Osteopathy Online Booking System

Effective Date: 14/04/2026
Last Updated: 14/04/2026

This Privacy Policy explains how First Touch Osteopathy (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use our online booking system and related services.

We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR).

When you use our online booking system, we may collect the following types of personal data:

• Full name
• Date of birth
• Contact details (email address, phone number)
• Address (if provided)

• Medical history relevant to osteopathy treatment
• Current symptoms or conditions
• Treatment notes and assessments

• Appointment dates and times
• Practitioner preferences
• Notes or messages submitted during booking

• IP address
• Browser type and version
• Device information
• Website usage data (via cookies or analytics tools)

We use your personal data for the following purposes:

• To manage and confirm appointments
• To provide osteopathy treatment and maintain accurate health records
• To communicate with you regarding bookings, reminders, or changes
• To improve our services and user experience
• To comply with legal and regulatory obligations

We only process health-related data where necessary for the provision of healthcare services and with appropriate safeguards.

We process your data under the following legal bases:

• Contractual necessity – to provide booking and treatment services
• Legal obligation – to comply with healthcare and record-keeping laws
• Legitimate interests – for business operations and service improvement
• Explicit consent – for processing health (special category) data

We do not sell your personal data. We may share your information with:

• Healthcare professionals within our practice
• Third-party service providers (e.g., booking software, email/SMS providers)
• Regulatory bodies or legal authorities where required

All third parties are required to handle your data securely and in compliance with data protection laws.

We take appropriate technical and organisational measures to protect your data, including:

• Secure servers and encrypted connections (SSL)
• Access controls and authentication procedures
• Regular system monitoring and updates

Your data is stored only for as long as necessary to fulfil the purposes outlined in this policy and to meet legal requirements.

We retain patient records in accordance with professional and legal guidelines, typically:

• Adult records: up to 8 years after last treatment
• Children’s records: until age 25 (or longer if required)

Booking and administrative data may be retained for shorter periods unless required for legal or accounting purposes.

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (where applicable)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where applicable)

To exercise your rights, please contact us using the details below.

Our booking system may use cookies to:

• Enable website functionality
• Improve user experience
• Analyse site traffic

You can manage your cookie preferences through your browser settings.

Our website or booking system may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

If you have any questions about this Privacy Policy or how your data is handled, please contact:

First Touch Osteopathy
51 Houndiscombe Road

Plymouth

PL4 6EX
hello@firsttouchosteo.co.uk

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk

End of Privacy Policy