Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Data collected automatically. When you visit healthyback365.com, we receive certain information about your device: your browser type, your IP address, your time zone, your language setting and details about the cookies on your device. During your visit we also record which pages you view, which website or search term brought you to us and how you use the site. We refer to this as device data.

Data you provide yourself. You can visit the website without telling us who you are. In a few places you can leave data yourself:

• In the practice finder you enter a postcode or town so we can show you partner practices near you.
• If you contact us, we process the data you send us, such as your name, email address, telephone number and the content of your message.

Health data. This website does not ask you for any information about your health. The back scan and the therapy programme are carried out by independent partner practices and practitioners. If you book an appointment with such a practice, that practice processes your health data under its own responsibility and its own privacy policy.

Keeping your data secure is a priority for us. We process as little data as possible, only what is needed to run the website and answer your question. We process your data for the following purposes:

• To provide and secure the website and to detect misuse or malfunctions. Legal basis: our legitimate interest in a working and secure website.
• To answer your question or contact request and to put you in touch with a partner practice. Legal basis: your consent, or steps taken at your request prior to entering into an agreement.
• To improve the website using statistics about how it is used. Legal basis: your consent given through the cookie notice.
• To comply with legal obligations that apply to us. Legal basis: a legal obligation.

We use the automatically collected data solely to identify possible misuse and to compile statistics about the use of the website. Those statistics are not combined in a way that could identify an individual user.

You may choose not to provide personal data. In that case you may not be able to use certain features of the website, for example contacting us directly. If you are unsure which details are required, please write to us at customerservice@hhp-group.com.

Our website uses cookies. A cookie is a small text file placed on your device. Cookies cannot run programmes and cannot place viruses on your device. They are assigned uniquely to you and can only be read by a web server belonging to the domain that placed the cookie.

We distinguish between two kinds:

• Necessary cookies. These are needed for the website to work and to remember your cookie choice. No consent is required for these.
• Optional cookies. We use these for statistics and, where applicable, marketing. We only place them if you consent through the cookie notice.

You can change your choice at any time through the cookie settings on the website, or by deleting the cookies in your browser. If you refuse optional cookies, the website remains fully usable.

The practice finder lets you find partner practices near you based on a postcode or town name. The map is displayed using map data from OpenStreetMap. In doing so, your IP address may be passed to the provider of that map data, which is technically necessary to load the map in your browser.

If you then contact a practice yourself, or submit a contact request through us, we share the data required for that with the practice you have chosen or the one nearest to you. That practice then uses your data under its own responsibility.

We do not sell your personal data. We only share it where necessary:

• With partner practices and practitioners, when you request an appointment or contact. They are independent parties and are themselves responsible for any further processing.
• With service providers working for us, such as our hosting provider and providers of email, mapping and statistics services. They act as processors, solely on our instructions and under a data processing agreement.
• With other companies within our group, insofar as this is necessary for the purposes set out above.
• With competent authorities, where the law requires us to do so.

We do not keep your data longer than necessary for the purpose for which it was collected, or for as long as the law requires.

In principle we process your data within the European Economic Area. Some of our service providers may process data outside the EEA. In that case we put an appropriate safeguard in place, such as the European Commission's standard contractual clauses or a valid adequacy decision, so that your data remains protected there too.

Under the GDPR you have the following rights in relation to your personal data:

• The right to be informed.
• The right of access.
• The right to rectification.
• The right to erasure.
• The right to restrict processing.
• The right to data portability.
• The right to object to processing.
• Rights relating to automated decision-making and profiling.
• The right to withdraw consent at any time, without affecting the lawfulness of processing carried out before that withdrawal.

If you wish to exercise one of these rights, please email us at customerservice@hhp-group.com. We respond within the statutory period of one month. To protect you, we may ask you to prove your identity before we act on your request.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux, Luxembourg. You may also lodge a complaint with the supervisory authority of the country where you live or work.

We store the information you provide on servers in a controlled, secured environment protected against unauthorised access, use or disclosure. We take reasonable administrative, technical and physical measures to protect your data. However, no transmission over the internet or a wireless network can ever be fully guaranteed.

Our website may contain links to websites that we do not own or operate, for example the website of a partner practice. We are not responsible for those websites or for how they handle personal data. We advise you to read the privacy policy of every website you visit after leaving our site.

We disclose the information we collect, use or receive where the law requires or permits it, for example to comply with a court order or similar proceedings, and where we believe in good faith that disclosure is necessary to protect our rights, to protect your safety or that of others, to investigate fraud or to respond to a government request.

We may amend this privacy policy, for example when the website or the law changes. The most recent version can always be found on this page, with the date of the last change shown at the top.

If you would like to know more about this policy, or have a question about your rights and your personal data, contact us at customerservice@hhp-group.com or by post at the address given at the top of this policy.