Privacy Policy

Last updated: September 2026

Richardson Chiropractic is committed to protecting your privacy and keeping your personal information secure. This Privacy Policy explains how Richardson Chiropractic Consultancy Ltd, trading as Richardson Chiropractic, collects, uses, stores and protects personal information when you contact us, book an appointment, attend the clinic or use this website.

1. Who we are

The data controller responsible for your personal information is:

Richardson Chiropractic Consultancy Ltd
trading as Richardson Chiropractic

2 High Street
Kinross
Perth and Kinross
KY13 8AW

Email: info@richardsonchiropractic.co.uk
Telephone: 07990 282 089

If you have any questions about how your personal information is used, please contact us using the details above.

2. What information we collect

Depending on how you interact with Richardson Chiropractic, we may collect and process information including:

your name and contact details;
date of birth and other information needed to identify you;
appointment and booking information;
payment information and transaction details;
relevant medical history, symptoms, clinical findings, treatment records and other health information;
information you provide when contacting us by telephone, email, online forms or other means;
information relating to your communication and correspondence with us;
information about your use of this website, including technical information and cookies where applicable.

Health information is considered special category data under UK data protection law and is handled with additional care.

3. How we use your information

We use personal information where necessary to:

respond to enquiries and communicate with you;
arrange and manage appointments;
provide chiropractic assessment and care;
maintain accurate patient and clinical records;
take and manage payments;
send appointment reminders and other necessary communications relating to your care;
manage cancellations and other administrative matters;
meet our professional, legal and regulatory obligations;
maintain the security and proper operation of our website, booking systems and business systems;
deal with queries, complaints or requests relating to your information;
improve the administration and operation of the practice.

We will only use your information for purposes that are compatible with the reason it was collected, or where we are otherwise permitted or required to do so by law.

4. Our lawful bases for using your information

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract – where processing is necessary to arrange or provide services that you have requested, including appointments and payments.
Legal obligation – where we are required to keep records or disclose information to meet a legal or regulatory requirement.
Legitimate interests – where processing is necessary for the proper administration, security and operation of the practice and does not unfairly override your rights and interests.
Consent – where we specifically ask for your consent to use information for a particular purpose, such as certain forms of marketing. Where we rely on consent, you can withdraw it at any time.
Provision of healthcare and related purposes – health information may be processed where permitted under the special category provisions of UK data protection law in connection with the provision and management of healthcare and professional services.

5. Who we share your information with

We do not sell your personal information.

We may share information with organisations that provide services necessary for Richardson Chiropractic to operate, where this is appropriate and lawful. These may include:

our appointment booking and patient-management system, PracticeHub;
Stripe, which processes card payments and related transaction information;
website and hosting providers, including Wix;
email, telephone and other communications providers;
professional, legal, regulatory or statutory bodies where disclosure is required or permitted by law;
another healthcare professional or organisation where appropriate and where the necessary consent or other lawful basis is in place.

Where another organisation processes personal data on our behalf, we expect appropriate contractual, technical and organisational safeguards to be in place.

Some service providers may process information outside the United Kingdom. Where this occurs, appropriate safeguards will be used where required by UK data protection law.

6. Patient records and how long we keep them

We keep patient and clinical records securely and only for as long as necessary.

For chiropractic records, the General Chiropractic Council currently recommends retention for:

8 years after the patient's last treatment for adults;
11 years for children, or until their 25th birthday, whichever is longer.

Records may need to be retained for longer in particular circumstances where there is a legal, regulatory or other legitimate reason to do so.

When personal information is no longer required, it will be securely deleted or destroyed.

7. Keeping your information secure

We take reasonable and appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Access to patient and business information is restricted to what is necessary for its intended purpose, and electronic systems are protected using appropriate security measures.

No method of transmitting or storing information can be guaranteed to be completely secure, but we take appropriate steps to reduce the risks involved.

8. Your rights

Under UK data protection law, you have rights in relation to your personal information. Depending on the circumstances, these may include the right to:

ask for a copy of the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to restrict how we use your information in certain circumstances;
object to certain processing;
ask for your information to be deleted where there is no overriding legal or legitimate reason for us to continue holding it;
request transfer of certain information to another organisation where the right to data portability applies;
withdraw consent where we are relying on consent to process your information.

These rights are subject to certain legal conditions and exemptions. In particular, healthcare records may need to be retained where there is a professional or legal requirement to do so.

How to exercise your rights

To make a request, please contact:

Richardson Chiropractic
Email: info@richardsonchiropractic.co.uk
Telephone: 07990 282 089

We may need to confirm your identity before providing personal information.

9. Access to your patient records

You have the right to request access to your personal health records as required by law.

Requests should be made using the contact details above. We will deal with requests in accordance with applicable data protection legislation and professional requirements.

10. Information you provide about other people

Please do not provide personal information about another person unless you are authorised to do so or have their permission where this is required.

Where someone else contacts us or manages appointments on your behalf, we may need to confirm that they are authorised to act for you before disclosing personal information.

11. Website and cookies

Our website may use cookies and similar technologies to provide essential website functionality, improve performance and understand how the website is used.

Where cookies or similar technologies require your consent, we will seek that consent in accordance with applicable data protection and privacy requirements.

You can manage cookie preferences through the options made available on the website.

12. Information received from other sources

We may receive personal information from sources other than directly from you, for example where another person contacts the practice on your behalf or where information is provided by another healthcare professional with your permission or where disclosure is otherwise lawful.

Where required, we will provide appropriate privacy information about the source and use of that information.

13. Marketing

We may contact you with information relating to your appointments or ongoing relationship with the practice where this is necessary for the administration of your care.

We will not use your health information for direct marketing without an appropriate lawful basis.

Where we ask you to consent to receive marketing communications, you can withdraw your consent at any time.

14. Complaints about how we use your information

If you have concerns about how we have handled your personal information, please contact Richardson Chiropractic in the first instance so that we can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

Further information is available from the ICO at ico.org.uk.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, systems, legal requirements or how we process personal information.

The latest version will always be available on this website and the date at the top of the policy will show when it was last updated.