Data Protection Policy and Privacy Notice

---

1. Introduction

Parley Health Ltd (“we,” “us,” or “our”) is committed to protecting the privacy and security of our patients’ personal information. This Privacy Policy explains how we collect, use, store, and share your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services or visiting our website (www.parley-health.com), you agree to the terms outlined in this policy.

2. Business Information

• Business Name: Parley Health Ltd

• Registered Address: 183 New Road, Ferndown, Dorset, England, BH22 8ED

• Website: www.parley-health.com

• Contact for Privacy Concerns: Clinic Owner - Zoe Mitchell Forsyth - zoe@parley-health.com

3. Information We Collect

We collect and store the following types of personal information:

• Basic details: Name, date of birth, contact details (address, email, phone number)

• Health information: Medical history, treatment details, GP information, lifestyle and disability information

• Payment information: We do not store card details, but may collect insurance details for billing purposes

• Referral documents: Letters from GPs, X-ray/MRI/medical reports

• Communication records: Emails, phone call records, online bookings

4. How We Collect Information

We collect personal information in the following ways:

• Directly from you during consultations, online booking forms, emails, and phone calls

• From third parties, such as GP referrals or medical imaging reports

5. Why We Collect Your Information

We collect and use personal data for the following purposes:

• Healthcare services: To provide chiropractic treatment and manage your care

• Appointment reminders: Sending SMS or email reminders for upcoming appointments

• Billing and insurance claims: Processing payments or liaising with insurers

• Marketing (optional): Sending newsletters, promotions, or clinic updates (patients may opt out)

• Research and service improvement: Using anonymised data for quality improvement

6. How We Store and Protect Your Data

We take security seriously and store information in the following ways:

• Electronic records: Stored securely on third-party clinic software with password protection

• Paper records: Stored in locked filing cabinets with restricted access

• Data encryption & access control: Online records are accessed via secure login credentials

7. Sharing of Information

We only share personal data when necessary and with your consent, except where required by law. We may share information with:

• Health insurance providers (for claims processing)

• Referring GPs or allied health professionals (when medically necessary and with consent)

We do not share patient data with third-party IT service providers for data management.

8. Patient Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access your records: You can request a copy of your health records by completing a notes request form, providing ID, and signing for them

• Correct your information: If you believe your data is incorrect, you can request corrections

• Opt-out of marketing: You can opt out of receiving promotional emails or texts

• Request data deletion: Patient records must legally be retained for 8 years (or until a child turns 25) before deletion is possible

9. Data Retention & Disposal

• Retention period: We retain patient records for at least 8 years after the last treatment. If the patient was a child, records are kept until their 25th birthday.

• Secure disposal:

• Paper records are shredded when no longer required

• Electronic records are securely deleted from our system

10. Marketing & Communication

• We send appointment reminders via SMS or email.

• We may send marketing emails/newsletters, but patients have the option to opt out at any time.

11. Privacy Complaints & How to Make a Complaint

If you have any concerns about how we handle your personal data, you can:

1. Contact us directly:

• Clinic Owner: Zoe Mitchell Forsyth

• Email/Phone: zoe@parley-health.com

2. Submit a formal complaint:

• Complaints should be made in writing via email or letter.

• We will acknowledge receipt within 5 working days and aim to resolve the issue within 30 days.

• If further investigation is required, we will keep you updated on the progress.

3. Escalate to the ICO (Information Commissioner’s Office):

• If you are not satisfied with our response, you can report your concern to the ICO, the UK’s data protection authority:

• Website: www.ico.org.uk

• Helpline: 0303 123 1113

12. Updates to This Privacy Policy

We may update this policy periodically. The latest version will always be available on our website (www.parley-health.com).