RESPARK CLINIC — PRIVACY POLICY

Last updated: May 2026

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. WHO WE ARE

Respark Clinic ('we', 'us', 'our') is a premium wellness clinic located in Nine Elms, London. We offer chiropractic care, Reformer Pilates, red light therapy, and lymphatic drainage services. We are a data controller for the purposes of UK data protection law.

Contact details:

Business name: Respark Clinic
Address: 4.04 153 Wandsworth Road, London
Email: info@theresparkclinic.com
Website: [INSERT WEBSITE URL]

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

2. PERSONAL DATA WE COLLECT

We collect and process the following categories of personal data:

2.1 Information you provide to us

Full name, date of birth, and contact details including email address, telephone number and postal address.

Health and medical information, including presenting complaints, medical history, medication and treatment notes. This is special category data.

Emergency contact details.

Payment information, processed securely via our payment provider. We do not store full card details.

Communications you send us by email, telephone or contact form.

Feedback, reviews and survey responses.

2.2 Information we collect automatically

Website usage data including IP address, browser type, pages visited and time spent on site via cookies. Please see Section 10.

Booking platform data from PracticeHub, bSport and ClassPass.

2.3 Information from third parties

Referral information from other healthcare providers, with your consent.

ClassPass booking and check-in data where you book through the ClassPass platform.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

3. HOW WE USE YOUR PERSONAL DATA

3.1 Providing our services

We use your personal data to:

Process bookings, cancellations and payments.

Deliver chiropractic, Pilates, red light therapy and lymphatic drainage services.

Manage your treatment records and ongoing care.

Send appointment reminders and follow-up communications.

3.2 Legal obligations

We use your personal data to:

Maintain clinical records in compliance with professional regulatory requirements, including the GCC, General Chiropractic Council.

Comply with health and safety obligations.

Respond to lawful requests from regulatory or law enforcement bodies.

3.3 Legitimate interests

We use your personal data to:

Improve our services based on your feedback.

Administer our loyalty programme and membership benefits.

Carry out internal record keeping and business administration.

Detect and prevent fraud or misuse of our services.

3.4 With your consent

We may use your personal data to:

Send marketing communications, newsletters, promotional offers and event invitations by email or SMS.

Share testimonials or anonymised case studies.

Use photography or video content for marketing purposes.

You may withdraw your consent at any time by contacting us or clicking unsubscribe in any marketing email.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

4. HEALTH DATA

Health information is special category personal data under UK GDPR and receives additional protection.

We collect and process health data because it is necessary for the provision of healthcare and management of healthcare systems, and for preventive or occupational medicine purposes under Article 9(2)(h) UK GDPR, and where you have given explicit consent under Article 9(2)(a).

Your health data is:

Stored securely within our clinical management systems, including PracticeHub.

Accessible only to clinical staff who need it to deliver your care.

Never sold or shared with third parties for commercial purposes.

Retained in accordance with NHS and GCC records retention guidance. Please see Section 8.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

5. WHO WE SHARE YOUR DATA WITH

We do not sell your personal data.

We may share it only in the following circumstances:

Service providers and platforms, including PracticeHub for clinical records, bSport for Pilates bookings, ClassPass for third-party bookings, Klaviyo for email marketing and payment processors. These providers operate under data processing agreements and are required to protect your data.

Other healthcare providers, with your explicit consent, for example when referring you to a GP, specialist or other allied health professional.

Legal and regulatory bodies, where required by law, court order or regulatory authority, including the GCC or ICO.

Business transfers, in the event of a sale or merger of the clinic. Your data may be transferred as part of that transaction and you will be notified in advance.

Where we share data with third-party processors, we ensure appropriate contractual protections are in place in accordance with Article 28 UK GDPR.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

6. YOUR RIGHTS UNDER UK GDPR

You have the following rights in relation to your personal data:

Right to access: request a copy of the personal data we hold about you.

Right to rectification: ask us to correct inaccurate or incomplete data.

