Privacy & Data Protection

Privacy Policy

How Integrative Osteopathy collects, uses and protects your personal and health information.

Effective Date 24 August 2026 Last Reviewed 24 August 2026
Your privacy matters

At Integrative Osteopathy, I am committed to protecting and respecting your privacy. This Privacy and Data Protection Policy explains how I collect, use and protect your personal data when you access my services, as well as your rights regarding your personal data.

01

Who I am

Integrative Osteopathy provides osteopathic care from two clinic locations: Unit 10, Duck Farm Court, Station Way, Aylesbury, HP20 2SQ, and The Studio, Westfield Farm, Mill Lane, Great Brickhill, Milton Keynes, MK17 9BG. I am registered with the General Osteopathic Council (GOsC) and take the responsibility of safeguarding your personal data seriously.

02

What data I collect

I collect and process personal data that is necessary to provide osteopathic care and manage your appointments.

Personal identifiers

Name, address, date of birth, gender and contact information, including telephone number and email address.

Health data

Medical history, current health concerns, treatment details and osteopathic clinical records.

Appointment information

Appointment dates and times, treatment outcomes and information associated with your appointments.

Payment data

Payment information required to process your treatment fees. Credit or debit card information may be processed securely by third-party payment providers.

03

How I use your data

Your personal data may be used for the following purposes:

  • To provide osteopathic treatment: To deliver healthcare services including consultations, treatment, osteopathic diagnosis and follow-up care.
  • To process appointments: To manage, confirm and remind you about scheduled appointments.
  • Billing and payment: To process payments for services and issue receipts where required.
  • To communicate with you: To respond to enquiries, provide updates and communicate information relevant to your treatment.
  • Legal and regulatory obligations: To comply with applicable healthcare laws, regulations and professional standards.
AI
Clinical technology

AI-assisted clinical notetaking

To assist with accurate and efficient clinical documentation, Integrative Osteopathy may use Arlo, an AI-assisted clinical note-taking service.

  • Where Arlo is used, consultation audio may be recorded and processed to generate a draft clinical note.
  • The osteopath remains responsible for reviewing the information generated by Arlo and ensuring that the final clinical record is accurate and appropriate.
  • Information processed may include personal information and health information discussed during your consultation. Health information is considered special category personal data under UK data protection legislation and is subject to additional safeguards.
  • Arlo states that audio is encrypted in transit and at rest and is automatically deleted after processing. Arlo also states that patient data is not used to train its AI models and that data remains within the geographic region selected for the account.
  • Integrative Osteopathy will only use Arlo to assist with clinical documentation and will not use the information for unrelated purposes.
  • Patients will be informed when Arlo is being used and may choose not to have their consultation recorded using Arlo. Declining the use of Arlo will not affect the care provided.
  • The clinic will regularly review the security, privacy arrangements and terms of any AI system used in clinical practice and will update this Privacy Policy where necessary.
  • For further information about how Arlo processes information, please refer to Arlo's current privacy information and terms.
04

How I protect your data

I take appropriate technical and organisational measures to protect your personal information.

Secure storage

Personal and health data is stored securely within the systems used by Integrative Osteopathy.

Data encryption

Appropriate encryption and secure systems are used for online transactions and data transmission.

Access control

Access to personal data is limited to authorised individuals who are required to maintain confidentiality.

05

Data sharing

I do not sell, rent or trade your personal data. However, information may be shared where necessary with:

  • Healthcare providers: With your prior consent, relevant health information may be shared with other healthcare professionals or specialists involved in your care.
  • Payment processors: Billing information may be shared with third-party payment providers where required to process payments.
  • Legal and regulatory bodies: Personal data may be disclosed to regulatory authorities, government agencies or other organisations where required by law.
06

Your rights

Under UK data protection law, you may have the following rights regarding your personal data:

Access Request a copy of the personal data held about you.
Correction Request that inaccurate or incomplete information is corrected.
Erasure Request deletion of your personal data in certain circumstances.
Restriction Ask for the processing of your information to be restricted in certain circumstances.
Data portability Request your information in a structured, machine-readable format where applicable.
Objection Object to certain types of data processing, including direct marketing.
To exercise any of these rights: info@integrativeosteopathy.co.uk
07

Data retention

Your personal and health data will be retained for as long as necessary to provide services, fulfil legal obligations or resolve any disputes.

In accordance with General Osteopathic Council (GOsC) requirements, clinical records are retained for a minimum of eight years following your most recent consultation.

For individuals under the age of 18, records are retained until they reach 25 years of age, or for eight years after their last consultation if treatment continues after they turn 18.

Once personal data is no longer required, it will be securely deleted or anonymised as appropriate.

09

Changes to this policy

I may update this Privacy and Data Protection Policy from time to time to reflect changes in the services provided, legal requirements or the systems used by Integrative Osteopathy.

Updated versions will be published on this website and will take effect from the date stated at the top of the policy.

10
Get in touch

Contact me

If you have any questions or concerns about your privacy, your personal information or how your data is handled, please contact Integrative Osteopathy.

Privacy Policy Last reviewed 24 August 2026