Privacy Policy

Who we are

Aberdeen Osteopathy & Massage Clinic is run by Aberdeen Osteopathy Clinic Limited, a company registered in Scotland under company number SC381838, with its registered office at 24 Ellon Road, Bridge of Don, Aberdeen AB23 8BX. We are the data controller for the personal information described in this policy.

You can contact us by phone on 01224 707877 or by email at info@aberdeenosteopathyclinic.com.

Personal information we collect

Visiting our website

This website is hosted on Vercel. Like most websites, the underlying hosting platform may keep short-term server logs of visits, which can include your IP address, as part of running and securing the site.

We self-host the fonts used on this site, so no font requests are sent to Google. We do not run any advertising pixels, including any Facebook pixel.

Making an enquiry

When you use the enquiry form on this website, we ask for your name, email address, telephone number (this is optional), the treatment you are interested in, your message, and whether you have insurance cover you would like to use for your treatment. We also record the page you submitted the form from. This information is sent straight to the clinic's inbox through our email delivery provider, Resend, so that we can reply to you.

The form is protected by Cloudflare Turnstile, a check that confirms your submission is coming from a person rather than an automated bot. Turnstile only loads once you start filling in the form, and it works by assessing signals from your browser and device; Cloudflare, as the provider of this tool, processes those signals to do this. Our server also keeps a short-lived count of enquiries received from your IP address over the last few minutes, purely to slow down spam; this count is held in memory only, is never written to disk, and disappears again shortly afterwards.

Booking an appointment online

Our Book Now page lets you book an appointment directly using an online booking widget provided by Cliniko, our practice management and booking system. When you book this way, you enter your details straight into Cliniko, which processes them on our behalf. This can include your name, contact details, date of birth if we ask for it, the appointment you are booking, and any notes you add. Cliniko's booking widget is loaded inside a frame from Cliniko's own website.

Becoming a patient

If you visit the clinic for osteopathy, massage, Ayurvedic treatment, dry needling, shock wave therapy or a vitamin wellness shot, we hold a clinical record for you. This includes your contact details and health information relevant to your care, such as your medical history, examination findings, diagnosis and treatment notes. Health information is "special category data" under UK data protection law, and we treat it with particular care, as set out below.

How and why we use your information

We only use personal information where we have a lawful basis to do so under UK GDPR.

Enquiries and bookings

We use the details you give us in the enquiry form, or when you book online through Cliniko, to respond to you and to arrange your appointment. This is necessary to take steps towards a contract with you, or, where you are simply asking a question, because it is in our legitimate interests, and yours, to be able to respond.

Providing your treatment

We use your clinical record to assess, diagnose and treat you, and to keep an accurate account of the care we provide. Osteopaths are regulated by the General Osteopathic Council, and our lawful basis for processing your health information is that it is necessary for the provision of health care by, or under the responsibility of, a health professional. This is our condition for processing special category data under Article 9(2)(h) of UK GDPR, together with the related health or social care purposes condition in Schedule 1 of the Data Protection Act 2018.

Analytics

Where you accept analytics cookies, as explained below, we use Google Analytics 4, loaded through Google Tag Manager, to understand how visitors use this website. Our lawful basis for this is your consent, which you can withdraw at any time.

Insurance claims

If you ask us to claim your treatment costs from your insurer, we will share the relevant details of your treatment with that insurer, with your agreement, so your claim can be processed.

Cookies

This website only sets cookies, or similar browser storage, that are strictly necessary, or that you have agreed to.

How we use cookies

When you first visit, a banner from CookieYes, our cookie consent tool, lets you accept or reject analytics cookies. CookieYes stores your choice in a cookie on your device and keeps a record of it for us, so we can show that consent was given. You can change your choice at any time using "Cookie settings" in the footer. If you reject analytics cookies, or have not yet made a choice, Google Tag Manager and Google Analytics do not load and no analytics cookies are set. If you change your mind after accepting, we remove the analytics cookies already on your device.

