Privacy policy
Last updated 12 October 2026
Draft for checking before the site goes live. The parts in dashed boxes need the owner's details or decision.
The short version
- We only collect what we need to book and look after your home visit: your name, phone number, email, home address, and any health details you choose to tell us.
- Bookings go into our diary on PracticeHub. Calls and chats with our automated receptionist are recorded and kept for 7 days.
- We use your details to arrange your visit, contact you about it, and treat you. We never sell them or use them for adverts.
- This website sets no cookies, so there's no cookie banner.
- You can ask to see, correct or delete your information at any time: ismail@akhchirowellness.com.
The details are below.
Who we are
AKH Chiropractic & Wellness is a trading name of ISHY & ASSOCIATES LTD, a company registered in England and Wales, company number 17180552. The company decides how your information is used, so it is the "controller" under UK data protection law. Your care is provided by its director, Ismail Hassan, a chiropractor registered with the General Chiropractic Council (registration number 06577).
Contact: ismail@akhchirowellness.com · 07379 560779 · Registered office: 184 Rutland Road, Sheffield, S3 9PP
What we collect and why
| Information | Why we use it | Our lawful basis |
|---|---|---|
| Your name, mobile number, email (optional), home address and postcode, and any access or parking notes | To book, confirm and carry out your home visit, and to contact you about it | To take steps you ask for before a contract, and to perform the contract (UK GDPR Article 6(1)(b)) |
| Health information: the reason for your visit, any health questions you choose to answer before your first visit, and your assessment and treatment records | To provide safe and appropriate chiropractic care | Article 6(1)(b), and for health information Article 9(2)(h) (providing health care, by or under the responsibility of a registered health professional who owes you a duty of confidentiality), with the Data Protection Act 2018, Schedule 1, paragraph 2 |
| Phone calls and website chats with our automated receptionist: the recording or written transcript, and a short summary | To answer your questions, book your visit, and check the receptionist is working safely | Article 6(1)(b), and our legitimate interest in running a safe, accurate booking service (Article 6(1)(f)); for any health details, Article 9(2)(h) |
| Payment details | To take payment by a secure Stripe link. Card details go to Stripe; we never see your full card number | Article 6(1)(b), and keeping financial records the law requires (Article 6(1)(c)) |
| The postcode you type into "Do we visit you?" | To work out how far you are from us. We don't store it | Our legitimate interest in answering your question (Article 6(1)(f)) |
We only ask for what we need. We never ask for card details, and the automated receptionist never asks for your date of birth. Health questions before your first visit are optional: you can skip any of them or go through them with Ismail at the visit instead.
Our automated receptionist
Our phone line and the call and chat options on this website are answered by an automated AI assistant. It can answer questions about visits and prices, offer free times from Ismail's diary, book your visit, and, if you agree, take a few health details before your first visit. It does not give medical advice and does not make decisions about your care. Calls are recorded. Recordings, transcripts and summaries are kept by our receptionist provider for 7 days and then deleted; anything needed for your care is kept in your patient record. Health answers are saved as a draft note that Ismail checks with you at your visit.
Who we share it with
We don't sell your information or use it for advertising. These providers handle it for us, only on our instructions:
| Provider | What they do | Where |
|---|---|---|
| PracticeHub | Our diary, online booking and patient records | UK (London data centre) |
| Retell AI | Runs the automated receptionist (phone and chat), using an AI language model to understand and reply | USA |
| Twilio | Our receptionist's phone line, and the link between the receptionist and our diary | USA and Ireland |
| Stripe | Card payments by payment link | Ireland and USA |
| Hostinger | Hosts this website and our business email | UK (website server, Manchester); email in Hostinger's data centres |
| Anthropic (Claude) | An AI assistant Ismail uses for practice admin, such as checking the diary. It can see diary entries (names and visit times), not clinical notes | USA |
| postcodes.io | Looks up the postcode you type into "Do we visit you?" | UK |
| Google Fonts, jsDelivr and OpenFreeMap | Deliver this website's lettering, map code and map pictures. They receive your device's internet address when your browser loads them | Worldwide networks |
We may also share information with your GP or another health professional if you ask us to or agree, with the General Chiropractic Council or a court if the law requires it, or in an emergency to protect your life.
Outside the UK: some providers handle your information in the USA. Twilio and Stripe are certified under the UK–US "data bridge" (the UK Extension to the EU–US Data Privacy Framework), which UK law treats as giving adequate protection. Retell AI and Anthropic protect it under their data processing terms, using the contract clauses approved for transfers from the UK. Hostinger keeps this website on a UK server and handles our email under its data processing agreement, which covers UK data protection law and transfers from the UK. true once these 2 are done before go-live: Retell data processing agreement signed; Claude on a business plan with a data processing agreement (see the go-live checklist)
How long we keep it
- Patient records: 8 years after your last visit. For children, until their 25th birthday, or their 26th if they were 17 when treatment ended, as the General Chiropractic Council requires.
- Receptionist recordings, transcripts and summaries: 7 days at our receptionist provider.
- Enquiries that don't lead to a visit: 12 months, then deleted.
- Payment and accounts records: 6 years, as tax law requires.
Your rights
You can ask us to give you a copy of your information, correct it, delete it, limit how we use it, object to how we use it, or move it to another provider. Some rights have limits: for example, we must keep patient records for the period above even if you ask us to delete them. Where we rely on your permission, you can withdraw it at any time. We'll reply within one month. Contact ismail@akhchirowellness.com.
If you're unhappy with how we've used your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.
Keeping it safe
Patient records are kept in PracticeHub, protected by a password and access keys that can be switched off at any time. Our providers protect information in transit and at rest and may only use it on our instructions. Clinical notes are written and read by Ismail; the automated receptionist can add a draft before your first visit but cannot read your clinical notes.
Cookies
This website doesn't use cookies or analytics. See our cookie policy.
Changes
We'll update this page if anything changes and show the date at the top.