Last Updated: October 2026

Introduction

Emma Ceely Osteopathy is committed to protecting your privacy and handling your personal information in a transparent and secure manner.

This Privacy Policy explains how I collect, use, store and protect your personal information when you use my services, visit my website, contact me, or book an appointment.

I comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

The Data Controller responsible for your personal information is:

Emma Ceely Osteopathy

Lawrence House Styling

Southgate Road

Wincanton

Somerset

BA9 9EB

Website: www.emmaceely.co.uk

Email: echipp23@gmail.com

Telephone: 07432 234660

What Information I Collect

I may collect and process the following information:

Personal Information

– Name

– Address

– Date of birth

– Telephone number

– Email address

– Emergency contact details

Health Information

As an osteopath, I need to collect information about your health in order to provide safe and effective treatment. This may include:

– Medical history

– Current symptoms and health concerns

– Medication information

– Details of consultations, examinations and treatment

– Relevant reports, scans or correspondence from other healthcare professionals

Financial Information

If you make payment by card, payment processing information is handled securely by SumUp. I do not store your full card payment details.

Website Information

When you visit my website, limited technical information may be collected automatically, such as:

– IP address

– Browser type

– Device information

– Website functionality data

I do not currently use Google Analytics or other visitor tracking tools.

How I Collect Information

Information may be collected when you:

– Contact me by telephone, email or through my website

– Book an appointment

– Complete registration or consent forms

– Attend consultations and treatment appointments

– Make payments for services

– Correspond with me regarding your care

Why I Collect Your Information

I collect and process your information in order to:

– Provide safe and effective osteopathic care

– Assess your suitability for treatment

– Maintain accurate clinical records

– Arrange and manage appointments

– Communicate with you regarding your care

– Process payments

– Meet professional, legal and regulatory obligations

– Respond to complaints or legal claims

– Manage and improve my practice

Lawful Basis for Processing

Under UK GDPR, I process your information using the following lawful bases:

Healthcare Provision

Processing is necessary for the provision of healthcare and treatment.

Contract

Processing is necessary to provide the services you request from me.

Legal Obligation

Processing is necessary to comply with legal, professional and regulatory requirements.

Legitimate Interests

Processing is necessary for the effective administration and management of the practice.

As a healthcare professional, I also process special category health information where necessary for healthcare purposes.

Clinical Records

Professional standards require me to keep accurate clinical records of consultations and treatment provided.

Clinical records may include:

– Details of symptoms and concerns

– Findings from examinations

– Diagnosis and treatment plans

– Treatment provided

– Relevant communications regarding your care

These records are confidential and are only accessed when necessary.

Online Booking and Patient Records

I use Cliniko as my practice management and clinical records system.

Cliniko stores appointment information, patient contact details and clinical records securely and acts as a data processor on my behalf. Cliniko provides tools designed to support compliance with UK GDPR requirements and patient privacy protections.

When booking online, you may be asked to provide personal information necessary for managing your appointment and healthcare records.

Payments

I use SumUp to process card payments.

Payment information is encrypted and processed securely by SumUp in accordance with recognised payment security standards. I do not have access to or store your full card payment details.

Who I Share Information With

Your information is treated as confidential.

Information may be shared where appropriate and necessary with:

– Your GP or other healthcare professionals involved in your care

– Professional advisers or indemnity insurers

– Regulatory bodies where required by law

– Courts, law enforcement agencies or government authorities where legally required

– Service providers who assist in operating the practice, including:

  – Cliniko (practice management and clinical records)

  – SumUp (payment processing)

Information is only shared where there is a lawful basis to do so and where appropriate safeguards are in place.

I will never sell your personal information to third parties.

How Your Information Is Stored

I take appropriate technical and organisational measures to protect your information.

These measures include:

– Password-protected systems and devices

– Secure clinical record systems

– Restricted access to personal information

– Secure electronic communication where possible

– Secure disposal of confidential information when no longer required

How Long I Keep Records

Clinical records are retained in accordance with professional guidance, insurance requirements and legal obligations.

As a general guide:

– Adult clinical records are retained for a minimum of eight years after your last appointment.

– Children’s records are retained until age 25, or age 26 if the young person was 17 at the end of treatment.

Records may be retained for longer where required by law, insurance obligations or ongoing legal matters.

When records are no longer required, they will be securely destroyed or permanently deleted.

Your Rights

Under UK GDPR, you have the right to:

– Request access to your personal information

– Request correction of inaccurate information

– Request deletion of information in certain circumstances

– Request restriction of processing

– Object to processing in certain circumstances

– Request transfer of your information where applicable

– Withdraw consent where consent is relied upon

Please note that some rights may be limited where healthcare, legal or regulatory obligations apply.

Requests should be made in writing using the contact details above.

Cookies

This website may use essential cookies required for the operation of the website and online booking functionality.

I do not currently use Google Analytics or other visitor tracking services.

Most web browsers allow you to manage or disable cookies through your browser settings.

Complaints

If you have concerns about how your personal information is handled, please contact me in the first instance.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Telephone: 0303 123 1113

Website: www.ico.org.uk

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, professional obligations or practice procedures.

The most recent version will always be available on this website.