Privacy Policy

Last updated: 18/06/2025

1. Introduction

Cameron Mitchell Osteopaths (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website at https://cameronmitchellosteopaths.digitaledgehostingservices.com/ or use our services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Cameron Mitchell Osteopaths is the data controller for the purposes of data protection law.

Contact Details:

  • Name: Duncan Cameron-Mitchell
  • Email: d.cameronmitchell@btinternet.com
  • Telephone: 07737 436454

3. Information We Collect

3.1 Personal Information

When you use our services or website, we may collect:

  • Contact Information: Name, address, telephone number, email address
  • Medical Information: Health history, symptoms, treatment records, clinical notes
  • Appointment Information: Preferred appointment times, scheduling preferences
  • Payment Information: Billing details (we do not store full card details)
  • Website Usage: IP address, browser type, pages visited, time spent on site

3.2 How We Collect Information

We collect information through:

  • Direct contact during consultations or appointments
  • Online appointment booking forms
  • Telephone conversations
  • Email correspondence
  • Website cookies and analytics

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: For marketing communications and non-essential website features
  • Contract: To provide osteopathic treatment and related services
  • Legal Obligation: To comply with professional regulatory requirements
  • Vital Interests: In emergency medical situations
  • Legitimate Interests: For practice administration and improving our services

5. How We Use Your Information

5.1 Medical Treatment

  • Providing osteopathic diagnosis and treatment
  • Maintaining accurate medical records
  • Coordinating care with other healthcare providers (with your consent)
  • Following up on treatment progress

5.2 Practice Administration

  • Scheduling and managing appointments
  • Processing payments
  • Sending appointment reminders
  • Managing patient records

5.3 Legal and Professional Requirements

  • Complying with General Osteopathic Council (GOsC) standards
  • Meeting professional indemnity insurance requirements
  • Responding to legal requests where required

5.4 Communication

  • Sending appointment confirmations and reminders
  • Providing treatment-related information
  • Marketing communications (only with your consent)

6. Sharing Your Information

We may share your information with:

6.1 Healthcare Professionals

  • Other osteopaths or healthcare providers involved in your care (with your consent)
  • Your GP (with your consent)
  • Emergency services if required for your safety

6.2 Service Providers

  • IT support and website hosting providers
  • Appointment booking system providers
  • Payment processing services
  • Professional advisers (accountants, solicitors)

6.3 Legal Requirements

  • Regulatory bodies (GOsC) where required
  • Courts or tribunals where legally required
  • Law enforcement agencies where legally required

We ensure all third parties have appropriate data protection measures in place.

7. Data Retention

We retain your information for the following periods:

  • Adult Patient Records: 8 years from last treatment
  • Child Patient Records: Until the patient’s 25th birthday, or 8 years from last treatment (whichever is longer)
  • Website Analytics: 26 months
  • Marketing Consents: Until withdrawn or 3 years of inactivity

8. Your Rights

Under UK GDPR, you have the following rights:

8.1 Right of Access

You can request copies of your personal data.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

8.3 Right to Erasure

You can request deletion of your data in certain circumstances.

8.4 Right to Restrict Processing

You can request limitation of how we use your data.

8.5 Right to Data Portability

You can request transfer of your data in a structured format.

8.6 Right to Object

You can object to processing for direct marketing or legitimate interests.

8.7 Rights Related to Automated Processing

You have rights regarding automated decision-making and profiling.

To exercise these rights, please contact us using the details provided above.

9. Website Cookies

Our website uses cookies to:

  • Remember your preferences
  • Analyse website traffic
  • Improve user experience

You can control cookies through your browser settings. Some website functionality may be limited if you disable cookies.

10. Data Security

We implement appropriate technical and organisational measures to protect your data:

  • Secure encrypted connections (SSL)
  • Regular security updates and patches
  • Access controls and staff training
  • Secure data storage and backup systems
  • Professional indemnity and cyber liability insurance

11. International Transfers

We do not routinely transfer personal data outside the UK. If international transfers are necessary, we ensure appropriate safeguards are in place.

12. Children’s Privacy

We take special care with children’s data. For patients under 16, we require parental consent for treatment and data processing.

13. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on our website with an updated revision date.

14. Complaints

If you have concerns about how we handle your personal data, you can:

  1. Contact us directly using the details above
  2. Complain to the Information Commissioner’s Office (ICO):
    • Website: ico.org.uk
    • Telephone: 0303 123 1113
    • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

15. Professional Standards

As registered osteopaths, we adhere to the General Osteopathic Council’s Code of Practice and Standard of Proficiency, which includes strict confidentiality requirements.

16. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

Email: d.cameronmitchell@btinternet.com
Telephone: 07737 436454