Who is responsible
The data controller is Sarah Monaghan, trading as The English Chiropractor, NIF/NIE Y7920999C, based in Mijas Costa, Málaga, Spain. You can contact Sarah at [email protected] or by phone on +34 711 079 431.
Information you provide
The contact form asks for your name, email address, optional phone number, the general service you are interested in and a short message. Please do not use the website form to send detailed medical information. Relevant health information can be discussed privately during the normal clinical process.
How contact details are used
Contact details are used only to respond to your enquiry and arrange an appointment. The website does not create a marketing profile or add form submissions to a mailing list.
Legal basis
Enquiry details are processed to answer your request and take steps you ask us to take before a possible appointment, under Article 6(1)(b) of the GDPR. Basic security and abuse-prevention processing is carried out for the legitimate interest of keeping the website and contact form secure under Article 6(1)(f). Google Analytics is used only after consent under Article 6(1)(a), and that choice can be changed from the cookie policy.
Service providers
The website is hosted by Cloudflare. Cloudflare Turnstile protects forms from automated abuse. When production email delivery is enabled, SMTP2GO transmits the enquiry to the clinic. These providers process limited technical or message data only to provide their services. Google processes website usage information only after analytics permission is given. Where a provider processes data outside the European Economic Area, the clinic requires an appropriate lawful transfer mechanism from that provider.
Security and retention
The website uses encrypted HTTPS connections, same-origin checks, bot protection and rate limiting. Form content is not stored in a website database or application log. Enquiry emails are retained only while needed to respond and arrange an appointment. They may be kept longer where required for a clinical record, a legal obligation or the establishment, exercise or defence of legal claims.
Your rights
Under applicable data-protection law you may ask to access, correct or erase personal data, or object to or restrict certain processing and, where applicable, request data portability. Contact [email protected] to make a request. You may also complain to the Spanish Data Protection Agency (AEPD).