N22 Chiropractic Clinic

This Privacy Policy explains how N22 Chiropractic collects, uses, stores, and protects your personal information.

N22 Chiropractic is operated by Krisztina Tomoskozi.

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable healthcare regulations.

Contact Details

Data Controller:
Krisztina Tomoskozi
N22 Chiropractic Clinic

Telephone: 020 3951 5676
Email: info@n22chiropractic.co.uk

If you have any questions regarding this Privacy Policy or how we process your personal information, please contact us using the details above.

Information We Collect

To provide safe and effective chiropractic care, we may collect and process the following information:

Personal Information

Name
Date of birth
Address
Telephone number
Email address
Emergency contact details

Health Information

Medical history
Current and past symptoms
Lifestyle information relevant to your care
Examination findings
Diagnosis and treatment records
Imaging reports and referral information where applicable

Payment Information

Where payment information is collected through third-party payment providers, your payment details are encrypted and securely processed by those providers. We do not store full card payment details on our systems.

How We Use Your Information

We process your personal information to:

Provide chiropractic assessment, diagnosis, treatment and ongoing care
Maintain accurate patient records
Communicate with you regarding appointments
Send appointment reminders by phone, email or SMS
Contact you regarding your healthcare and treatment plans
Manage payments and administration
Meet our legal, regulatory and professional obligations

Legal Basis for Processing

Under UK GDPR, we process your personal information under the following lawful bases:

Contract

Processing is necessary to provide the healthcare services you have requested.

Legal Obligation

We are required to maintain healthcare records and comply with professional, legal, regulatory, and insurance requirements.

Healthcare Provision

Special category health data is processed for the purposes of preventative medicine, medical diagnosis, and healthcare treatment.

Legitimate Interests

We may contact you regarding appointments, treatment plans, clinic updates, or information relevant to your ongoing care.

Sharing Your Information

Your information will only be shared where necessary and appropriate.

We may share relevant information with:

Other healthcare professionals involved in your care
Your GP or medical specialist (with your consent where appropriate)
Regulatory bodies where legally required
Professional indemnity insurers where necessary
Approved service providers who assist us in operating the clinic

We will never sell your personal information to third parties.

We do not share the contents of your clinical notes with marketing companies or unrelated third parties.

Third-Party Service Providers

We may use trusted third-party providers to assist in delivering our services, including:

Patient management software
Online booking systems
Secure payment processors
Email and SMS communication services
Exercise prescription platforms

These providers only process information necessary to deliver their services and are required to maintain appropriate security standards.

We use Zanda for online booking and patient management. Further information can be found in the Zanda Privacy Policy ↗.

Website hosting:

Website and Cookies

Our website may use cookies and analytics tools to help us understand how visitors use the site and improve user experience.

Where required, you will be given the option to accept or decline non-essential cookies through our cookie consent banner.

Storage and Security

We take appropriate technical and organisational measures to protect your personal information.

Your information is stored securely using password-protected systems and encrypted services where appropriate.

Access to your information is restricted to authorised personnel who require access to provide healthcare services or administer the clinic.

Retention of Records

Healthcare records are retained in accordance with professional and legal requirements.

In most circumstances, adult patient records will be retained for a minimum of eight years after your last treatment appointment.

Where legal, regulatory, insurance, or clinical requirements dictate, records may be retained for longer periods.

At the end of the retention period, records will be securely destroyed.

Your Rights

Under UK GDPR, you have the right to:

Be informed about how your information is used
Access the personal information we hold about you
Request correction of inaccurate information
Request restriction of processing in certain circumstances
Object to certain types of processing
Request deletion of your information where legally permissible
Request transfer of your information to another organisation where applicable

Please note that healthcare providers may be legally required to retain certain records even where deletion is requested.

Complaints

If you are unhappy with how we handle your personal information, please contact us first so that we can attempt to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Website: www.ico.org.uk ↗
Telephone: 0303 123 1113

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, professional requirements, or the services we provide.

The latest version will always be available on our website.

Contact Us

N22 Chiropractic Clinic
Data Controller:
Krisztina Tomoskozi