Our Privacy notice

At Concept Osteopathy, as primary Allied Healthcare Practitioners, we take data protection and confidentiality issues seriously. This Privacy Notice outlines what personal information we collect about you, how we collect it, and how it is used and stored.

We may collect and process the following data about you:

•  Contact and other personal information you provide when booking appointments online or on the telephone.
•  Information about your current and historical health and lifestyle, for the purpose of making informed clinical decisions and providing safe, effective treatment. This information is collected by your osteopath verbally during an appointment.
•  Information from surveys that we may use for research purposes, although you do not have to respond to them.

Your data may be used for:

• Email appointment confirmations and text reminders, to help you remember your appointments.
• Emailing you personalised exercise plans or other relevant health advice.
• Accounting, billing and payment card verification.
• Emailing you about changes to our service.
• Occasional newsletters and marketing promotions. You can also opt out at any time via an unsubscribe link in any marketing emails from us or by emailing info@conceptosteopathy.co.uk
• Anonymised patient health data may be used by us or third party academic research organisations for research purposes.

Confidentiality is a legal requirement of osteopaths, and it is of paramount importance that our patients can trust us with their information. We therefore ensure that:

• Electronic information is stored using specialist medical records software Cliniko, who have assured us that they are fully GDPR compliant. Access to this data is password protected, and passwords are changed regularly. You can view Cliniko’s privacy policy here.
• Practitioners and reception staff only view patient information they need to see.
• We keep confidential who visits our practice, where they live, the date and times of their appointments and any other personal or medical details.

We will not share your data with anyone who does not need access without your written consent.
Only the following people/agencies will have routine access to your data*

:

• Your osteopath in order that they can provide you with treatment and schedule appointments.
• The online medical records service Cliniko who store and process our patient files.  You can view Cliniko’s privacy policy here
• Administrative staff, such as our accountant who may have access to contact details, but not medical notes.
• We also use Mailchimp to coordinate our messages, so your name and email address may be saved on their server.

*Only in the very rare instance of a legal order or where withholding data may pose a serious safety risk, would data ever be shared without your consent.

Osteopaths have a legal obligation to retain patient records for 8 years after their most recent appointment, or in the case of children until they reach 25 years of age (See the Osteopathic Practice Standards). After these time periods, personal data and medical notes will be destroyed.

Karolina Todirjana (Principal Osteopath) is responsible for data protection at Concept Osteopathy, which is registered with the Information Commissioners Office (ICO).  If you have any concerns about how we handle your data, please contact us at info@conceptosteopathy.co.uk

If you are not satisfied with our response, then you have the right to raise the matter with the ICO.