How we handle your information.

This notice explains what personal information Elaris Chiropractic & Wellbeing Centre collects about you, why we hold it, who we share it with, how long we keep it, and the rights you have over it.

Last updated 10 October 2026.

1. Who we are

Elaris Chiropractic & Wellbeing Centre is a trading name of The Spinal Health Centre Limited, a company registered in England and Wales, company number 05040972, whose clinic is at Orchard House, 33 Colchester Road, Great Totham, Maldon, Essex CM9 8DG.

The Spinal Health Centre Limited is the data controller for the information described in this notice. That means we are responsible for deciding how it is used and for keeping it safe.

Our chiropractors are registered with and regulated by the General Chiropractic Council: Dr Stephen Davison (registration no. 01149) and Dr Jo Davison (registration no. 01580). We are bound by the GCC's Code of Practice, which includes a professional duty of confidentiality.

If you have any question about this notice or about your information, contact us at hello@elarischiropractic.co.uk or on 01621 731671.

2. What information we collect

If you are a patient

Your name, date of birth, address, telephone number and email address
Your GP's details, where you give them to us
Your health history, presenting symptoms, and the notes, findings and measurements recorded at each visit
Diagnostic images and results, such as digital x-rays or blood panels, where these form part of your care
Details of the care you receive, your care plan, and your progress at review
Appointment records, payments and correspondence with you
Where relevant to your care and given by you: information about your occupation, activities, lifestyle and circumstances

If you contact us but do not become a patient

Your name and contact details, and whatever you tell us in your enquiry

Most of the information we hold about your health is what UK data protection law calls special category data. It is subject to stricter protections, set out in section 4.

3. Where the information comes from

Almost always from you directly — in conversation, on our new patient forms, or through the online booking system. Occasionally, and only with your knowledge, we may receive information from your GP, a consultant, or an imaging or laboratory provider involved in your care.

4. Why we use it, and our lawful basis

Under the UK GDPR we must have a lawful basis for using your information. Ours are:

To provide your care. Assessing you, deciding what care is appropriate, delivering it, and keeping accurate clinical records. Lawful basis: performance of our contract with you, and our legitimate interests in running the clinic. For health information specifically, Article 9(2)(h) — the provision of health care by a health professional under a duty of confidentiality.
To manage appointments and payments. Booking, reminding, invoicing and keeping our accounts. Lawful basis: performance of our contract with you, and our legal obligations.
To meet our professional and legal obligations. Record-keeping required by the General Chiropractic Council, responding to a regulator or a lawful request, and our insurance obligations. Lawful basis: legal obligation, and Article 9(2)(f) or 9(2)(h) for health information.
To answer your enquiry. Lawful basis: our legitimate interests in responding to people who contact us.
To send you clinic information by email, where you have asked us to. Lawful basis: your consent, which you may withdraw at any time.

We do not use your information to make automated decisions about you, and we do not profile you.

5. Who we share it with

We do not sell your information, and we do not share it for marketing. We share it only where necessary:

Your online booking provider. Appointments booked through our website are handled by our booking system provider, which processes your name and contact details on our instructions.
Your GP or a consultant — only with your consent, or where there is an overriding duty to do so.
Imaging and laboratory providers, where x-rays or tests form part of your care.
Our professional indemnity insurer and legal advisers, if a claim or complaint is made.
The General Chiropractic Council or another regulator, where we are required to provide information.
Our IT and record-keeping suppliers, who may have incidental access while supporting the systems that hold our records. They act only on our instructions and cannot use your information for their own purposes.
Where the law requires it, or where there is a serious risk to your safety or someone else's.

Some of our suppliers store data outside the UK. Where that happens, we rely on the safeguards UK law requires — an adequacy decision, or standard contractual clauses with additional protections.

6. How long we keep it

We keep clinical records for as long as professional guidance requires, so that there is a complete record of your care if it is ever needed:

Adults: at least eight years after your last appointment.
Children and young people: until their 25th birthday, or their 26th birthday if they were 17 at the last appointment.
Enquiries that do not become appointments: normally no longer than twelve months.
Accounting records: six years, as tax law requires.

When a record reaches the end of its retention period it is securely destroyed.

7. How we protect it

Clinical records are held securely and are accessible only to the practitioners and staff who need them for your care. Paper records are kept locked. Electronic records are held on access-controlled systems. Everyone at the clinic is bound by a duty of confidentiality.

8. Cookies and this website

With your permission, this website uses Google Analytics to understand how people find and use it — for example, which pages are read, roughly where visitors are in the UK, and whether they arrived from a search engine or an AI assistant. This helps us improve the site. Google Analytics does this by setting cookies (named _ga and _ga_*), which last up to two years.

These cookies are only set if you click “Accept analytics”. If you reject them, or make no choice, no analytics runs and no cookies are set. Our lawful basis is your consent. Google processes this data on our behalf and may store it outside the UK under the safeguards described in section 5. We do not use it to identify you, and we never combine it with patient records.

Your choice is remembered in your browser so we do not ask on every visit. You can change it at any time using Cookie settings, also found at the foot of every page.

Some links take you elsewhere. Our booking button leads to our booking provider's own site, and our book link leads to Amazon. Once you follow either, that company's own privacy policy and cookies apply.

9. Your rights

You have the right to:

Ask for a copy of the information we hold about you, including your clinical records
Have inaccurate information corrected
Ask us to delete information — though we may be unable to delete clinical records we are professionally required to retain
Ask us to restrict how we use your information, or object to a particular use
Receive information you gave us in a portable form
Withdraw consent, where consent is our basis — for example, for emails from us

To exercise any of these, contact us at hello@elarischiropractic.co.uk. We will respond within one month. There is normally no charge.

10. Complaints

If you are unhappy with how we have handled your information, please tell us first — we would rather put it right. You also have the right to complain to the Information Commissioner's Office at any time.

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113. ico.org.uk/make-a-complaint

11. Changes to this notice

If we change how we use your information we will update this page and the date at the top. Where a change is significant, we will tell patients directly.

Call clinic Book now