top of page

Privacy Policy & Cookies

Data Privacy Policy

1. Personal data

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the ‘GDPR’).

2. Data Controller

Edward and Katarina Stenner are the data controllers (contact details below). This means they decide how your personal data is processed and for what purposes.

Exmoor Osteopathy is registered with the ICO.

3. How do we process your personal data?

We comply with our obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

We use personal data for the following purposes:

  • to reply to any questions asked by contact made through the website (i.e. by the contact form);

  • to process orders/contracts/appointments/treatment with us;

  • to administer customer/client records;

  • to maintain our accounts and records;

  • to inform you of news and events relevant to your work/contract with us.

 

For the purposes of providing treatment, we may require detailed medical information. We will only collect what is relevant and necessary for your treatment. When you visit our practice, we will make notes which may include details concerning your medication, treatment and other issues affecting your health. This data is always held securely, is not shared with anyone not involved in your treatment. To be able to process your personal data it is a condition of any treatment that you give your explicit consent to allow us to document and process your personal medical data. Contact details provided by you such as telephone numbers, email addresses, postal addresses may be used to remind you of future appointments and provide reports or other information concerning your treatment.

We will only collect the information needed so that we can provide you with the services you require, the business does not sell or broker your data.

We may pass your information to third party service providers who we have engaged for the purpose of completing tasks and providing services to you on our behalf. I disclose only the personal information that is necessary to deliver the service.

We use Cliniko (https://www.cliniko.com/) to help arrange our appointments, etc. Some of your personal data may be stored on their systems.

We Use Mailchimp (https://www.mailchimp.com) to send out email newsletters and updates. You can unsubscribe from these at any time.

We have verified that these third party services are GDPR compliant (or are working towards GDPR compliance), and are certified under the EU-US Privacy Shield Framework (or are working towards certification) where these organisations are based outside of the EU.

4. What is the legal basis for processing your personal data?

  • Contractual Necessity so that we can reply to you;

  • Processing is necessary for carrying out obligations to your work/contract with us;

  • Legitimate interest to respond to enquiries concerning the services provided.

5. Sharing personal data

Your personal data will be treated as strictly confidential. I will only share your data with third parties with your consent.

6. How long do we keep data?

We will process personal data during the duration of any treatment and will continue to store only the personal data needed for eight years after the contract has expired to meet any legal obligations. After eight years all personal data will be deleted, unless basic information needs to be retained to meet our future obligations to you, such as erasure details. Records concerning minors who have received treatment will be retained until the child has reached the age of 25.

7. Your rights and your personal data

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

  • The right to request a copy of the personal data which Get Natural holds about you;

  • The right to request that Get Natural corrects any personal data if it is found to be inaccurate or out of date;

  • The right to request your personal data is erased where it is no longer necessary for Get Natural to retain such data;

  • The right to withdraw your consent to the processing at any time;

  • The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;

  • The right to object to the processing of personal data;

  • The right to lodge a complaint with the Information Commissioners Office.

 

8. Further processing

If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

9. Contact Details

To exercise all relevant rights, queries of complaints please, in the first instance, contact Edward and Katarina Stenner at exmoor.osteopathy@gmail.com

You can contact the Information Commissioners Office on 0303 123 1113, or via email via https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

Use of Cookies

Cookies are small text files that are placed on your computer by websites that you visit.

 

To learn more about cookies, you can visit www.aboutcookies.org. You will also find details on how to block and delete cookies from your computer as well as more general information about cookies. For information on how to do this on the browser of your mobile phone you will need to refer to your handset manual.

The Cookies We Use

Wix – These cookies are set by Wix, the service which runs our website. They are necessary for its function. View Wix's Privacy Policy...

Notification of Changes

If we decide to change our privacy policy, we will post those changes on the this website.

External Links

We are not responsible for the availability or content of external sites that may be linked to, from the site. If you find a broken link or if you have any questions or concerns about a link, please contact us.

bottom of page