Privacy Policy

Who We Are

Hardy Osteopathy, a mobile osteopathy practice operating throughout Kent, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (GDPR) and data protection legislation.

Personal Data We Collect

a) Patient Treatment Data

To provide you with osteopathic treatment, we may collect detailed medical information including:

• Medical history and health conditions
• Details of medication you are taking
• Treatment notes and clinical assessments
• Details of previous injuries or conditions affecting your health

We only collect information that is relevant and necessary for your treatment. By accepting treatment, you consent to Hardy Osteopathy collecting and processing this personal medical data. All medical records are held securely and are not shared with anyone not involved in your treatment.

b) Contact Information

Contact details you provide (telephone numbers, email addresses, postal addresses) may be used to:

• Confirm and remind you of your appointments
• Provide reports or other information concerning your treatment
• Respond to enquiries

c) Medical Record Sharing

As a primary healthcare practitioner, there may be circumstances where we need to share your medical records with other healthcare practitioners such as GPs, consultants, surgeons, or medical insurance companies. We will always inform you first before sharing your data unless we are under a legal obligation to comply.

d) Marketing and Communications

By making initial contact with Hardy Osteopathy, you consent to us maintaining contact with you. You can opt-out of marketing communications at any time by emailing hardyosteopathy@ajhardy.net or by requesting to be removed from our communications.

e) Website and Analytics Data

When you visit our website, we may collect basic information including:

• Internet Protocol (IP) addresses
• Browser type and operating system
• Pages visited and time spent on our website
• Information from contact forms and enquiries

f) Cookies

Our website may use cookies to help us identify visitors and track website access preferences. Cookies are small files stored on your computer. If you do not wish to have cookies placed on your computer, you can configure your browser to refuse them before using our website.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: To meet our contractual obligations to provide osteopathic treatment
• Consent: Your explicit consent to collect and process medical data
• Legitimate Interest: To respond to enquiries and promote our healthcare services
• Legal Obligation: To comply with healthcare regulations and legal requirements

Data Retention

Hardy Osteopathy will retain your personal data:

• During the duration of any treatment
• For 8 years after the contract has expired, to meet legal obligations
• For patient records concerning minors, until the child has reached age 25

After the retention period, all personal data will be deleted unless basic information needs to be retained to meet future obligations.

Data Storage and Security

All personal data is held securely in the United Kingdom. Hardy Osteopathy does not store personal data outside the UK/EEA. Access to patient records is restricted to staff directly involved in providing your treatment. Our administration team may access contact details to manage appointments and accounts. All staff handle personal data under strict confidentiality agreements.

Your Rights as a Data Subject

Under GDPR, you have the following rights:

• Right of access: You can request a copy of all personal data we hold about you
• Right of rectification: You can correct inaccurate or incomplete data
• Right to be forgotten: In certain circumstances, you can request erasure of your data
• Right to restrict processing: You can limit how your data is processed
• Right of portability: You can request your data be transferred to another organisation
• Right to object: You can object to certain types of processing, including direct marketing
• Right to withdraw consent: You can withdraw consent at any time

Accessing Your Personal Data

To request access to the personal data we hold about you, we require identification. We will accept:

• A copy of your driving licence
• A copy of your passport
• A copy of your birth certificate
• A utility bill not older than three months

A minimum of one piece of photographic ID and a supporting document is required. All requests should be made to:

Data Protection Officer

For any questions regarding this Privacy Policy or how your data is handled, please contact:

Complaints

If you have concerns about how your personal data is being processed, please contact us first. If you do not receive a satisfactory response within 30 days, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Changes to This Policy

Hardy Osteopathy may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by updating the date below and posting the revised policy on our website.

Last updated: 22 September 2026