Atlas Osteopathy ("we", "us") is committed to protecting and respecting your privacy. This policy explains how we collect and use personal data via this website and our clinical practice. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What data we collect
- Contact form submissions: your name, email, phone (optional), preferred clinic and message.
- Analytics data: anonymous usage data via Google Analytics, only after you accept cookies.
- Booking data: handled by Cliniko, our practice management system, under their own privacy policy.
- IP addresses: hashed with a server-side pepper before storage (rate-limiting and abuse prevention only, we can't recover the original IP).
Why we collect it
- To respond to your enquiry
- To deliver clinical care if you become a patient
- To improve our website (analytics)
- To prevent abuse (rate-limiting)
Who we share it with
We share data only with the third-party services that power this website and the practice:
- Resend (email delivery)
- Google Analytics (anonymised website usage)
- Cliniko (bookings and clinical records)
- Railway (hosting)
We never sell personal data. We never share contact-form data with marketing or advertising partners.
How long we keep it
Contact form submissions are kept for up to 24 months unless you become a patient (in which case they form part of your clinical record, retained for the legally required period). Analytics data retention follows GA4's default settings (currently 14 months).
Your rights
Under UK GDPR you have the right to:
- Request a copy of the data we hold about you
- Request correction of inaccurate data
- Request erasure of your data (subject to clinical record laws)
- Object to or restrict our processing
To exercise any of these rights, email hashim@atlasosteopathy.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
We use essential cookies to make this site work (session, security). Optional analytics cookies are only loaded after you give consent via the cookie banner, you can change your mind any time by clearing the cookie banner state.