented from making purchases on our sites. If you disable all cookies, you will be unable to complete a purchase on our sites.
Your rights
You have a number of rights over your data as covered by data protection law. We have produced a short summary of these rights (below) however full details can be found by visiting the Information Commissioners Office (ICO) via www.ICO.gov.uk
A summary of your rights are as follows:
- the right to be informed; before we begin processing your data, we will tell you what we need, why we need it and what we intend to do with it.
- the right of access; You have the right to ask us to provide you with the data we hold about you. This is usually completed via a Subject Access Request.
- the right to rectification; You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.
- the right to erasure; In certain instances, you have the right to have your data erased without undue delay. There are however a number of exclusions and details of which can be found by contacting the ICO.
- the right to restrict processing; In certain instances, you have the right to restrict the processing of your personal data. However, there are a number of exclusions and details of which can be found by contacting the ICO.
- the right to object to processing; You have the right to object to our processing of your personal data on grounds relating to your particular situation. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests. You have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.
- the right to data portability; You have the right to ask us to provide you with the data we hold about you. Where appropriate, we will provide this to you in a structured, commonly used and machine-readable format. This right does not apply where it would adversely affect the rights and freedoms of others.
- rights in relation to automated decision making and profiling. If we undertake these activities using your data, we will adopt suitable procedures and you have the right to understand and challenge these.
We would again stress that the above is not exhaustive and for full details of your rights, please visit the Information Commissioners website at www.ico.gov.uk
Links to other websites
This website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This privacy notice does not extend to your use of such websites. You are advised to read the privacy notice or statement of other websites prior to using them.
Transferring Information Internationally
We may transfer information collected about you to third parties acting on our behalf that may be located in countries outside of the European Economic Area (“EEA”). Countries outside the EEA may not offer the same level of protection for the information collected about you as those inside the EEA, although we will at all times continue to collect, store and use your information in accordance with this Privacy notice and the Data Protection Act 1998.
You acknowledge that personal data that you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.
Security
Data security is of great importance to us and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected.
We endeavour to do our best to protect your personal data. However, transmission of information over the internet is not entirely secure and is done at your own risk. We cannot ensure the security of your data transmitted to the Website.
Complaints
We take complaints we receive very seriously. If you consider that we have in some way infringed your rights or data protection law, please let us know and we will do all we can to investigate this. Alternatively, you have a legal right to contact the relevant supervisory authority responsible for data protection. In the case of the UK, this is the Information Commissioners Office. (Telephone – 0303 123 1113 or via email or in writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF)
General
You may not transfer any of your rights under this privacy notice to any other person. We may transfer our rights under this privacy notice where we reasonably believe your rights will not be affected.
If any court or competent authority finds that any provision of this privacy notice (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy notice will not be affected.
Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.
This Agreement will be governed by and interpreted according to the law of England and Wales. All disputes arising under the Agreement will be subject to the exclusive jurisdiction of the English and Welsh courts.
Anonymous Random Interaction Capture
“We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.”
Changes to this privacy notice
We keep our privacy notice under regular review. We reserve the right to change this privacy notice as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the privacy notice on your first use of the Website following the alterations.
How to contact us
You can contact us telephonically: 01913757600 or by email: info@durhamchiropractic.co.uk
