Privacy Policy

1. Introduction

At CastleRidge Chiropractic, we are committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, and safeguard your personal information when you visit our website or contact our clinic.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

CastleRidge Chiropractic
3 Bartlett Street, Caerphilly

CF83 1JS
Email: Info@castleridgechiropractic.co.uk
Phone:

If you have any questions about this privacy policy or how we process your data, please contact us using the details above.

3. Information We Collect

We may collect and process the following types of personal information:

Information you provide directly

Name
Email address
Phone number
Information submitted through contact or booking forms

If you become a patient

Date of birth
Medical history
Details about your symptoms or condition
Examination findings and treatment records

Technical information automatically collected

IP address
Browser type and version
Pages visited on our website
Website usage data

4. How We Use Your Information

We may use your information to:

Respond to enquiries made through our website
Arrange or manage appointments
Provide healthcare services
Maintain accurate clinical records
Improve our website and services
Maintain website security

We only process personal information where we have a lawful basis to do so.

5. Health Information

If you become a patient, we may collect and store health-related information as part of your clinical record. This information is classified as special category data under UK data protection law.

Health information is collected only where necessary for the provision of healthcare services and is handled with strict confidentiality.

6. Sharing Information with Other Healthcare Professionals

With your explicit consent, we may share relevant information about your condition or treatment with other healthcare professionals involved in your care.

This may include:

General practitioners (GPs)
Physiotherapists
Medical specialists
Other allied healthcare providers

Information shared will be limited to what is necessary for your care and will only be shared with your permission, unless disclosure is required by law.

7. Marketing Communications

With your consent, we may use your contact details to send information about clinic services, health advice, promotions, or updates that may be relevant to you.

You will only receive marketing communications if you have opted in to receive them.

You may withdraw your consent at any time by:

Unsubscribing from marketing emails
Contacting the clinic directly

We do not sell personal information with third parties for marketing purposes.

8. Data Storage and Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, or disclosure.

Personal data may be stored securely using digital practice management systems, secure email systems, or other secure administrative systems used by the clinic.

Only authorised individuals will have access to patient information where necessary for their role.

9. Retention of Patient Records

Healthcare providers are required to retain patient records for a minimum period in accordance with professional guidance and legal obligations.

Patient records may be retained for at least 8 years after the last treatment, or longer where required.

After this period, records may be securely destroyed or anonymised.

10. Transfer of Business or Clinic Ownership

In the event that Castleridge Chiropractic is sold, merged, or transferred to another healthcare provider or organisation, patient records and relevant personal data may be transferred to the new owner or responsible healthcare professional in order to ensure continuity of care.

Any transfer of patient information will be conducted in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The new owner or responsible healthcare provider will be required to continue protecting and processing your personal information in accordance with applicable privacy and confidentiality obligations.

Where appropriate, patients may be informed of any significant change in ownership or control of the clinic that affects the handling of personal data.

11. Cookies and Website Analytics

Our website may use cookies and analytics tools to help us understand how visitors interact with the website and improve user experience.

These tools may collect information such as:

Pages visited
Time spent on the website
General geographic location
Device type

You can manage or disable cookies through your browser settings.

12. Third-Party Services

Our website may use third-party services to help operate and maintain the website. These may include website hosting, booking systems, or analytics tools.

These providers may process limited personal information on our behalf and are required to maintain appropriate security and confidentiality.

13. Your Data Protection Rights

Under UK data protection law, you have the right to:

Request access to your personal data
Request correction of inaccurate data
Request erasure of personal data where appropriate
Request restriction of processing in certain circumstances
Object to certain types of processing

Requests regarding personal data can be made by contacting the clinic.

14. Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page.

15. Contact Information

If you have any questions regarding this privacy policy or how your personal data is handled, please contact: