Privacy policy

Who we are

BodyEase Manual Therapy is a sole-practitioner osteopathic clinic run by Mihai Apostol, registered with the General Osteopathic Council (GOsC registration number: [to be added]), based at 9 Hospital Bridge Road, Twickenham, TW2 5UL. Mihai Apostol is the data controller for the personal information described in this policy.

Contact: hello@bodyease.eu or 07746 219424.

What information we collect

Depending on how you interact with the practice, we may collect:

• Contact details: name, date of birth, address, phone number, email address, emergency contact.
• Health information: presenting complaint, medical history, medications, allergies, surgical history, pregnancy status, safety screening answers, examination findings, and treatment notes. This is "special category data" under UK GDPR and is given extra protection.
• Administrative information: your GP's details (only where you choose to provide them, for communication about your care), how you heard about the practice, and appointment/payment records.
• Communications: messages sent via WhatsApp, email, or the contact form.

Why we process your information, and our legal basis

• To assess and treat you: processing your health information is necessary for the provision of health care, under UK GDPR Article 9(2)(h), and subject to the same duty of confidentiality that applies to all registered health professionals.
• To run the practice: processing contact and administrative details (booking, reminders, invoicing) is necessary to perform our contract with you, or is in our legitimate interest in running the practice efficiently.
• Marketing communications (occasional newsletters or updates) are sent only if you have separately and explicitly opted in, and you can withdraw that consent at any time.

How long we keep your records

In line with the General Osteopathic Council's Osteopathic Practice Standards, clinical records for adult patients are retained for a minimum of 8 years from your last treatment. Records for patients under 18 are retained until their 25th birthday. After this period, records are securely deleted.

Who we share information with

We do not sell your information. It is shared only with the following, each acting as a data processor on our behalf:

• Carepatron – secure storage of clinical notes and treatment records.
• Hostinger – hosting for this website and the secure database used for new-patient intake forms.
• Meta (WhatsApp Business) – used strictly for booking and administrative messages. Please avoid sharing detailed clinical information over WhatsApp; anything relevant to your care is transferred to your main clinical record.

We may also disclose information where required by law, or in a genuine emergency to protect your safety or the safety of others (for example, where a safety screening response indicates a possible medical emergency).

Your rights

Under UK GDPR, you have the right to:

• Ask for a copy of the information we hold about you, free of charge (a "subject access request").
• Ask us to correct inaccurate information.
• Ask us to erase your information, though this may be limited by our professional obligation to retain clinical records for the periods described above.
• Withdraw consent to marketing communications at any time.
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your information has been handled incorrectly.

To exercise any of these rights, contact hello@bodyease.eu.

Safety and confidentiality

All clinical information is treated as strictly confidential, consistent with the General Osteopathic Council's Osteopathic Practice Standards. Access to your clinical record is limited to your treating practitioner.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.