Privacy Policy

Last Updated: 20 August 2026

At Stillpoint Bath we take your privacy seriously. This notice explains how we collect, use, and protect your personal and health information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Use and Access Act.

1 – Who we are
2 – Information We Collect
3 – Why We Need Your Data
4 – How We Secure and Store Your Data
5 – How Long We Keep Your Data
6 – Your Legal Rights
7 – Questions and Complaints

1. Who We Are

Stillpoint Bath is the “Data Controller” for your information.

  • Address: Stillpoint, 1 The Stoneyard, Old Orchard, Bath, BA1 5AX
  • Phone:  01225 460 106
  • Email: enquiries@stillpointbath.co.uk
  • Data Contact: Sadie Yukon, Practice Manager or Rose Bruneau, Director

2.Information We Collect

We collect and process the following information:

  • Contact details: Your name, address, phone number, and email.
  • Health data: Your medical history, case notes, treatment plans, and lifestyle information.
  • Payment details: Financial records related to your appointments.

3. Why We Need Your Data (Lawful Basis)

We process your data under the following legal frameworks:

  • Medical Care: We process your health data under Article 9(2)(h) of the UK GDPR to provide you with safe and effective osteopathic treatment.
  • Contractual Duty: We use your contact details under Article 6(1)(b) to book appointments, manage reminders, and process bills.
  • Legitimate Interests: We process minimal data under Article 6(1)(f) for essential business administration.
  • Consent: We will only send you marketing updates if you explicitly opt-in.

4. How We Secure and Store Your Data

Your data is securely stored using the following safeguards:

  • Electronic data is stored on encrypted, password-protected Practice Management software utilizing Multi-Factor Authentication (MFA).
  • Physical records are locked away in restricted-access filing cabinets.
  • We do not share your information with third parties unless required by law, or if you request a GP referral letter (sent via secure, encrypted channels).

5. How Long We Keep Your Data

By law and insurance regulations, we cannot delete medical records immediately.

  • Adults: We keep your records for 8 years after your last treatment.
  • Children: We keep records until the patient turns 25 (or 26 if they were 17 during their last treatment).

6. Your Legal Rights

You have the right to:

  • Access your records: Request a free copy of your medical files. We will respond within one calendar month.
  • Correct mistakes: Ask us to update outdated contact details.
  • Object to marketing: Withdraw your consent for promotional messages at any time.

7. Questions and Complaints

If you have a concern about how we handle your data, you must contact us directly first. We will acknowledge your complaint within 30 days and investigate it thoroughly.

Please send complaints to practice.manager@stillpointbath.co.uk

If you are unhappy with our response, you can escalate the matter to the Information Commissioner’s Office (ICO) or the Institute of Osteopathy (iO).

Pin It on Pinterest