top of page

Privacy Policy

1. Introduction

The Natural Therapy Clinic (“we”, “us”, “our”) operates in Abingdon, specialising in osteopathy, acupuncture, and homeopathy since 1982. We respect your privacy under UK GDPR and outline below how we collect, use, store, and protect your personal data.

2. Data Controller

The Natural Therapy Clinic
Abingdon, Oxfordshire
📞 01235 531 021 · ✉️ abingdonosteopathy@outlook.com
Established in 1982 by Michael Davis as a multi-practitioner holistic therapy centre

3. What Personal Data We Collect

  • Contact form submissions: name, email, phone, subject/message

  • Communications: details of enquiries and communications via phone or email

  • Website analytics: anonymised IP, device/browser type, pages viewed, session duration—collected via essential and performance cookies; no advertising or profiling cookies are used

4. How We Use Your Data

We use your data to:

  • Respond to enquiries and arrange appointments (osteopathy, acupuncture, homeopathy)

  • Send confirmations, reminders, follow-up information

  • Enhance our website’s usability and performance through anonymised analytics

  • Maintain legal, professional, and financial records

5. Lawful Basis for Processing

  • Contractual necessity: to arrange and provide therapy sessions

  • Legitimate interests: to run and improve our services and website

  • Consent: for any follow-up or optional marketing communications

  • Legal obligation: to maintain records for professional, financial, or regulatory compliance

6. Data Sharing

We do not sell or rent your data. Sharing is limited to:

  • Service providers (e.g. web hosting, email, analytics platforms) operating under data‑processing agreements

  • Regulatory authorities, if legally required

7. Cookies & Tracking

  • Essential cookies: required for contact form functionality and site navigation

  • Performance cookies: allow anonymised analytics (e.g. Google Analytics)
    No advertising or profiling cookies are used

8. Data Retention

  • Enquiry and appointment records: kept for up to 7 years for professional and legal purposes

  • Analytics session data: session logs deleted after 24 months; aggregated analytics retained as needed

9. Your Rights

Under UK GDPR, you may ask to:

  • Access, correct, erase, restrict, or transfer your personal data

  • Withdraw consent or object to certain processing activities
    To exercise these rights, contact us via phone or email. You may also lodge a complaint with the ICO.

10. Security

We use industry-standard measures—SSL encryption, secure hosting, access controls, and staff training—to protect your data. Although no system is entirely secure, we follow robust safety procedures.

11. International Transfers

Your data is stored and processed within the UK—no overseas transfers occur.

12. Policy Updates

We may update this policy periodically. The Effective Date above reflects the latest version. Continued use of our website implies acceptance of any updates.

bottom of page