Privacy notice

This notice explains what data VJ Barnes Osteopathy Clinic ("we", "us") collects when you visit this website, why we collect it, and the rights you have under the UK GDPR and the Data Protection Act 2018.

Who is the data controller

VJ Barnes Osteopathy Clinic
VJ Barnes Clinic, 88 Bramerton Road, Bromley, BR3 3PD
Phone 020 8650 5001 · Contact us

What we collect and why

Contact enquiries. If you use the contact form, we store the name, email, phone number, subject and message you send us so we can reply and arrange an appointment. Lawful basis: legitimate interests (responding to enquiries) and, where you become a patient, contract.

Website analytics (only if you accept the cookie banner). Country, region, city (from your IP address, then discarded), pages viewed, and the referring site. Your IP address is never stored — it is one-way hashed with a monthly-rotating salt so we cannot re-identify you. Lawful basis: consent (PECR + UK GDPR Article 6(1)(a)).

Strictly-necessary cookies. A session cookie (PHPSESSID) is set to protect the contact form from cross-site request forgery. This is exempt from PECR consent because it is essential for the service you requested.

Who we share data with

We do not sell or share your personal data with advertisers.

The country/city lookup during analytics is performed by ip-api.com. Your IP is sent to them once, only country/region/city is returned, and nothing is stored on their side that identifies you.

Website hosting is provided by Hostinger (UK / EU data centres). Contact-form email delivery uses standard SMTP through the hosting provider.

How long we keep data

• Contact enquiries: kept for as long as clinically or legally required (typically 7 years for osteopathic records under GOsC guidance), then deleted.
• Analytics events: retained for up to 25 months and then automatically pruned.
• The session cookie expires when you close the browser.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict processing of, or object to processing of your personal data, and the right to data portability. To exercise any of these, please get in touch via our contact form — we will reply within 30 days.

You can also complain to the UK's supervisory authority, the Information Commissioner's Office, at ico.org.uk.

Withdrawing analytics consent

You can revoke your analytics consent at any time. Click the button below and we will forget your choice and remove any tracking from your device.

Clear consent & reload