Data FAQ’s

How we use & protect your personal information

If you have any concerns about how we handle your personal information, please contact us using the details in the contact page. We will investigate your concerns and respond as soon as reasonably practicable. If you remain dissatisfied, you have the right to complain to the Information Commissioner's Office (ICO).

Weybridge Osteopath is the data controller responsible for your personal information.

Contact: Emily Bryant, info@weybridgeosteopath.co.uk, 07876268417, 25 Monument Green, Weybridge, KT13 8QW

We may collect:

  • Personal details (name, contact information, date of birth)
  • Medical history and health information
  • Clinical notes from consultations
  • Audio recording for transcription of notes (with your consent)
  • Appointment and treatment records
  • Payment information
  • Website enquiry information

We use your information to:

  • Provide safe osteopathic care
  • Maintain clinical records
  • Manage appointments and communication
  • Process payments
  • Meet legal and professional obligations

 We process your data under UK GDPR:

  • Article 6(1)(b): providing healthcare services
  • Article 6(1)(c): legal obligations
  • Article 6(1)(f): legitimate business interests

For health data, we rely on:

  • Article 9(2)(h): provision of healthcare

We keep clinical records for a minimum period in line with professional guidance:

  • Adults: up to 8 years after last treatment
  • Children: until age 25 (or 26 if treated at age 17)

If our website uses cookies (e.g. analytics or booking systems), these are used to improve user experience & monitor website performance. You can control cookie settings through your browser. 

We may share your information with:

  • Your GP/consultants or other healthcare professionals involved in your care (with consent where appropriate)
  • Insurers (if applicable)
  • Secure third-party systems (e.g. booking or payment providers - i.e. we frequently use JANE APP, HEIDI AI, STRIPE PAYMENTS, SQUARE PAYMENTS)
  • Private imaging centres (e.g Prime Health, vista diagnostics) 

Your information is stored securely using password encrypted electronic systems and/or secure paper records. Access is strictly limited to only the practitioner involved in your care. 

When you book online, your payment is processed securely through a third party provider (Stripe via Jane app)

If you use our contactless card machine, your payment is processed securely through Square. 

We do not store your full card details on our systems. If you choose to save a card for future bookings/late cancellation protection, these details are securely stored & encryted by the payment providers, not by Weybridge Osteopath.

We only have access to limited information such as the last 4 digits of your card & payment confirmation. We never see or store your full card number or security code. 

Yes. You have the right to request access to the personal information we hold about you and to ask us to correct any inaccurate information. You can also update your communication preferences or withdraw your consent to receive non essential communications at any time. 

You can use your Jane app login to alter your communication preferences.