KLCC PRIVACY INFORMATION
Data Privacy Notice
How King’s Lynn Chiropractic Clinic collects, uses, protects and retains personal and health information.
Last reviewed: August 2026
Who we are
King’s Lynn Chiropractic Clinic Ltd is responsible for the personal information described in this notice where we act as the data controller.
King’s Lynn Chiropractic Clinic Ltd
Anglia House, 23 Hamburg Way
King’s Lynn, Norfolk
PE30 2ND
Company No. 05815868
For privacy queries, requests or concerns, please contact our Practice Manager at practicemanager@kingslynncc.com or call 01553 772512.
Information we may collect
- Name, date of birth and contact details.
- Appointment, attendance and payment information.
- Health information, medical history, symptoms, examination findings, treatment records and clinical correspondence.
- Information about consent, accessibility needs, safeguarding or additional support where relevant.
- Correspondence with you and records of enquiries, feedback or complaints.
- Information submitted through our website or contact form, including technical information generated when you use the site.
Where information may come from
Most information is provided directly by you. Where appropriate, information may also be provided by a parent or guardian, another person you have authorised, a referring healthcare professional, an insurer or another organisation involved in your care.
We will only use information from other sources where there is an appropriate reason and lawful basis to do so.
Why we use your information
- To arrange, manage and confirm appointments.
- To assess, provide and document clinical care and support continuity of care.
- To communicate with you about your care or an enquiry you have made.
- To process payments, manage accounts and maintain appropriate business records.
- To meet legal, regulatory, professional, safeguarding and insurance obligations.
- To respond to complaints, concerns, incidents or legal claims.
- To maintain the security, administration and effective operation of the clinic and website.
Our lawful bases
Depending on the circumstances, we may rely on one or more lawful bases under UK data-protection law, including:
- Contract — where processing is necessary to provide a service you have asked us to provide or to take steps before doing so.
- Legal obligation — where we are required to keep or disclose information by law or professional regulation.
- Legitimate interests — where processing is necessary for the safe and effective administration of the clinic, provided those interests are not overridden by your rights and interests.
- Vital interests — in limited circumstances where processing is necessary to protect someone’s life.
- Consent — where consent is the appropriate basis for a specific use. You can withdraw consent where we rely on it.
Health and other special-category information
Health information receives additional protection under UK data-protection law. Where we process health or other special-category information, we rely on an appropriate additional condition, including where processing is necessary for the provision or management of health care or treatment by professionals subject to confidentiality obligations, and where another legal condition applies.
Where relevant, we also process special-category information in accordance with the Data Protection Act 2018.
Who we may share information with
We do not sell your personal information. Where appropriate and lawful, information may be shared with:
- Clinicians and authorised clinic staff involved in your care or administration.
- Other healthcare professionals or organisations involved in your care, where appropriate.
- Insurers or funding organisations where relevant and authorised.
- Professional advisers, including legal, accounting and insurance advisers where necessary.
- IT, website, booking, communications and payment providers acting on our behalf under appropriate contractual obligations.
- Professional regulators, safeguarding bodies, courts, law-enforcement agencies or other authorities where disclosure is required or permitted by law.
We limit disclosures to what is necessary for the relevant purpose.
How long we keep information
We retain records only for as long as necessary for the purpose for which they were collected and to meet applicable clinical, legal, professional, regulatory and insurance requirements.
Clinical records may need to be retained for substantial periods, including after treatment has ended. Retention requirements can differ depending on the type of record, the profession involved and whether the patient is a child.
Security and confidentiality
We use appropriate organisational and technical measures designed to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.
Access to clinical and administrative information is limited to people who need it for their role, and clinicians are subject to professional duties of confidentiality.
International processing
Some service providers may process information outside the United Kingdom. Where this happens, we take reasonable steps to ensure an appropriate safeguard or other lawful transfer mechanism is in place in accordance with UK data-protection law.
Your data-protection rights
Depending on the circumstances, you may have rights to:
- Ask for a copy of your personal information.
- Ask us to correct inaccurate or incomplete information.
- Ask us to erase information where the legal requirements for erasure are met.
- Ask us to restrict how information is used in certain circumstances.
- Object to certain processing based on legitimate interests.
- Receive certain information in a portable format where the right to data portability applies.
- Withdraw consent at any time where consent is the lawful basis relied upon.
These rights are not absolute. For example, we may need to retain clinical records where legal, professional, regulatory or insurance requirements require us to do so.
To make a privacy request, contact practicemanager@kingslynncc.com. We may need to confirm your identity before releasing personal information.
Cookies and website information
Our website may use cookies or similar technologies. More information is available in our Cookie Policy.
Questions, concerns and complaints
Please contact us first if you have a concern about how your information has been handled. We will try to resolve the issue promptly.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection.
Need help with your information?
Contact our Practice Manager if you have a privacy question or would like to exercise one of your data-protection rights.