Privacy Policy

St Albans Back Pain Clinic is the Controller of your personal data under the UK GDPR. We are committed to protecting your privacy and ensuring your personal information is handled responsibly.

Contact Details

Email: info@stalbansbackpainclinic.com Phone: 07973 884418 Address: 3 Faircross Way, St Albans, AL1 4RT

Personal Data We Collect

We collect personal information necessary to provide chiropractic care, including your name, contact details, appointment information, clinical notes, treatment records, communication history, and billing information. If you consent to audio recording during your appointment, we may collect and process audio for the purpose of creating accurate clinical notes.

Website Information

When you visit our website, we collect basic technical information such as your IP address, browser type, and pages viewed. This helps us maintain website security and performance. You can browse our website without providing personal information. If you use contact forms or sign up for communications, you may provide your name, email address, phone number, or other details.

How We Use Your Data

We use your personal data to provide chiropractic treatment, manage appointments, send SMS appointment reminders, maintain accurate clinical records, communicate with you about your care, and meet legal and regulatory obligations. We only collect information necessary for these purposes.

How Your Data Is Stored and Processed

We use MyClinicPilot, provided by PilotWorks360, to manage appointments, clinical records, audio recordings (where applicable), and SMS reminders. PilotWorks360 acts as our Processor, meaning they process your data only on our instructions and apply their own security measures and subprocessors to deliver the service. These subprocessors are not selected or controlled by the clinic. We do not directly share your personal data with any third parties unless we are legally required to do so.

Legal Basis for Processing

As the Controller, we process your personal data under the following UK GDPR bases: we rely on Contract to provide treatment and manage your appointments; we rely on Legal obligation to maintain required medical and clinical records; we rely on Legitimate interests to operate the clinic safely, efficiently, and to send essential appointment‑related communications; and we rely on Consent for optional activities such as marketing communications or audio recording during appointments. You may withdraw consent at any time.

Medical Record Retention

We retain records for the legally required periods. Adults: 8 years from the last treatment. Children: until age 25, or 26 if treated at age 17. Records may be kept longer if required for insurance or legal reasons. After this period, records are securely deleted or anonymised.

Your Rights

You have the right to access your personal data, correct inaccurate information, request deletion where legally permitted, restrict processing, object to certain uses, request data portability, and complain to the Information Commissioner’s Office. To exercise your rights, contact us at info@stalbansbackpainclinic.com.

Cookies and Website Tracking

Our website uses cookies for functionality and analytics. You can manage cookies through your browser settings.

External Links

Our website may contain links to other websites. We are not responsible for the content or privacy practices of external sites. We encourage you to review the privacy notices of any websites you visit.

Data Deletion Requests

If you request deletion of your data, we will verify your identity and delete or anonymise data where legally permitted. Some records cannot be deleted due to healthcare retention laws. If your data is stored in MyClinicPilot, we will instruct PilotWorks360 to delete it in accordance with their policies.

Contact Us

For any questions about this Privacy Notice or how your data is handled, contact us at info@stalbansbackpainclinic.com or 07973 884418. Our address is 3 Faircross Way, St Albans, AL1 4RT