Last updated: September 2026
South Dartmoor Clinic respects your privacy and is committed to protecting your personal information. This privacy notice explains what information we collect, why we collect it, how it is used and stored, and your rights in relation to your information.
Who is responsible for your information?
The data controller is:
South Dartmoor Clinic / Max Secchi
27 East Street
Ashburton
Newton Abbot
Devon
TQ13 7AQ
Telephone: 01364 652016
Email: info@southdartmoorclinic.com
What information we collect
When you contact the clinic, make an appointment or receive osteopathic care, we may collect and process information including:
- Your name, date of birth, address and contact details.
- Appointment and booking information.
- Relevant medical history and information about your health.
- Details of symptoms, injuries and other reasons for seeking treatment.
- Examination findings, clinical assessments and treatment records.
- Correspondence relating to your care.
- Information relating to invoices and payments.
Health information is classed as special category personal data and is given additional protection under UK data-protection law.
We do not store your full debit or credit card details.
Why we use your information
We use your personal information where necessary to:
- Arrange, manage and administer your appointments.
- Communicate with you about your appointments and care.
- Assess your health and provide osteopathic care and treatment.
- Maintain accurate clinical records.
- Process payments and maintain appropriate financial records.
- Respond to enquiries, requests or complaints.
- Meet professional, regulatory, insurance and legal obligations.
- Maintain the safe and effective operation of the clinic.
Our lawful basis for using your information
Under UK data-protection law, we must have a lawful basis for processing your personal information.
Depending on the circumstances, the lawful bases we rely upon may include that processing is necessary for the performance of a contract, compliance with a legal obligation, or our legitimate interests in operating and administering the clinic and providing appropriate patient care.
Information concerning your health is special category data. Where we process health information for the provision of osteopathic care, we rely on the relevant provisions permitting the processing of special category information for the provision of health care or treatment by a healthcare professional subject to a duty of confidentiality.
Where we rely specifically on consent for a particular use of your information, you may withdraw that consent.
How your information is stored and processed
We take appropriate measures to protect your personal and clinical information against unauthorised access, loss, misuse or disclosure.
We use Cliniko as our practice-management system. Cliniko is used to manage information including appointments, patient records, clinical notes, invoices and patient communications.
Online card payments are processed using Stripe. Stripe processes payment information securely on our behalf. South Dartmoor Clinic does not receive or store your complete card details.
We only retain and use information that is reasonably necessary for the purposes for which it was collected.
Who we may share information with
We do not sell your personal information.
Your information is kept confidential. Where appropriate, information may be shared with:
- Other healthcare professionals involved in your care, where appropriate and with the necessary authority or consent.
- Service providers used to operate the clinic, including our practice-management and payment-processing providers.
- Professional advisers, insurers or regulatory bodies where necessary.
- Other organisations or authorities where disclosure is required by law or where there is another lawful justification for doing so.
When information is shared, we aim to disclose only what is reasonably necessary for the purpose concerned.
How long we keep your information
Clinical records are retained in accordance with the requirements and guidance applicable to registered osteopaths.
Adult patient records are retained for a minimum of eight years after the patient’s last consultation.
Where the patient is a child, records are retained until their 25th birthday.
Records may be retained for longer where there is a legal, regulatory, insurance or other appropriate reason to do so.
When information is no longer required, it will be securely deleted or disposed of where appropriate.
Your data-protection rights
Depending on the circumstances, UK data-protection law gives you rights in relation to your personal information. These may include the right to:
- Ask for access to the personal information we hold about you.
- Ask us to correct information that is inaccurate or incomplete.
- Ask us to erase your personal information in certain circumstances.
- Ask us to restrict the processing of your information in certain circumstances.
- Object to certain processing of your personal information.
- Ask for certain information to be transferred to you or another organisation.
- Withdraw consent where consent is the basis on which information is being processed.
These rights are not absolute and may be subject to legal and professional requirements. For example, we may be required to retain your clinical records even where you request their deletion.
If you wish to exercise any of these rights, please contact us at info@southdartmoorclinic.com.
Confidentiality
Patient information and clinical records are treated as confidential.
Information will not normally be disclosed to another person or organisation without an appropriate reason or your permission. There may, however, be circumstances where disclosure is required or permitted by law, or where disclosure is necessary because of a serious concern about someone’s safety.
Complaints
If you have any questions or concerns about how your personal information is being handled, please contact:
South Dartmoor Clinic / Max Secchi
Email: info@southdartmoorclinic.com
Telephone: 01364 652016
If you remain dissatisfied after raising your concern with us, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Changes to this privacy policy
We may update this privacy policy from time to time to reflect changes in our services, systems, professional requirements or applicable law.
The latest version will be published on the South Dartmoor Clinic website.