Contact and identity
Name, date of birth, address or contact details, emergency contact and communication preferences.
Privacy and patient records
This notice explains what Northbridge Osteopathy Clinic collects through the website, clinic and patient portal, why it is needed, and the choices available to you.
Last reviewed: 28 June 2026 · Data controller contact: hello@osteocare.example
Name, date of birth, address or contact details, emergency contact and communication preferences.
Requested and confirmed times, appointment type, attendance, cancellations and administration notes.
Symptoms, history, medication, allergies, examination findings, consent discussions, treatment, outcomes and care plans.
Portal messages, contact enquiries and clinically relevant telephone or email correspondence.
Health information is sensitive “special category” data and receives additional protection. We aim to collect only what is relevant to safe care and clinic administration.
The clinic documents the lawful basis used for ordinary personal data and the additional condition used for health data. Consent to assessment or treatment is a clinical process and is not automatically the same as data-protection consent.
Clinical records are normally retained for at least eight years after the last consultation. Records for children are normally retained until at least their 25th birthday. Some information may be kept longer where legal, safeguarding, insurance or professional requirements apply. Enquiries that do not lead to care are kept only as long as needed for follow-up and governance.
Depending on the circumstances, you may ask for access to your information, correction of inaccurate details, restriction, objection, portability or deletion. Some rights are limited where the clinic must retain a clinical record or protect another person. Contact us to make a request; we may need to confirm your identity.
Northbridge Osteopathy Clinic
Your clinic address and service region
hello@osteocare.example · +00 000 000 0000
You may also raise a concern with the data-protection regulator that applies where the clinic operates.