Last updated: September 2026

Who I am

Grounded Chiropractic is run by Melody Mussell, a chiropractor registered with the General Chiropractic Council (registration number 6500), trading as a sole trader in Exeter, Devon. I am the data controller for the personal information described in this policy.

Contact: hello@groundedchiropractic.co.uk ICO registration number: ZC097224

What information I collect

When you contact me or book an appointment, I collect your name, contact details, date of birth and your GP's details.

When you come for care, I keep clinical records. These include your health history, the findings of any examination, your treatment and your progress. They may also include information about your lifestyle, work and activity where it's relevant to your care. Health information is "special category" data under UK data protection law, and I treat it with particular care.

When you visit this website, some technical information (such as your device, browser and pages visited) may be collected through cookies. You can choose which cookies to accept through the cookie banner.

If you buy artwork or prints, I collect the details needed to process and deliver your order. Payment is handled securely by the payment provider, and I never see or store your card details.

Why I use your information, and my lawful basis

I use your information to provide your chiropractic care, keep accurate clinical records, arrange and remind you about appointments, and meet my legal and professional obligations.

Under UK GDPR, my lawful bases are:

to provide the care you've asked for (contract)
to meet legal and regulatory requirements, including GCC standards on record keeping (legal obligation)
for your health information, the provision of health care by a registered health professional bound by a duty of confidentiality (Article 9(2)(h))

I will never use your information for marketing without your consent, and I will never sell it.

Who I share it with

I only share your information when it's necessary. This may include:

your GP or another health professional, with your consent (or where there is a serious risk to you or others)
my professional indemnity insurer or legal advisers, if needed
the GCC or another authority, where I'm legally required to

I also use trusted services to run the practice, which process information on my behalf. These include my online booking system, my email provider (Google Workspace) and my website host (Squarespace). Some of these services may store data outside the UK. Where they do, appropriate legal safeguards are in place.

If you are seen at WildHeart Chiropractic, your records may be held by WildHeart, and WildHeart's own privacy policy will also apply.

How long I keep it

In line with professional guidance, I keep clinical records for at least 8 years after your last appointment. For children, I keep them until their 25th birthday, or for 8 years after their last appointment if that is longer. After that, records are securely destroyed. Other information, such as enquiries, is kept only as long as it's needed.

Keeping it safe

Records are kept securely, with access limited to me. Digital records are password-protected, and paper records are stored securely.

Your rights

You have the right to:

see a copy of the information I hold about you
ask me to correct anything inaccurate
ask me to delete or restrict your information, although I may need to keep clinical records for the legal period above
object to how I use your information
ask for your information to be transferred to another provider

To use any of these rights, email hello@groundedchiropractic.co.uk. I'll respond within one month.

Complaints

If you're unhappy with how I've handled your information, please contact me first. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).