Privacy Policy
Last updated: 16 September 2026
Bodybest Chiropractic ("we", "us") is committed to protecting your personal data. This policy explains what we collect, why, how long we keep it and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Bodybest Chiropractic, Riverside Park, Gosport Street, Lymington, Hampshire SO41 9BB. Data controller: Dr Islay Murton. Contact: bodybestchiropractic@gmail.com or 07483 829798.
What We Collect and Why
| Data | Why we use it | Lawful basis | Kept for |
|---|---|---|---|
| Name, phone number, email, appointment details (via our booking system, Acuity Scheduling) | To book, confirm and remind you of appointments and take payment | Contract | 8 years after your last appointment |
| Clinical records: your health history, examination findings and treatment notes | To assess and treat you safely and meet our professional obligations | Explicit consent and provision of health care; legal obligation to keep records | 8 years after your last appointment (or until age 25 for children, if longer), as required by our regulators |
| Name and email for our members' list | To send you offers, discounts and news by email | Consent (you tick a box; you can withdraw at any time) | Until you unsubscribe, or 2 years of inactivity |
| Messages you send us by text, WhatsApp, email or the contact form | To answer your enquiry | Legitimate interests | 12 months |
| Treatment photos and videos | Shown on our website and social media only with your separate, written consent | Consent | Until you withdraw consent |
Email Marketing
We only send marketing emails to people who have opted in through one of our sign-up forms, or existing patients who gave us their email when booking and were offered the chance to opt out (the "soft opt-in" under the Privacy and Electronic Communications Regulations). Every email we send includes an unsubscribe link, and you can also ask us to stop at any time by texting or emailing us. We never sell or share your details for marketing, and we never include your health information in our mailing list.
Who We Share Data With
Only the services we need to run the clinic: our booking and payment provider (Acuity Scheduling / Squarespace, and their payment processor Stripe), our email service provider for members' emails, and our clinical notes software. Each of these processes data on our instructions under a written contract. We never sell your data. We may share clinical information with your GP or another health professional with your consent, or without it only where the law requires.
Cookies and Analytics
This website does not set advertising or tracking cookies. Videos are embedded from YouTube in privacy-enhanced mode and only load when you press play. Maps are embedded from Google Maps. If we introduce analytics, we will use a cookie-free tool or ask for your consent first.
Your Rights
- Access a copy of the data we hold about you
- Have inaccurate data corrected
- Ask us to delete data we no longer need to keep (note that we are legally required to retain clinical records for the periods above)
- Withdraw consent for marketing at any time
- Object to or restrict certain processing
- Complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113
To exercise any of these rights, email bodybestchiropractic@gmail.com. We will respond within one month.
Security
Clinical records are stored in encrypted, access-controlled software. Paper records, where used, are kept in locked storage. Our website is served over HTTPS.
Changes
We'll post any changes to this policy on this page and update the date at the top.