Name	Provider	Purpose	Duration
cookieyes-consent	CookieYes	Remembers your cookie choice, so the banner does not ask again on every page	1 year
_ga	Google Analytics	Distinguishes visitors, for our website statistics. Only set once you accept analytics cookies	Up to 2 years (some browsers cap this sooner)
_ga_<container-id>	Google Analytics	Remembers session information, for our website statistics. Only set once you accept analytics cookies	Up to 2 years (some browsers cap this sooner)
Turnstile verification	Cloudflare	Checks that the enquiry form is being submitted by a person, not a bot. Runs only while you are filling in the form	Session only; by default, Turnstile does not set a persistent cookie
Booking widget cookies	Cliniko	Strictly necessary cookies that keep your booking session working correctly inside the online booking widget on our Book Now page	Session, cleared when you close the booking widget

Content and widgets you choose to load

Google Maps, if you choose to load it on our homepage or Contact page, and our clinic tour video, hosted by dotcompal, are only loaded when you actively click to view them. Until then, no data is sent to Google or dotcompal. Please see Google's and dotcompal's own privacy notices for how they handle information once you choose to load their content.

The online booking widget on our Book Now page is loaded from Cliniko as soon as you open that page, so that you can book without leaving our site. Cliniko may set the strictly necessary cookies described above inside that frame.

The reviews shown on this website are Google reviews we have reproduced as text. They are not loaded from a third-party widget, so viewing them does not set any cookies.

Who we share your information with

We share personal information with:

• Vercel, who host this website and may hold server logs, which can include IP addresses, as part of running the site.
• Cloudflare, who provide the Turnstile check on our enquiry form.
• Resend, who deliver enquiry form emails to the clinic.
• CookieYes, who provide our cookie banner and keep a record of your cookie choice.
• Cliniko, our practice management and booking system, who process the details you enter when you book an appointment online. See Cliniko's privacy policy for how they handle this information.
• Google, for Google Tag Manager and Google Analytics, only if you accept analytics cookies, and for Google Maps, only if you choose to load it.
• dotcompal, who host our clinic tour video, only if you choose to play it.
• Your insurer, but only where you have asked us to claim on your behalf.

We do not sell your personal information, and we do not share it with anyone else for their own marketing purposes.

International transfers

Some of the organisations listed above, including Google, may process information outside the UK. Where this happens, we rely on the safeguards required by UK data protection law, such as the UK's International Data Transfer Addendum or an applicable adequacy decision, so that your information continues to be protected wherever it is processed.

How long we keep your information

Website enquiries

We keep enquiry form submissions for as long as reasonably needed to respond to you and deal with any follow-up, and not for longer than is necessary for that purpose.

Clinical records

We keep patient records in line with professional guidance from the General Osteopathic Council, which sets a minimum retention period of eight years after your last consultation, or, if you were a child when treated, until your 25th birthday. We may need to keep some records for longer where the law requires it. Further detail on our record-keeping practice is available from the clinic on request.

Keeping your information secure

We use appropriate technical and organisational measures to protect your personal information. This includes restricting access to patient records to those who need it to provide your care, and relying on reputable processors, listed above, for the technical parts of running this website.

Your rights

Under UK GDPR, you have the right to:

• ask for access to the personal information we hold about you
• ask us to correct information that is inaccurate or incomplete
• ask us to erase your information, in some circumstances
• ask us to restrict how we use your information
• object to our use of your information, in some circumstances
• ask for your information in a portable, machine-readable format, where this applies
• withdraw your consent at any time, where we rely on consent, for example for analytics cookies

To exercise any of these rights, please contact us using the details below.

Children and young patients

We treat babies and children as well as adults. Where a patient is under 16, we ask a parent or guardian to give consent and provide information on their behalf, and to exercise any of the rights above for them.

How to complain

We hope we can resolve any concern you have about how we handle your personal information, so please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

We may update this policy from time to time, for example if we change how we use your information or if the law changes. The date at the top of this page shows when it was last updated.

Contact us

Aberdeen Osteopathy & Massage Clinic 24 Ellon Road, Bridge of Don, Aberdeen AB23 8BX Phone: 01224 707877 Email: info@aberdeenosteopathyclinic.com