​
Last Updated: June 2026
This Privacy Policy explains how Head Shoulders Knees & Toes Chiropractic collects, uses, stores, and protects your personal information.
Head Shoulders Knees & Toes Chiropractic is operated by Krisztina Tomoskozi and Danilo Milic .
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable healthcare regulations.
 
Contact Details
Data Controllers:
Krisztina Tomoskozi and Danilo Milic
Head Shoulders Knees & Toes Chiropractic
Telephone: 020 3326 9386
Email: info@hsktchiropractic.co.uk
If you have any questions regarding this Privacy Policy or how we process your personal information, please contact us using the details above.
 
Information We Collect
To provide safe and effective chiropractic care, we may collect and process the following information:
Personal Information

Name


Date of birth


Address


Telephone number


Email address


Emergency contact details

Health Information

Medical history


Current and past symptoms


Lifestyle information relevant to your care


Examination findings


Diagnosis and treatment records


Imaging reports and referral information where applicable
 

Payment Information
Where payment information is collected through third-party payment providers, your payment details are encrypted and securely processed by those providers. We do not store full card payment details on our systems.
How We Use Your Information
We process your personal information to:

Provide chiropractic assessment, diagnosis, treatment and ongoing care


Maintain accurate patient records


Communicate with you regarding appointments


Send appointment reminders by phone, email or SMS


Contact you regarding your healthcare and treatment plans


Manage payments and administration


Meet our legal, regulatory and professional obligations
 

Legal Basis for Processing
Under UK GDPR, we process your personal information under the following lawful bases:
Contract
Processing is necessary to provide the healthcare services you have requested.
 
Legal Obligation
We are required to maintain healthcare records and comply with professional, legal, regulatory, and insurance requirements.
Healthcare Provision
Special category health data is processed for the purposes of preventative medicine, medical diagnosis, and healthcare treatment.
 
Legitimate Interests
We may contact you regarding appointments, treatment plans, clinic updates, or information relevant to your ongoing care.
Sharing Your Information
Your information will only be shared where necessary and appropriate.
We may share relevant information with:

Other healthcare professionals involved in your care


Your GP or medical specialist (with your consent where appropriate)


Regulatory bodies where legally required


Professional indemnity insurers where necessary


Approved service providers who assist us in operating the clinic

We will never sell your personal information to third parties.
We do not share the contents of your clinical notes with marketing companies or unrelated third parties.
 
Third-Party Service Providers
We may use trusted third-party providers to assist in delivering our services, including:

Patient management software


Online booking systems


Secure payment processors


Email and SMS communication services


Exercise prescription platforms

These providers only process information necessary to deliver their services and are required to maintain appropriate security standards.
Jane App, further information can be found at:
https://jane.app/legal/privacy-policy
Our website is hosted by Wix, further information can be found at:
https://www.wix.com/about/privacy
 
Website and Cookies
Our website may use cookies and analytics tools to help us understand how visitors use the site and improve user experience.
Where required, you will be given the option to accept or decline non-essential cookies through our cookie consent banner.
 
Storage and Security
We take appropriate technical and organisational measures to protect your personal information.
Your information is stored securely using password-protected systems and encrypted services where appropriate.
Access to your information is restricted to authorised personnel who require access to provide healthcare services or administer the clinic.
 
Retention of Records
Healthcare records are retained in accordance with professional and legal requirements.
In most circumstances, adult patient records will be retained for a minimum of eight years after your last treatment appointment.
Where legal, regulatory, insurance, or clinical requirements dictate, records may be retained for longer periods.
At the end of the retention period, records will be securely destroyed.
 
Your Rights
Under UK GDPR, you have the right to:

Be informed about how your information is used


Access the personal information we hold about you


Request correction of inaccurate information


Request restriction of processing in certain circumstances


Object to certain types of processing


Request deletion of your information where legally permissible


Request transfer of your information to another organisation where applicable

Please note that healthcare providers may be legally required to retain certain records even where deletion is requested.
Complaints
If you are unhappy with how we handle your personal information, please contact us first so that we can attempt to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Website: https://www.ico.org.uk
Telephone: 0303 123 1113
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legislation, professional requirements, or the services we provide.
The latest version will always be available on our website.
Contact Us
Head Shoulders Knees & Toes Chiropractic
Data Controllers:
Krisztina Tomoskozi and Danilo Milic
Telephone: 020 3326 9386
Email: info@hsktchiropractic.co.uk
If you would like:

A copy of the information we hold about you


To update your personal details


To exercise any of your data protection rights


Further information regarding this Privacy Policy

please contact us using the details above.