Privacy Policy

Who we are

Osteorise ("we", "us") is an osteopathy clinic at 51 Mill Lane, London NW6 1NB, United Kingdom. We are the data controller for personal information collected through this website. You can contact us about anything in this policy at info@osteorise.com or on 020 4620 6458.

What we collect and why

Contact form. When you send us a message we collect your name, email address, phone number (if you give it) and the content of your message, so that we can reply to your enquiry. The lawful basis is our legitimate interest in responding to people who contact us. Your message is stored securely in our database (hosted by Supabase in the UK/EU region) and a copy is emailed to the clinic.

Online booking. Appointments are booked through our booking system. The details you enter there (name, contact details, appointment and payment information) are processed to provide your appointment — that is, to take steps at your request before entering into a contract of care.

Website analytics. We measure how the website is used with a privacy-focused, first-party system. It uses no cookies, stores no IP addresses, and cannot identify you or follow you across other websites or across days. We record only the page viewed, the time, the type of device (mobile or desktop), and the general source of the visit (for example "search").

Health information. Anything you tell us about your health in a message or during treatment is special category data. We process it only to provide safe osteopathic care, and clinical records are kept in line with our professional obligations as osteopaths regulated by the General Osteopathic Council.

Cookies

This website sets no cookies of its own. Embedded services on some pages — the Google map on the contact page, the Google reviews widget, and the booking system — are provided by third parties and may set their own cookies when they load. Their use of your data is covered by their own privacy policies.

Who we share information with

We do not sell or rent your information to anyone. It is shared only with the service providers that run parts of this website for us: Supabase (database), Vercel (website hosting), Resend (email delivery of your enquiry to us), Google Workspace (our clinic email), and our booking system provider. Each acts under contract as a processor of the data.

How long we keep it

Website enquiries are kept for up to two years so we can refer back to earlier conversations, then deleted. Clinical records are kept for the period required by our professional and legal obligations (normally eight years after your last appointment, or until age 25 for children). Analytics data contains nothing that identifies you.

Your rights

You have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to object to or restrict our use of it, and to data portability. To exercise any of these, email info@osteorise.com. If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

If we change how we handle personal information we will update this page and the date at the top.