Legal
Privacy Policy
We are committed to protecting your privacy and handling your personal and clinical data with care and transparency.
1. Who we are
Innate Healthcare is a chiropractic and physiotherapy clinic based at 120 Union Street, Oldham, OL1 1DU. We are the data controller responsible for your personal information.
Data Controller: Innate Healthcare
Address: 120 Union Street, Oldham, OL1 1DU
Email: hello@innatehealthcare.co.uk
Phone: 0161 509 7729
2. What information we collect
Information you provide to us
When you book an appointment, contact us or register as a patient, we may collect:
- Your full name, date of birth and contact details (address, phone number, email address)
- Your GP's name and contact details
- Medical history, current symptoms and details of your condition
- Treatment records, clinical notes and assessment findings
- Payment information (processed securely — we do not store card details)
- Health insurance details where applicable
- Emergency contact information
Information collected automatically
When you visit our website, we may automatically collect:
- Your IP address and browser type
- Pages visited and time spent on the site
- Referring website or search terms used to find us
- Cookie data (see Section 8 for full details)
3. How we use your information
We use your personal information to:
- Provide and manage your clinical care and treatment
- Book, confirm and manage your appointments
- Communicate with you about your treatment, appointments and health
- Process payments and manage our accounts
- Refer you to other healthcare professionals where clinically appropriate
- Comply with our legal and regulatory obligations
- Improve our services and website
- Send you appointment reminders (where you have consented to this)
4. Our legal basis for processing your data
We process your personal information on the following legal grounds under UK GDPR:
- Contract: To fulfil our obligations as your healthcare provider
- Legal obligation: To comply with healthcare regulations and professional standards
- Legitimate interests: To manage and improve our clinic and services
- Consent: For marketing communications and non-essential cookies (which you can withdraw at any time)
- Vital interests: Where necessary to protect your health or safety
For special category data (such as health information), we process this under the basis of health or social care purposes in accordance with Article 9(2)(h) of UK GDPR.
5. Sharing your information
We do not sell your personal information to third parties. We may share your information with:
- Other healthcare professionals involved in your care, with your knowledge and where clinically appropriate
- Cliniko — our secure appointment booking and clinical records system
- Payment processors — to handle transactions securely
- Health insurers — where you have asked us to liaise with your insurer regarding a claim
- Regulatory bodies — such as the General Chiropractic Council (GCC) or Health and Care Professions Council (HCPC) if required
- Legal or statutory authorities — where we are required to do so by law
6. How long we keep your information
We retain clinical records in accordance with healthcare regulatory guidance. As a general rule:
- Adult patient records are kept for a minimum of 8 years from the date of last treatment
- Records relating to children are kept until the patient's 25th birthday, or 8 years after last treatment — whichever is longer
- Financial records are kept for 6 years in accordance with HMRC requirements
- Website enquiry data is kept for 12 months unless you become a patient
After these periods, records are securely destroyed.
7. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal information we hold about you
- Rectification — ask us to correct any inaccurate information
- Erasure — request deletion of your data in certain circumstances
- Restriction — ask us to limit how we use your data
- Portability — request your data in a portable format
- Object — object to certain types of processing
- Withdraw consent — where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at hello@innatehealthcare.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we have handled your data.
8. Cookies
Our website uses cookies — small text files stored on your device — to help the site function and to understand how visitors use it. We use the following types of cookies:
- Essential cookies: Required for the website to function. These cannot be disabled.
- Analytics cookies: Help us understand how visitors navigate the site so we can improve it. These are only set with your consent.
- Marketing cookies: Used to show relevant content. These are only set with your consent.
You can manage your cookie preferences at any time using the cookie settings on our website, or by adjusting your browser settings. Please note that disabling certain cookies may affect how the website functions.
9. Data security
We take the security of your personal information seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction. Our clinical records are stored using Cliniko, which is ISO 27001 certified and compliant with UK data protection law.
However, no method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us directly.
10. Third party websites
Our website may contain links to third party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.
11. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page with a revised date. Where changes are significant, we will notify you directly where possible.
12. Contact us
If you have any questions about this privacy policy or how we handle your personal information, please don't hesitate to get in touch:
Innate Healthcare
120 Union Street, Oldham, OL1 1DU
Phone: 0161 509 7729
Email: hello@innatehealthcare.co.uk
