Privacy policy.

1. What We Do

At Nexus HealthHub, in partnership with Spinecare In Motion Ltd Dr Indra, we provide comprehensive functional medicine and musculoskeletal (MSK) health services aimed at enhancing your well-being through diet, lifestyle interventions, and advanced therapies. Our focus is on preventative healthcare, optimizing physical and mental health, and managing chronic conditions. Through consultations, dietary and lifestyle analysis, biochemical testing, and a range of MSK therapies, we aim to identify and address the root causes of your health issues with personalized dietary therapy, nutraceutical prescriptions (supplements), lifestyle advice, and advanced MSK treatments.

2. How We Obtain Your Personal Data

Information Provided by You

You provide us with personal data in the following ways:

  • By completing a health questionnaire

  • By signing a terms of engagement form

  • During consultations

  • Through email, telephone, or post

  • By online payment

This information may include:

  • Basic details such as name, address, contact information, and next of kin

  • Details of our interactions, including referrals and appointment requests

  • Health information such as previous medical history, dietary habits, lifestyle details, supplement and medicine records, biochemical test results, clinic notes, and health improvement plans

  • GP contact information

  • Bank details

We use this information to provide direct healthcare. The legal basis for holding your personal data is legitimate interest. After your healthcare is completed, we retain your data for the period defined by our professional associations, including the General Chiropractic Council (GCC), General Medical Council (GMC) and BANT, to process any potential complaints. This is in line with our contract administration obligations.

During the booking process: we use a system specifically to book appointments through Nexus HealthHub for your appointment with Spinecare In Motion and Dr Indra. We will then securely transfer your data to each of our own medical patient management systems to keep record of your assessments, management and treatment.

If you require further testing or assessments: we will share your data with your expressed consent with these testing and assessment companies.

SYSTEMS Used to store data:

  • At Nexus HealthHub and Spinecare In Motion, we prioritise your privacy and data security. We use Cliniko to store your personal details. You can review the Cliniko Privacy Policy here.

  • Dr. Indra uses Semble to store your personal and clinical details securely. You can review the Semble Privacy Policy here.

  • Additionally, we may use a transcribing system called Heidi. This AI system allows us to capture detailed information about your consultations to provide you with the best possible care. Please note that no recordings are stored. Using Heidi helps us focus on the things that matter most during your consultation. For more details and Privacy Policy, click here.

Information from Other Sources

We may obtain sensitive medical information from biochemical testing companies to provide you with direct healthcare. The legal basis for holding this data is legitimate interest.

We may also receive sensitive information from other healthcare providers with your express consent. Without this consent, we may not be able to fully coordinate your care, potentially impacting the effectiveness of your treatment.

3. How We Use Your Personal Data

We act as a data controller for your personal data used in providing direct healthcare and as a processor for data from third parties such as testing companies and other healthcare providers. We also act as a data controller and processor in regard to processing credit card and online payments. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and take reasonable measures to secure its storage.

In cases of overriding public interest, such as safeguarding individuals or preventing serious crime, or where required by law, we may use your data. We may also use your data for marketing purposes, such as newsletters, with your express consent.

4. Do We Share Your Information with Other Organizations?

We keep your information confidential and only disclose it with third parties with your express consent, except for:

  • Our registrant bodies, GCC, GMC, and our professional association, BCA and BANT, for processing complaints.

  • Contractors and advisors who provide services to us under confidentiality agreements.

  • Entities to whom we transfer rights and duties under any agreement.

  • Legal or crime prevention agencies when required by law or regulatory requests.

We may share your information with supplement and biochemical testing companies as part of providing direct healthcare, excluding sensitive information. We will seek your consent before sharing your information with your GP or other healthcare providers. In life-threatening situations, we may disclose your information to relevant authorities based on vital interests.

Your case history may be shared in anonymized form for professional development purposes, such as at clinical supervision meetings or in medical publications, with your explicit consent.

5. What Are Your Rights?

You have the right to access, amend, delete, or receive a copy of your personal data, subject to some exceptions. To access your data, make a subject access request in writing to support@nexushealthhub.co.uk. We will respond within 20 working days and provide details of the data we hold, its sources, processing purposes, and any parties with whom we share it.

You can also request to:

  • Have your information deleted or corrected.

  • Stop processing your information where not required by law or guidelines.

  • Receive a copy of your personal data in a structured, commonly used format and transmit it to another controller.

  • Object to the processing of your personal data.

We do not perform automated processing that leads to automated decisions. For any of these requests, write to the Data Controller at Nexus HealthHub, or email support@nexushealthhub.co.uk.

6. What Safeguards Are in Place to Ensure Data Security?

We process personal data in accordance with GDPR, ensuring fairness and lawfulness. We follow the common law duty of confidence, protecting your identifiable information and sharing it only for direct healthcare purposes. We implement security measures to protect data storage and access and ensure external data processors adhere to contractual security requirements.

Nexus HealthHub and Spinecare In Motion Ltd are registered with the Information Commissioner’s Office (ICO) as data controllers. A copy of our registration is available through the ICO website.

7. How Long Do You Retain Confidential Information?

Records are retained according to guidance from our professional associations, GCC, GMC and BANT, for the required duration.

8. Website Technical Details

Forms: We use secure electronic forms on our website. Cookies are used to aid technical functioning and do not collect personal information. For more details on cookies and how to manage them, visit squarespace

Analytics: We use Google Analytics for understanding website trends. This involves no personally identifiable information. For details on their privacy policy, visit the Google website.

9. Complaints

For complaints regarding your personal data, contact the Data Controller at Nexus HealthHub, or email info@nexushealthhub.co.uk. If unresolved, you can escalate the complaint to the ICO at 01625 545745 or 0303 1231113.

Additional Information for Spinecare In Motion Ltd

This Privacy Notice also applies to the Spinecare In Motion Ltd website. The Spinecare In Motion Ltd website is provided for informational and educational purposes and may contain links to other sites. Once you enter another website (whether through an advertisement, service, or content link), please be aware that Spinecare In Motion Ltd is not responsible for the privacy practices of those sites. We encourage you to review the privacy statements of any third-party websites you visit.

Additional Information for Dr Indra

This Privacy Notice also applies to the Dr Indra FMGP website. The Dr Indra FMGP website is provided for informational and educational purposes and may contain links to other sites. Once you enter another website (whether through an advertisement, service, or content link), please be aware that Dr Indra FMGP is not responsible for the privacy practices of those sites. We encourage you to review the privacy statements of any third-party websites you visit.

Transparency Commitment

At Nexus HealthHub, Spinecare In Motion Ltd and Dr Indra, we believe in transparency and appreciate your trust in us. We are committed to clearly communicating how we collect, use, and protect your information. This Privacy Notice outlines our data practices and the measures we take to ensure your information remains secure.