Privacy Policy

Last updated: April 2026

Culture Chiropractic Ltd ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are registered in England and Wales. Our practice is located at Unit 6, 6 Westgate Street, Hackney, London E8 3RN.

1. Who We Are

Culture Chiropractic Ltd is the data controller for the personal information collected through this website and in the course of providing chiropractic care. If you have any questions about how we handle your data, please contact us at info@culturechiropractic.co.uk.

2. What Data We Collect

We may collect and process the following types of personal data:

• Identity data: your name, date of birth
• Contact data: email address, phone number, postal address
• Health data: information about your health, medical history, and treatment (collected as part of providing chiropractic care — this is special category data under UK GDPR)
• Booking data: appointment dates, times, and preferences
• Payment data: transaction records processed securely via Stripe (we do not store your full card details)
• Technical data: IP address, browser type, pages visited, and other usage data collected via Google Analytics
• Communication data: messages or enquiries you send us by email or through our website

3. How We Collect Your Data

We collect your data in the following ways:

• When you book an appointment online or in person
• When you complete health questionnaires or intake forms
• When you contact us by phone, email, or via our website
• Automatically, through cookies and analytics tools when you visit our website
• When you make a payment through our website

4. Why We Use Your Data (Legal Basis)

We use your personal data for the following purposes:

• To provide chiropractic care — processing health data is necessary for the provision of healthcare services (UK GDPR Article 9(2)(h))
• To manage appointments and communications — based on our legitimate interests in running our practice efficiently
• To process payments — based on our contractual obligations to you
• To improve our website — based on your consent to cookies and analytics
• To comply with legal obligations — including healthcare record retention requirements

5. Health Data

Health information is special category data under UK GDPR. We collect and process this data solely for the purpose of providing you with chiropractic care. All clinical records are stored securely and accessible only to authorised practitioners at Culture Chiropractic Ltd.

We retain clinical records for a minimum of 8 years from the date of last treatment (or until age 25 for patients who were minors when treated), in line with NHS and General Chiropractic Council (GCC) guidance.

6. Third Parties We Share Data With

We do not sell your data. We may share your data with the following trusted third parties who act as data processors on our behalf:

• Stripe — payment processing. Stripe is PCI-DSS compliant. View their privacy policy at stripe.com/gb/privacy
• Google Analytics — website analytics. Data is anonymised where possible. View Google's privacy policy at policies.google.com/privacy

We may also share data where required by law, or with regulatory bodies such as the General Chiropractic Council.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes it was collected:

• Clinical records: minimum 8 years from last treatment date
• Financial records: 6 years in line with HMRC requirements
• Website analytics data: up to 26 months (Google Analytics default)
• General correspondence: 2 years from last contact

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to ask us to correct inaccurate data
• Right to erasure — to request deletion of your data (subject to legal obligations)
• Right to restrict processing — to ask us to limit how we use your data
• Right to data portability — to request your data in a portable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at info@culturechiropractic.co.uk. We will respond within 30 days.

9. Cookies

Our website uses cookies to improve your experience and help us understand how the site is used. For full details of the cookies we use, please see our Cookie Policy.

10. Data Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. All data is stored on secure servers. Payment data is handled exclusively by Stripe and is never stored on our systems.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO — please contact us first.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.