Privacy Policy

Privacy Policy
Last Updated: [20 February 2025]

1. Introduction
Welcome to Costaspine. We are committed to protecting your privacy and ensuring that your personal data is handled securely and responsibly. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our chiropractic services.

2. Data Controller
Costaspine, located in Marbella, Spain, is the data controller responsible for processing your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

3. Information We Collect
We may collect the following types of personal data:

  • Personal Identification Information: Name, email address, phone number, and postal address.

  • Health Information: Medical history and health-related data provided during consultations.

  • Payment Details: If you make payments for our services, we may process your billing details.

  • Technical Data: IP address, browser type, and usage data when you visit our website.

4. How We Use Your Information
We use your personal data for the following purposes:

  • To provide and manage our chiropractic services.

  • To communicate with you regarding appointments, inquiries, or updates.

  • To process payments for our services.

  • To improve our website, services, and customer experience.

  • To comply with legal and regulatory obligations.

5. Legal Basis for Processing
We process your data based on one or more of the following legal grounds:

  • Your consent (e.g., for marketing communications).

  • Contractual necessity (e.g., providing chiropractic services).

  • Legal obligations (e.g., compliance with health regulations).

  • Legitimate interests (e.g., improving our services).

6. Data Sharing and Disclosure
We do not sell or rent your personal data. However, we may share your information with:

  • Healthcare professionals involved in your treatment.

  • Payment processors to facilitate transactions.

  • Legal authorities if required by law.

  • IT service providers to support our website and systems.

7. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law.

8. Your Rights
Under GDPR, you have the right to:

  • Access, correct, or delete your personal data.

  • Withdraw consent for processing (where applicable).

  • Object to or restrict data processing.

  • Request data portability.

  • Lodge a complaint with a data protection authority.

9. Data Security
We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

10. Cookies and Tracking Technologies
Our website may use cookies to enhance user experience. You can manage cookie preferences in your browser settings.

11. Third-Party Links
Our website may contain links to external websites. We are not responsible for their privacy practices and encourage you to review their policies.

12. Updates to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date.

13. Contact Us
If you have any questions about this Privacy Policy or your personal data, please contact us.

Make a Booking