Last updated: 12 September 2026

This policy explains how the Chiropractic Health and Dietetics Center collects and uses your personal data when you visit this website or request an appointment. We are the data controller for that information.

What we collect

When you submit the booking form we collect your name, email address, telephone number, your preferred appointment date, and whatever you choose to tell us in the “What brings you in?” field.

Anything you write about your symptoms, pain, injuries, diet or medical history is health data. Under the GDPR this is a special category of personal data and receives additional protection. Please share only what you are comfortable sending by email, and keep detailed medical history for your consultation.

Our hosting provider also records standard technical information such as your IP address, browser type and the pages you visit, which is used to keep the site secure and working correctly.

Why we use it, and our legal basis

• To respond to your booking request — so we can contact you, confirm a time, and prepare for your visit. Our basis is your consent, given when you submit the form, and taking steps at your request before entering into a contract.
• Health information you send us — processed on the basis of your explicit consent, and where relevant for the purposes of preventive or occupational medicine and the provision of health care under Article 9(2)(h) of the GDPR.
• To keep the website secure — spam and abuse prevention, and server logs, on the basis of our legitimate interest in protecting the site and the people who use it.

Who else processes your data

We use a small number of service providers who process data on our behalf under contract:

• Brevo (Sendinblue SAS, France) — delivers the notification email generated by the booking form.
• Cloudflare — content delivery, security filtering, and the Turnstile anti-spam check on the booking form.
• Our hosting provider — servers located in the European Union.

We do not sell your personal data, and we do not use it for advertising. Where a provider processes data outside the European Economic Area, that transfer is covered by the European Commission’s Standard Contractual Clauses.

How long we keep it

Booking enquiries that do not lead to an appointment are deleted once they are no longer needed. If you become a patient, your clinical records are retained for the period required of healthcare providers under Cypriot law. You can ask us at any time what we hold about you.

Cookies

This site does not use advertising or tracking cookies. If you switch between English and Greek, a cookie remembers your choice. Cloudflare Turnstile may store a short-lived token to confirm that a form submission came from a person rather than a bot.

Your rights

You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time. Withdrawing consent does not affect anything done before you withdrew it.

To exercise any of these, email info@magdalinichiropractic.cy. If you are not satisfied with our response, you can complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

Security

The site is served over an encrypted connection and access to booking enquiries is limited to the practitioner. No method of transmission over the internet is completely secure, so please do not send us sensitive medical detail you would prefer to discuss in person.

Changes to this policy

If this policy changes we will update the date at the top of this page.