Privacy Policy

1. Who we are

This website, onechiropracticgroup.com (the “Website”), is operated by:

One Chiropractic Group L.L.C-FZ

Meydan Grandstand, Shared Desk, 6th Floor

Meydan Road, Nad Al Sheba

Dubai, United Arab Emirates

Licensed by the Meydan Free Zone Authority, trade licence no. 2424051.01

In this policy, “ONE Chiropractic Group”, “we”, “us” and “our” refer to One Chiropractic Group L.L.C-FZ. We are the controller of the personal data described in this policy.

For any question about this policy or your personal data, contact us at consulting@onechiropracticgroup.com.

2. Which laws apply

We are a company established in the Meydan Free Zone, Dubai. We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations. When we contact people in the UAE by phone or message, we also follow the UAE rules on telemarketing (Cabinet Resolution No. 56 of 2024) and the guidelines of the Telecommunications and Digital Government Regulatory Authority (TDRA).

Because our network operates in the European Union, we also apply the EU General Data Protection Regulation (GDPR) to personal data of people located in the EU, and the UK GDPR to people located in the United Kingdom. Where these laws differ, we apply the rule that gives you the stronger protection.

3. What personal data we collect

3.1 Data you give us

When you fill in an enquiry form on the Website, we collect:

• your name
• your email address
• your phone number

and any information you choose to include in your message. We do not ask for health information through the Website. Please do not include health or medical details in an enquiry form.

3.2 Data collected automatically

When you visit the Website, and only where you have given consent through our cookie banner, we and our partners collect technical and usage data through cookies and similar technologies, such as:

• IP address (shortened or anonymised where the tool allows it)
• browser type, device type and operating system
• pages visited, time spent on pages, and how you reached the Website
• interactions with our advertising on Meta platforms (Facebook and Instagram)

See section 7 for details on cookies.

4. Why we use your data and our legal basis

We do not use your data to make decisions about you based solely on automated processing.

4.1 Calls and messages

If you give us your phone number, we will use it to reply to your enquiry by call, SMS or WhatsApp. We will only send you promotional calls or messages if you have opted in to receive them. Calls to UAE numbers are made only during the hours allowed by UAE telemarketing rules, from numbers registered to our company. If you tell us you do not want further calls or messages, we will stop. You can opt out of promotional messages at any time by replying STOP, using the unsubscribe link in our emails, or writing to us.

5. Who we share your data with

We do not sell your personal data. We share it only with the service providers that help us run the Website and our business, and only as far as they need it:

• HighLevel, Inc. (United States). Our enquiry forms and customer relationship management system run on HighLevel. When you submit a form, your details are stored in HighLevel so that we can receive, answer and manage your enquiry. HighLevel acts as our processor under its Data Processing Agreement and processes your data only on our instructions. HighLevel uses its own sub-processors (for example for email and SMS delivery), listed at gohighlevel.com/sub-processors.
• Google Ireland Limited / Google LLC. Provider of Google Analytics.
• Meta Platforms Ireland Limited / Meta Platforms, Inc. Provider of the Meta Pixel. For the collection and transmission of data through the Meta Pixel, we and Meta are joint controllers. Meta’s own processing is described in the Meta Privacy Policy at facebook.com/privacy/policy.
• Our franchise studios and partners within the ONE Chiropractic network, where your enquiry concerns a specific studio or location and you have asked to be put in contact with it.
• Professional advisers and authorities, such as lawyers, accountants or public authorities, where required by law or to protect our rights.

6. International transfers

Your data may be transferred to and stored in countries outside the one where you live, including the United Arab Emirates, the European Union and the United States. Our enquiry system (HighLevel) stores data in the United States.

• Transfers from the UAE. Where data is transferred to a country that has not been recognised by the UAE Data Office as offering an adequate level of protection, we only transfer it under a written contract that requires the recipient to protect your data to the standards of the PDPL, including the data processing agreements we have with HighLevel, Google and Meta. Where the law requires it, we will ask for your express consent to the transfer.
• Transfers from the EU or UK. Where data is transferred to a country that does not have an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) included in our providers’ data processing agreements, or the EU-US Data Privacy Framework where the provider is certified under it.

You can ask us for more information about these safeguards by writing to the contact address in section 1.

7. Cookies and similar technologies

We use the following categories of cookies:

• Strictly necessary cookies. Needed for the Website and the enquiry forms to work. These do not require consent.
• Analytics cookies (Google Analytics). Help us understand how visitors use the Website. Set only with your consent.
• Marketing cookies (Meta Pixel). Allow us to measure our ads and show relevant ads on Facebook and Instagram. Set only with your consent.

When you first visit the Website, a cookie banner lets you accept or reject non-essential cookies. You can change your choice at any time using the “Cookie settings” link in the Website footer, or by deleting cookies in your browser settings. You can also opt out of Google Analytics using Google’s browser add-on at tools.google.com/dlpage/gaoptout.

8. How long we keep your data

• Enquiry and contact data: for as long as we are in contact with you, and then for up to 36 months after your last interaction with us (for example your last email, call, meeting or form submission). Each new interaction restarts this period. After that, we delete or anonymise the data.
• If you become a franchisee, client or partner: for the duration of our contract and afterwards for as long as required by applicable law (for example tax, accounting and commercial record-keeping rules).
• Marketing communications: until you unsubscribe or withdraw your consent. We keep a record of your opt-out so we can respect it.
• Analytics and advertising data: according to the retention settings of Google Analytics (maximum 14 months) and Meta.

9. Your rights

Under the PDPL and, where it applies, the GDPR, you have the right to:

• receive information about the data we hold about you, why we use it, who we share it with and how we protect it when it is transferred abroad, free of charge
• access a copy of the personal data we hold about you
• have inaccurate data corrected and incomplete data completed
• have your data deleted when we no longer need it or when you withdraw your consent
• restrict our processing, or ask us to stop processing your data, including at any time for direct marketing
• receive your data in a structured, machine-readable format and have it transferred to another organisation
• object to decisions based solely on automated processing (we do not make such decisions)
• withdraw your consent at any time, without affecting processing that took place before you withdrew it
• lodge a complaint with the UAE Data Office, or with the supervisory authority in the EU or UK country where you live or work

To exercise any of these rights, email consulting@onechiropracticgroup.com. We will reply within the time limits set by applicable law, and in any case within 30 days. We may ask you to confirm your identity before acting on a request. Requests are free of charge unless they are clearly unfounded or excessive.

10. Security

We use appropriate technical and organisational measures to protect your personal data, including access controls and the security measures of our service providers. No transmission over the internet is completely secure, but we work to protect your data from loss, misuse and unauthorised access. If a personal data breach puts your privacy or rights at risk, we will notify the UAE Data Office and any other competent authority, and inform you where the law requires it.

11. Children

The Website is aimed at adults and professionals. We do not knowingly collect personal data from anyone under 18 through the Website.

12. Links to other websites

The Website may link to other websites, including the websites of individual studios in our network. We are not responsible for the privacy practices of websites we do not operate.

13. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was last changed. Significant changes will be shown on the Website. If a change means we want to use your data for a new purpose that needs your consent, we will ask for it first.

14. Language

This policy is written in English. If we provide a translation, the English version applies in case of any difference, unless the law requires otherwise.