PRIVACY & COOKIE POLICY

Last Updated: 20 January 2026

1. Introduction

Not Just Backs ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy & Cookie Policy outlines how we collect, use, store, and share your personal data when you use our website and services, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

2. Who We Are

  • Business Name: Not Just Backs

  • Registered Company Name: Not Just Backs Limited

  • Address: 107 Exeter Street, Salisbury, SP1 2SF

  • Email: info@notjustbacks.com

  • Phone: 01722 421242

3. What Data We Collect

We may collect and process the following types of data:

a) Information You Provide to Us

  • Personal Identification Information: Name, email, phone number, and address.

  • Medical Information: Details concerning your symptoms, medical history, medication, and treatment. This is classified as Special Category Data under GDPR.

  • Payment Information: Billing details required for processing payments.

b) Information We Collect Automatically

  • Cookies & Tracking Technologies: We use cookies and the Meta Pixel to understand how users interact with our site.

  • Device & Browsing Data: Your IP address, browser type, pages visited, and time spent on our site.

4. How We Use Your Data

We use the data collected for the following purposes:

Purpose Legal Basis
To provide osteopathic care & treatment Contract & Legal Obligation: Article 9(2)(h) for health data.
To communicate about appointments Legitimate Interest
To process payments Performance of Contract
To improve website performance Consent (via Cookie Consent Banner)
Marketing & Advertising (Meta Pixel) Consent (via Cookie Consent Banner)
To comply with legal obligations Legal Obligation

5. Cookies & Meta Pixel

Our website uses cookies to enhance user experience, analyze performance, and support our marketing.

a) How We Use the Cookie Consent Banner

When you first visit our website, our Cookie Consent Banner allows you to choose your preferences.

  • Essential Cookies are loaded automatically to allow the site to work.

  • Non-Essential Cookies (including Analytics and the Meta Pixel) are blocked by default and will only be activated if you click "Accept" or "Allow" on the banner.

b) Meta Pixel & Remarketing

We use the Meta Pixel to measure the effectiveness of our advertising and to show you relevant advertisements on Facebook and Instagram. This tool tracks actions taken on our site and shares this data with Meta Platforms Ireland Ltd. You can manage your ad preferences via your Facebook account settings.

c) Managing or Withdrawing Consent

You can change your mind at any time by clicking the "Decline" option or by clearing your browser cookies to trigger the banner again.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of your data.

  • Right to Rectification: Request corrections to inaccurate data.

  • Right to Erasure: Request data deletion (subject to medical legal retention rules).

  • Right to Object: Opt-out of direct marketing or Meta Pixel tracking.

  • Right to Data Portability: Receive your data in a transferable format.

To exercise these rights, please contact us at caz@notjustbacks.com.

7. How We Protect Your Data

We use encryption, secure clinical management software, and restricted access protocols to ensure your health records and personal details remain confidential.

8. Data Retention Policy

  • Adult Medical Records: Retained for 8 years following your last appointment.

  • Children’s Medical Records: Retained until the patient reaches their 25th birthday (or 26th if the patient was 17 at the conclusion of treatment), as required by UK law.

  • Marketing & Analytics Data: Retained for up to 26 months.

9. Sharing Your Data

We may share your data with:

  • Clinical Software Providers: To securely store your medical notes.

  • Payment Processors: To handle transaction security.

  • Advertising Partners: We share browsing data with Meta (Facebook/Instagram) only if you have provided explicit consent via our cookie banner.

  • Legal Authorities: If required by law.

10. Changes to This Policy

We may update this policy to reflect changes in law or our services. The latest version will always be available on this page.

11. Contact our Data Controller

If you have any questions, please contact:

Email: caz@notjustbacks.com

Address: 107 Exeter Street, Salisbury, SP1 2SF

You also have the right to complain to the Information Commissioner's Office (ICO) (www.ico.org.uk).

If you believe we are processing your data unlawfully, you have the right to complain to the Information Commissioner's Office (ICO) (www.ico.org.uk).