Right to erasure, also known as the right to be forgotten: ask us to delete your data where there is no lawful reason to continue processing it. Please note that we may be required to retain clinical records for regulatory reasons.

Right to restriction: ask us to limit how we use your data in certain circumstances.

Right to data portability: receive your data in a structured, machine-readable format.

Right to object: object to processing based on legitimate interests or for direct marketing.

Rights related to automated decision-making: we do not make solely automated decisions with significant effects on you.

To exercise any of these rights, please contact us at info@theresparkclinic.com.

We will respond within one calendar month. There is no charge for making a request. We may need to verify your identity before processing your request.

If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office, also known as the ICO:

Website: www.ico.org.uk
Telephone: 0303 123 1113

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

7. LEGAL BASES FOR PROCESSING

We rely on the following lawful bases under UK GDPR Article 6:

Contract, Article 6(1)(b): processing necessary to provide our services to you.

Legal obligation, Article 6(1)(c): processing required to comply with our legal and regulatory duties.

Legitimate interests, Article 6(1)(f): processing for our legitimate business interests, where these are not overridden by your rights.

Consent, Article 6(1)(a): processing for marketing communications and certain other purposes where we ask for your consent.

For special category health data, we rely on Article 9(2)(h), healthcare provision, and Article 9(2)(a), explicit consent, as appropriate.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

8. HOW LONG WE KEEP YOUR DATA

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

Our standard retention periods are:

Clinical and treatment records: 8 years from your last appointment, or until age 25 if you were under 17 at the time of treatment, in accordance with NHS/GCC guidance.

Financial records: 7 years, in accordance with HMRC requirements.

Marketing consent records: until you withdraw consent, plus 1 year.

Website analytics data: up to 26 months.

CCTV footage, if applicable: 31 days.

When data is no longer required, we securely delete or anonymise it.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

9. DATA SECURITY

We take the security of your personal data seriously and have appropriate technical and organisational measures in place, including:

Encrypted storage of electronic clinical records.

Password-protected and access-controlled systems.

Staff training on data protection and confidentiality obligations.

Secure disposal of paper records.

Regular review of our data handling practices.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform you directly where required.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

10. COOKIES AND WEBSITE ANALYTICS

Our website uses cookies to improve your experience. Cookies are small text files stored on your device.

We use:

Strictly necessary cookies: required for the website to function. These do not require consent.

Analytics cookies: used to understand how visitors use our site, for example Google Analytics. These are only placed with your consent.

Marketing cookies: used to deliver relevant advertising. These are only placed with your consent.

You can control cookie preferences via the cookie banner on our website, or by adjusting your browser settings. Withdrawing consent for non-essential cookies will not affect your ability to use the site.

For more detail, please see our separate Cookie Policy at [INSERT LINK].

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

11. CHILDREN'S DATA

Our services are available to clients of all ages, including children under 18.

Where we provide services to a child, we will obtain consent from a parent or guardian and will handle the child's data with additional care.

Parents and guardians may exercise data rights on behalf of their child by contacting us directly.

We do not knowingly collect personal data from children under 13 via our website without verifiable parental consent.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

12. INTERNATIONAL DATA TRANSFERS

We primarily process your data within the UK.

Where any service providers process data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as UK adequacy decisions, Standard Contractual Clauses or the UK International Data Transfer Agreement, in accordance with UK GDPR Chapter V.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law.

The last updated date at the top of this document will be revised accordingly.

Where changes are material, we will notify you by email or by a prominent notice on our website.

We encourage you to review this policy periodically.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

14. CONTACT US

For any questions, requests or concerns about this Privacy Policy or our data handling practices, please contact us:

Email: info@theresparkclinic.com
Post: Respark Clinic, 4.04 153 Wandsworth Road, London

If you wish to make a formal complaint about how we have handled your personal data, you have the right to complain to the Information Commissioner's Office at www.ico.org.uk or by calling 0303 123 1113.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Respark Clinic | Reset. Realign. Respark.