Privacy Policy

Who we are

Osteorise ("we", "us") is an osteopathy clinic at 51 Mill Lane, London NW6 1NB, United Kingdom. We are the data controller for personal information collected through this website. You can contact us about anything in this policy at info@osteorise.com or on 020 4620 6458.

What we collect and why

Contact form. When you send us a message we collect your name, email address, phone number (if you give it) and the content of your message, so that we can reply to your enquiry. The lawful basis is our legitimate interest in responding to people who contact us. Your message is stored securely in our database (hosted by Supabase in the UK/EU region) and a copy is emailed to the clinic.

Online booking. Appointments are booked through our booking system. The details you enter there (name, contact details, appointment and payment information) are processed to provide your appointment — that is, to take steps at your request before entering into a contract of care.

Facebook and Instagram forms. If you fill in one of our forms on Facebook or Instagram (for example to ask about a first-visit offer), Meta passes us the details you submit: your name, phone number, email address and your answers to the form's questions (such as when you would like to come in and the best time to call). We use them only to contact you about your enquiry, by phone, text, WhatsApp or email, and to help you book. The lawful basis is our legitimate interest in responding to a request you made. These forms do not ask about your health. Meta's own use of data on its platforms is covered by Meta's privacy policy.

Consent to appear in our videos or photos. If you agree to appear in a video or photo we use on our website, social media or advertising, we keep the consent form you sign at osteorise.com/consent: your name, email address, which recording it covers, the uses you agreed to and your signature. We keep it as a record of your consent, which is our lawful basis for using the recording. You can withdraw at any time by emailing info@osteorise.com.

Website analytics. We measure how the website is used with a privacy-focused, first-party system. It uses no cookies, stores no IP addresses, and cannot identify you or follow you across other websites or across days. We record only the page viewed, the time, the type of device (mobile or desktop), and the general source of the visit (for example "search").

Health information. Anything you tell us about your health in a message or during treatment is special category data. We process it only to provide safe osteopathic care, and clinical records are kept in line with our professional obligations as osteopaths regulated by the General Osteopathic Council.

Cookies

This website sets no cookies of its own. Embedded services on some pages — the Google map on the contact page, the Google reviews widget, and the booking system — are provided by third parties and may set their own cookies when they load. Their use of your data is covered by their own privacy policies.

Who we share information with

We do not sell or rent your information to anyone. It is shared only with the service providers that run parts of this website for us: Supabase (database), Vercel (website hosting), Resend (email delivery of your enquiry to us), Google Workspace (our clinic email), and our booking system provider. Each acts under contract as a processor of the data.

How long we keep it

Website enquiries are kept for up to two years so we can refer back to earlier conversations, then deleted. Details from Facebook and Instagram forms that do not lead to an appointment are deleted after twelve months. Signed consent forms for videos and photos are kept for as long as we use the recording and for two years afterwards. Clinical records are kept for the period required by our professional and legal obligations (normally eight years after your last appointment, or until age 25 for children). Analytics data contains nothing that identifies you.

Your rights

You have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to object to or restrict our use of it, and to data portability. To exercise any of these, email info@osteorise.com. If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

If we change how we handle personal information we will update this page and the date at the top.