Privacy Policy

Armitage Chiropractic
Last updated: 18/11/2025

​

1. Introduction

This Privacy Policy explains how Armitage Chiropractic (“we”, “us”, “our”) collects, uses, and protects your personal data when you:

• Visit our website [add your website URL]

• Contact us

• Book an appointment

• Complete online forms or intake forms

• Use our services

We are committed to protecting your privacy and complying with UK GDPR, the Data Protection Act 2018, and relevant healthcare regulations.

By using our website or services, you consent to the practices described in this Privacy Policy.

​

2. Data Controller & ICO Registration

Armitage Chiropractic is the Data Controller.

Address:
Business & Innovation Centre
Broadstone Mill
Third Floor, Suite 327
Reddish, Stockport
SK5 7DL

Email: armitage_chiropractic@outlook.com
Telephone: 07379 208854
ICO Registration Number: ZC042894

​

3. What Information We Collect

3.1 Personal Information

We collect and process the following information to provide patient care and services:

• Name, address, email, phone number

• Gender, pronouns, date of birth

• Emergency contact details

• Health information: medical conditions, allergies, medications, medical history

• Information about care needs, disabilities, home conditions, dietary requirements

• Payment details for services (via Zoneee)

• Insurance policy details

3.2 Patient Portal / Online Booking (Zoneee)

For appointments and portal functionality, we collect:

• Name, contact details, date of birth

• Health and medical information required for treatment

• Payment information (processed securely by Zoneee — we do not store card data)

• SMS consent for appointment reminders

• Portal security and authentication information

• Marketing preferences (if applicable)

3.3 Queries, Complaints, and Feedback

We collect personal and health information when managing:

• Queries, complaints, or claims

• Feedback on services

• Reports or records of incidents/accidents

 

4. Lawful Bases for Processing

Under UK GDPR, we rely on the following bases:

• Consent: When you explicitly consent (e.g., marketing, SMS reminders, online forms). You can withdraw consent anytime.

• Contract: To provide services and enter into agreements (appointments, treatment, payments).

• Legal Obligation: To comply with healthcare, financial, or regulatory requirements.

• Legitimate Interests: For operational purposes like website analytics, fraud prevention, and service improvement.

• Special Category Data (Health Information): Processed for healthcare purposes under UK GDPR Article 9(2)(h) and DPA 2018 Schedule 1, Part 1.

​

5. Your Data Protection Rights

You have the right to:

• Access your personal data

• Rectify inaccuracies

• Request deletion (erasure)

• Restrict processing

• Object to processing

• Withdraw consent

• Request data portability

To exercise your rights, contact: armitage_chiropractic@outlook.com

If you remain dissatisfied, you may complain to the Information Commissioner’s Office (ICO):

• Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

• Helpline: 0303 123 1113

• Website: ico.org.uk/make-a-complaint

​

6. Children’s Privacy

Our services are intended for adults.

• We do not knowingly collect personal information from children under 13 without parental consent.

• If you are under 18, appointments, online forms, or portal access must be completed with/by a parent or legal guardian.

• Data submitted without consent will be deleted promptly.

7. How We Collect Information

We collect personal data:

• Directly from you via website forms, booking, intake forms, SMS, phone, or email

• Automatically via cookies and tracking technologies (see Section 10)

• From third parties such as Zoneee, Google Ads, Google Maps, Meta platforms, and other healthcare providers

8. How We Use Your Information

We use personal data to:

• Provide chiropractic treatment and related services

• Manage appointments, bookings, and payments

• Send appointment reminders via SMS or email

• Maintain clinical records securely

• Respond to queries, complaints, or claims

• Analyse website performance and marketing effectiveness

• Comply with legal obligations

• Improve service quality and patient experience

We do not sell your personal information.

9. Who We Share Information With

We may share your personal data with:

• Zoneee (booking and payments)

• Other healthcare providers (GPs, consultants)

• Insurance companies, brokers, or intermediaries

• Emergency services

• Website and IT service providers

• Advertising platforms (Google Ads, Meta Pixel)

Sharing is limited to what is necessary for the service and always in compliance with GDPR.

We may also share data if legally required, or where public interest overrides confidentiality (e.g., serious crime prevention).

10. Duty of Confidentiality

We are bound by professional and common law confidentiality obligations.
Health and care information is only shared with your consent, legal requirement, or in exceptional circumstances outlined above.

11. Data Retention

We retain data according to legal and regulatory requirements:

• Clinical records: GCC/BCA standards

• Financial records: 6 years (HMRC)

• Enquiries/appointments: 12 months

• Cookies/analytics: per lifespan of cookie or tracking tool

12. Security Measures

We implement robust security for your data:

• SSL encryption on our website

• Secure electronic storage

• Controlled access to staff only

• Off-site backups

• Secure storage of paper records per GCC/BCA guidance

• Staff training on data protection

We do not use personal data for automated decision-making or profiling.

13. Cookies & Tracking Technologies

We use cookies and similar tools to:

• Analyse website traffic (Google Analytics)

• Run targeted advertising (Google Ads, Meta Pixel)

• Provide functionality for forms and portal access

You can disable cookies in your browser, but some website features may not function correctly.

14. International Data Transfers

Some providers (Google, Zoneee) may store or process data outside the UK.
We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) for GDPR compliance.

15. Professional Compliance

We adhere to:

• General Chiropractic Council (GCC) requirements

• British Chiropractic Association (BCA) record-keeping standards

16. Updating Your Information

Please ensure your personal information is accurate and up to date.
You can update or correct your information by contacting: armitage_chiropractic@outlook.com

17. Links to Other Websites

Our website may link to external sites (social media, maps, other services).
We are not responsible for their privacy practices.

18. How to Complain

If you have concerns about your data:

1. Contact us: armitage_chiropractic@outlook.com

2. If unresolved, contact the ICO: ico.org.uk/make-a-complaint

19. Updates to This Privacy Policy

We may update this policy from time to time to reflect changes in law, technology, or services.
Updates will be posted on this page with a new “Last Updated” date.