Website Privacy Notice and Cookies
Who We Are
Aceso Chiropractic LTD is committed to protecting your privacy and handling your personal information responsibly and transparently.
For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Aceso Chiropractic LTD is the Data Controller.
Registered Office:
B1 Vantage Park
Old Gloucester Road
Hambrook
Bristol
England
BS16 1GW
Clinic Address:
25 Moreton Road
Buckingham
Buckinghamshire
MK18 1JZ
Contact Email:
chris@acesofamilychiropractic.com
What Information We Collect
Depending on how you interact with us, we may collect and process:
General Contact Information
-
Name
-
Telephone number
-
Email address
-
Postal address
-
Appointment and booking information
Health Information (Special Category Data)
Where you become a patient, we may collect information relevant to your care, including:
-
Medical history
-
Symptoms and health concerns
-
Examination findings
-
Clinical notes
-
Lifestyle and health-related information relevant to chiropractic care
This information is treated as confidential and protected under UK GDPR.
Website Information
When you visit our website, we may collect:
-
IP address
-
Device and browser information
-
Website usage data
-
Cookie preferences
-
Pages viewed and actions taken on our website
Why We Collect Your Information
We collect and use personal information for the following reasons:
To Provide Chiropractic Care
We collect health and personal information to assess your needs, provide care, maintain clinical records, and communicate with you about your treatment.
Lawful basis:
-
Contract
-
Provision of health care
-
UK GDPR special category processing for health data
To Manage Appointments and Patient Communication
We may use your information to:
-
Confirm appointments
-
Send reminders
-
Contact you regarding changes to bookings
-
Communicate about matters relating to your care
Lawful basis:
-
Contract
-
Legitimate interests
To Send Marketing Information
Where you have given consent, we may send:
-
Practice newsletters
-
General health information
-
Practice updates
-
Promotional offers
You may withdraw your consent at any time using unsubscribe links or by contacting us.
Lawful basis:
-
Consent
To Improve Our Website and Marketing
We use website analytics and advertising tools to understand website performance and improve how our services are presented.
Lawful basis:
-
Consent (where required for non-essential cookies)
-
Legitimate interests (where applicable)
Third Parties We Use
We work with trusted service providers who may process information on our behalf.
PracticeHub
We use PracticeHub to manage:
-
Patient records
-
Appointment booking
-
Clinical communications
-
Marketing emails and newsletters
PracticeHub processes information securely under contractual data protection obligations.
Stripe
We use Stripe to process online payments, deposits, and card transactions.
Stripe securely handles payment information directly. We do not store your full payment card details on our systems.
Stripe’s privacy policy is available on their website.
Heidi AI
We use Heidi AI to assist with clinical note-taking.
This tool supports accurate and efficient clinical record creation. Information processed through Heidi AI is handled securely and remains confidential under data processing agreements.
Clinical information is used solely for patient care purposes.
Google Analytics
We use Google Analytics to understand how visitors use our website, including:
-
Pages viewed
-
Time spent on pages
-
Website performance
-
General visitor behaviour
This helps us improve the website and user experience.
Meta Pixel (Facebook / Instagram)
We use Meta Pixel to help us:
-
Measure advertising effectiveness
-
Understand website visitor behaviour
-
Improve Facebook and Instagram advertising
Meta may use cookies and tracking technologies in accordance with its own privacy policies.
Cookies
Our website uses cookies and similar technologies.
Cookies help us:
-
Ensure the website functions correctly
-
Remember preferences
-
Measure website traffic
-
Improve performance
-
Support advertising and remarketing
Cookies may fall into the following categories:
Essential Cookies
Required for the operation of the website.
Analytics Cookies
Used to understand website usage and improve performance.
Marketing Cookies
Used by advertising platforms such as Google and Meta to help deliver and measure relevant advertising.
You can manage cookie preferences through our website cookie banner or your browser settings.
How Long We Keep Your Information
Clinical records are retained in accordance with healthcare record retention guidance and legal obligations.
In most cases we retain records for:
-
8 years after your last appointment, or
-
Until age 26 for children, where this is longer
Some financial and administrative records may be retained for legal, tax, or regulatory purposes.
Who Has Access To Your Information
Access is limited to people who genuinely need it in order to provide services or support the running of the practice, including:
-
Your chiropractor
-
Practice administrative and reception staff
-
PracticeHub (systems provider)
-
Stripe (payments)
-
Heidi AI (clinical note support)
-
Professional advisers or regulators where legally required
All third parties are subject to confidentiality and data protection obligations.
We do not sell your personal data.
International Data Transfers
Some of our service providers may process data outside the UK.
Where this happens, we ensure that appropriate safeguards are in place in accordance with UK GDPR.
Your Rights
Under UK GDPR, you may have the right to:
-
Request access to your personal data
-
Ask us to correct inaccurate data
-
Request deletion of data where appropriate
-
Restrict processing
-
Object to processing
-
Withdraw consent (where consent is relied upon)
-
Request transfer of your data where applicable
-
Make a complaint to the Information Commissioner’s Office (ICO)
Data Security
We take appropriate technical and organisational steps to protect your information from:
-
Unauthorised access
-
Loss
-
Disclosure
-
Alteration
-
Destruction
If a reportable personal data breach occurs, we will comply with our legal obligations, including notifying the Information Commissioner’s Office where required.
Contact Us
If you have questions about this privacy policy or how your personal information is handled, please contact:
Aceso Chiropractic LTD
B1 Vantage Park
Old Gloucester Road
Hambrook
Bristol
England
BS16 1GW
Email: chris@acesofamilychiropractic.com
If you are unhappy with how your data is handled, you may contact:
Information Commissioner's Office
