The Back Clinic is part of Poynton Chiropractic Ltd which works alongside The Natural Doctor which is part of Dr Jess Ltd. We will all henceforth be referred to as ‘Our company’. This privacy policy will explain how our organisation uses the personal data we collect from you when you use our website or book an appointment or visit our clinic as a patient.

What data do we collect?

Our company collects the following data:

  • Personal identification information (Name, address, e-mail address, phone, date of birth etc.)
  • A detailed medical history, examination findings and treatment records from each visit. This may also include test results such as blood tests, X-rays and Medical scans.
How do we collect you data?

You directly provide our company with most of the data we collect. We collect data and process data when you:

  • Register online or by e-mail or telephone to place an order for any of our products or services.
  • Voluntarily complete an online, e-mailed or in-practice form or provide feedback on any of our message boards or by e-mail.
  • Use or view our website via your browsers cookies
  • Voluntarily provide a confidential medical history, give copies of any scans or test results or undergo examination, testing, X-ray or treatment at our practice or filling in our confidential online forms.
How will we use your data?

Our company collects your data so that we can:

  • Process any orders for products and services and manage your account
  • E-mail you with special offers on products or services we think you might like
  • So that we are fully informed to decide on the best advice and course of treatment for you

We do not share your data with any partner companies and all medical information provided to your practitioner is fully confidential.

How do we store your data?

Our company securely stores your data using Cliniko a highly secured patient system and it is physically stored in Australia. Whenever your data is sent to and from the system, it’s encrypted using HTTPS (end-to-end encryption). We use a 2048-bit SSL certification for encryption in transit. All data is also encrypted at rest and backed up daily, using the industry standard AES-256 encryption algorithm. The Accreditations and Certifications of Cliniko include: Our hosting partner has achieved the following accreditations and certifications; PCI DSS Level 1 (Payment Card Industry Data Security Standard), ISO 27001 (Information Security Management System), FIPS 140-2 (United States Federal Information Processing Standard).

Our Company is required to keep your personal details and full medical records for 8 years. Once this time period has expired, we will delete your data by removing it from the secure server and securely disposing of any paper records.

Marketing

Our company would like to send you information about products and services of ours that we think you might like, including partner companies listed below:

  • The Natural Drs Ltd (thenaturaldoctors.com)

You may always opt out at a later data or unsubscribe at any time from our e-mail

You have the right at any time to stop our company (or partner company from contacting you for marketing purposes).

If you no longer wish to be contacted for marketing purposes then please unsubscribe from the e-mails sent.

What are your data protection rights?

Our company would like to make sure you are fully aware of all your data protection rights. Every user/ patient is entitled to the following:

The right to access– You have the right to request our company for copies of all your personal data. We may charge you a small fee for this service.

The right to rectification– You have the right to request that our company correct any information you believe is inaccurate (although medical records are also subject to practitioner opinions, objective findings and observations). You also have the right to request our company to complete information you believe is incomplete.

The right to erasure– You have the right to request that our company erase your personal data, under certain conditions. Although we are required to hold your medical records for 8 years.

The right to processing– You have the right to object to our company’s processing of your personal data, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our:

e-mail: poyntonclinic@icloud.com

call us on: 01625 850300

or write to us at: The Back Clinic, 52A Clifford Rd, Poynton, Cheshire, Sk12 1JA

What are cookies?

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.

For further information, visit allaboutcookies.org

How do we use cookies?

Our company uses cookies in a range of ways to improve your experience on our website, including:

  • Keeping you signed in
  • Understanding how you use our website
How to manage cookies?

You can set your browser not to accept cookies and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

Privacy policies of other websites

Our company website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

Our company keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 30th June 2019.

How to contact us:

If you have any questions about our company’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

e-mail: poyntonclinic@icloud.com

call us on: 01625 850300

or write to us at: The Back Clinic, 52A Clifford Rd, Poynton, Cheshire, Sk12 1JA

How to contact the appropriate authority

Should you wish to report a complaint or if you feel our company has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office.