Last updated: 30 October 2025
Controller: Andy Breakspear at Breakspear Osteopathy & Pilates Clinic

Address:
The Pippin, Cherry Close
Prestwood
Great Missenden
Bucks HP16 0QD
United Kingdom

Email: breakspearclinic@osteopilates.co.uk
Telephone: 01494 813700
Data Protection Officer / Data Lead: Andy Breakspear

Breakspear Osteopathy & Pilates Clinic (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, share, and protect your personal information, and your rights under UK data-protection law.

1. Legal Basis

We process personal data under the UK-GDPR and Data Protection Act 2018. Health information is special-category data and receives enhanced safeguards.

2. Information We Collect

We collect only what is necessary to provide safe and effective osteopathy and Pilates services:

• Contact details (name, address, telephone, email)
• Date of birth and identity information
• Medical history & clinical notes (special category data)
• Appointment history & consent forms
• Payment information (card details processed securely; we do not store full card numbers)
• Emergency contact information
• Marketing preferences (only with consent)
• Website usage data (cookies, analytics)
• CCTV footage if applicable

3. Purpose & Legal Basis for Processing

We never sell your data.

4. Data Sharing

We may share relevant data with:

• Healthcare professionals (with your consent or where necessary)
• Booking & practice-management systems
• Payment service providers
• Secure IT / cloud providers
• Regulators or authorities where required by law

All processors operate under data-processing agreements with proper security controls.
Any international data transfer is safeguarded as required by the UK-GDPR.

5. Data Retention

Records may be retained longer if required for legal reasons or ongoing claims.

6. Your Rights

You have the right to request:

• Access to your data
• Correction of inaccurate data
• Erasure (where legally permitted)
• Restriction or objection to processing
• Data portability (where applicable)
• Withdrawal of consent for marketing

To exercise your rights, contact:
breakspearclinic@osteopilates.co.uk or 01494 813700

If unsatisfied, you may contact the ICO at ico.org.uk.

7. Data Security

We use:

• Encrypted electronic systems
• Secure physical storage
• Controlled access to clinical records
• Secure disposal procedures

We will notify you and relevant authorities of any data breach where legally required.

8. Cookies

We use cookies to operate our website and analyse performance.
Non-essential cookies are used only with your consent via our cookie banner.

9. Marketing

We only send marketing updates if you opt in.
You may unsubscribe at any time.

10. CCTV (if applicable)

If CCTV is used, signs are displayed and footage retained only as long as necessary (normally no more than [X] days unless required for an incident).

11. Children & Vulnerable Adults

We follow strict safeguarding and confidentiality standards and retain children’s records in line with healthcare-professional guidance.

12. Professional Standards

We comply with General Osteopathic Council professional, confidentiality, and record-keeping standards.

13. Changes to This Policy

We may update this policy; the latest version will always appear on our website.

14. Contact Us

Breakspear Osteopathy & Pilates Clinic
The Pippin, Cherry Close
Prestwood
Great Missenden
Bucks HP16 0QD
United Kingdom

 01494 813700
 breakspearclinic@osteopilates.co.uk

Data Lead: Andy Breakspear