Effective date: 5 October 2026 · Next review: October 2027
Who we are
Poundbury Chiropractic Limited (company 15342231) is the data controller for your personal information under the UK General Data Protection Regulation (UK GDPR). This means we decide how your information is used and we are responsible for it.
Address: The Poundbury Clinic, Middlemarsh Street, Poundbury, Dorchester DT1 3FD
Data protection lead: Martyn Clark, Practice Principal. Deputy: Jo, Practice Administrator.
What information we hold
Your details: name, contact details, appointments and invoices
Your medical history
Your consent forms
Treatment notes and diagnoses
Clinical images
Why we use it
To provide your care and keep your patient record accurate and up to date
To plan and give your treatment
To contact you about your appointments
To send you news about clinic offers, health talks and other events, only if you have opted in. You can withdraw this consent at any time by contacting us.
Our legal basis
General information (such as your contact details): we rely on our legitimate interests in providing your care and running the clinic.
Health information is “special category” data. We use it under the conditions in Article 9(2) of the UK GDPR that allow it to be used to provide and manage health care.
Marketing: we rely on your consent (opt-in only).
Recording your appointment (AI Scribe)
Your practitioner’s notes may be drafted by Jane App’s AI Scribe from a recording of your session. We tell you before we start recording. We record your verbal consent in your note. You can say no, and your care will go ahead as normal.
CCTV
CCTV operates at the premises.
Who we share your information with
We share your information only with people and services directly involved in your care, and with the services we use to run the clinic:
Jane App — holds your patient record, bookings, reminders and invoices
Inger Roug DACBR — the radiologist who reports on diagnostic imaging
Spectra IEP — the viewer we use to look at your diagnostic images
Google Workspace — our email, and short-term handling of documents
Other health professionals, such as your GP or a physiotherapist, and your medical insurer if you are claiming through your policy — only when this is needed for your care or required by law. We ask for your consent before we refer you to another health professional.
Keeping your information secure
Your records are electronic and held in Jane App. Jane data is hosted in London, UK.
Jane App aligns with the ISO 27001, SOC 1 and SOC 2 security standards and complies with UK GDPR. You can read Jane’s privacy policy at https://jane.app/legal/privacy-policy
Every Jane and Google account we use has two-factor sign-in.
Referral letters are sent by encrypted email or given to you to take.
Voicemail messages go only to Martyn Clark’s clinic email account. He listens to them and files them in your Jane record.
We do not discuss clinical details at reception in front of others, and we take calls away from the waiting area.
How long we keep your information
Adults: 8 years after your last contact with us.
Children: until their 25th birthday, or 8 years after last contact if that is later.
At the end of this period your record is permanently deleted from Jane, and any paper records are shredded.
Your rights
You have the right to:
access your information and get a copy of it
have it corrected if it is wrong
have it deleted, where this right applies (we may need to keep clinical records for the periods above)
restrict how we use it
object to how we use it
data portability — receive your information in a format you can pass to another provider
To ask for a copy of your information (a subject access request) or to use any of these rights, email admin@poundburychiropractic.com or write to us at the address above.
We will acknowledge your complaint within 30 days, investigate it without undue delay and tell you the outcome. This follows the Data (Use and Access) Act 2025, in force from 19 June 2026.