Privacy and patient records

How we use your information

This notice explains what Northbridge Osteopathy Clinic collects through the website, clinic and patient portal, why it is needed, and the choices available to you.

Last reviewed: 28 June 2026 · Data controller contact: hello@osteocare.example

Development notice: the clinic must have this privacy notice reviewed against its actual suppliers, lawful bases and jurisdiction before accepting real patient data.

Information we collect

Contact and identity

Name, date of birth, address or contact details, emergency contact and communication preferences.

Appointment information

Requested and confirmed times, appointment type, attendance, cancellations and administration notes.

Health and care records

Symptoms, history, medication, allergies, examination findings, consent discussions, treatment, outcomes and care plans.

Communications

Portal messages, contact enquiries and clinically relevant telephone or email correspondence.

Health information is sensitive “special category” data and receives additional protection. We aim to collect only what is relevant to safe care and clinic administration.

How and why we use it

  • to respond to enquiries, arrange appointments and administer the clinic;
  • to assess, provide and review osteopathic care, including communicating relevant advice;
  • to maintain complete, accurate and timely clinical records;
  • to meet legal, professional, insurance, safeguarding and accounting requirements;
  • to protect patients, staff and the security of our services.

The clinic documents the lawful basis used for ordinary personal data and the additional condition used for health data. Consent to assessment or treatment is a clinical process and is not automatically the same as data-protection consent.

Sharing and security

Access is limited to people who need the information for care or clinic administration. We may use contracted providers for secure hosting, backups or communication. We may also share relevant information with another healthcare professional, insurer, legal adviser or authority when you ask us to, when the law requires it, or when a serious safety concern justifies it. We limit disclosure to what is necessary and record clinically relevant disclosures.

We use access controls, encrypted transport, backups and operational safeguards. No internet service is risk-free; contact us promptly if you believe your portal or information has been compromised.

How long records are kept

Clinical records are normally retained for at least eight years after the last consultation. Records for children are normally retained until at least their 25th birthday. Some information may be kept longer where legal, safeguarding, insurance or professional requirements apply. Enquiries that do not lead to care are kept only as long as needed for follow-up and governance.

Your rights

Depending on the circumstances, you may ask for access to your information, correction of inaccurate details, restriction, objection, portability or deletion. Some rights are limited where the clinic must retain a clinical record or protect another person. Contact us to make a request; we may need to confirm your identity.

Questions or concerns

Northbridge Osteopathy Clinic
Your clinic address and service region
hello@osteocare.example · +00 000 000 0000

You may also raise a concern with the data-protection regulator that applies where the clinic operates.