Privacy Policy

1. Who We Are

Clinic name: Rebecca Parish
Telephone: 07919 617 232
Email: Osteopathy@rebeccaparish.co.uk

Rebecca Parish provides osteopathic healthcare services. The clinic is run by a sole principal osteopath and works with self-employed associate osteopaths.

For the purposes of data protection law, Rebecca Parish is the Data Controller.

2. The Information We Collect

a) Personal Information

• Name
• Address
• Telephone number and email
• Date of birth
• GP details
• Emergency contact details

b) Health Information (Special Category Data)

• Medical history and presenting symptoms
• Examination findings and clinical notes
• Diagnosis and treatment records
• Correspondence with other healthcare professionals (e.g. GP or specialist)

c) Administrative Information

• Appointment records
• Payment and invoicing information

3. How We Use Your Information

We use your personal data to:

• Provide safe, appropriate osteopathic care
• Maintain accurate clinical records
• Communicate with you about appointments and treatment
• Make referrals or liaise with other healthcare professionals where appropriate
• Meet legal, regulatory and professional obligations (including GOsC standards)
• Manage clinic administration and payments

4. Lawful Basis for Processing

Under UK GDPR, we process your data on the following lawful bases:

• Provision of healthcare (Article 9(2)(h))
• Legal obligation (professional and regulatory requirements)
• Legitimate interests (clinic administration and communication)
• Consent, where required (e.g. non-essential communications)

5. Associate Osteopaths

Associate osteopaths working at the clinic are self-employed healthcare professionals registered with the General Osteopathic Council (GOsC).

• All associates are required to follow UK GDPR, GOsC standards, and this privacy policy
• Patient information is accessed only for the purposes of providing care
• Clinical records remain confidential and are stored securely by the clinic

6. Sharing Your Information

Your information is treated as confidential. We only share personal data when:

• You have given explicit consent
• It is clinically necessary (e.g. referrals to your GP or another healthcare professional)
• Required by law, safeguarding obligations, or a regulatory authority (such as the GOsC or courts)

We do not sell or use patient data for marketing or commercial purposes.

7. Data Storage & Security

We take appropriate steps to protect your data:

• Paper records are stored securely
• Electronic records are password-protected and encrypted where appropriate
• Access to patient data is limited to authorised practitioners only

8. How Long We Keep Your Data

Patient records are retained in line with professional and legal guidance:

• Adult records: normally kept for 8 years after last appointment
• Children’s records: kept until the patient reaches 25 years of age

Records are securely destroyed after the retention period.

9. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request deletion of data (where legally permissible)
• Restrict or object to processing
• Request a copy of your data in a portable format

Requests should be made using the contact details above. We aim to respond within one month.

10. Complaints

If you have concerns about how your data is handled, please contact us first.

You also have the right to complain to the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
Telephone: 0303 123 1113

11. Changes to This Policy

This privacy policy may be updated from time to time. The most recent version will always be available on our website.

Last updated: 30/01/2026