Privacy Policy

Privacy Notice

The Chestnut Practice Bristol Ltd

Effective from 1st November 2026

​

Who we are

The Chestnut Practice Bristol Ltd is an osteopathy practice in Fishponds, Bristol. We are committed to protecting your privacy and handling your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller:

The Chestnut Practice Bristol Ltd, 834 Fishponds Road, BS16 3XA, Bristol.

Company number:17239387 

ICO registration number: ZC262148

Email: hello@thechestnutpractice.co.uk

Telephone: 0117 949 1290

Change of practice

From 1st November 2026, The Chestnut Practice Bristol Ltd runs the osteopathy practice previously run by The Fishponds Practice Ltd. Patient records held by the previous practice transfer to us on that date so that your care can continue without interruption. The same clinicians continue to treat patients, and your records are held with the same confidentiality and care as before.

What information we collect

• Your name, address, date of birth, telephone number and email address

• Your medical history and other health information relevant to your treatment

• Clinical notes of your assessments and treatment

• Your appointment history

• Payment information

• Details of your GP, if you provide them

• Information you send us through our website, contact forms, email or phone

Health information is classed as "special category" data under UK GDPR and receives extra protection.

Why we use your information

• To provide safe and effective osteopathic care

• To arrange and manage your appointments, including sending reminders

• To communicate with you about your care and about the practice

• To process payments

• To meet our legal, regulatory and professional obligations, including those set by the General Osteopathic Council

• To handle any complaints or claims

Our legal basis

• Providing your care: processing is necessary for the provision of healthcare. This falls under UK GDPR Article 6(1)(b), contract, and Article 9(2)(h), health care.

• Keeping records: we have legal and professional obligations to keep clinical and financial records. This falls under Article 6(1)(c), legal obligation.

• Running the practice: for administrative purposes such as appointment reminders and practice updates, we rely on our legitimate interests under Article 6(1)(f).

• Marketing: we will only send you marketing information, such as newsletters, if you have given your consent. You can withdraw that consent at any time.

How your information is stored

Clinical records are kept mainly on paper and stored securely in locked cabinets at the practice. Appointments, contact details and practice administration are managed using Cliniko, a secure practice management system. Electronic information is protected by passwords and appropriate security measures, and only staff who need access to your information can see it.

Who we share your information with

We only share your information when necessary, for example with:

• your GP or other healthcare professionals involved in your care, with your agreement;

• imaging or other diagnostic services, where relevant to your care;

• Cliniko, our practice management software provider;

• our IT, email and payment service providers;

• our accountants, for financial records;

• our professional indemnity insurers, legal advisers or the General Osteopathic Council, if needed in the event of a complaint or claim;

• anyone we are required to share it with by law.

We never sell your personal information. 

How long we keep your information

• Adult clinical records: 8 years after your last appointment.

• Children's clinical records: until the patient's 25th birthday, or 8 years after the last appointment, whichever is later.

• Financial records: 6 years, as required by HMRC.

After these periods, records are securely destroyed.

Your rights

You have the right to:

• request a copy of the personal information we hold about you;

• ask us to correct inaccurate information;

• ask us to restrict how we use your information in certain circumstances;

• object to certain processing;

• ask us to delete your information, where legally applicable;

• request your information in a portable format, where applicable;

• withdraw consent at any time, where consent is our legal basis.

Some of these rights are limited where we have a legal or professional duty to keep clinical records. To exercise any of these rights, please contact us using the details below. There is normally no charge, and we will respond within one month.

We do not use automated decision-making or profiling.

Contacting us

If you have any questions about how we use your information, please contact:

The Chestnut Practice Bristol Ltd, 834 Fishponds Road,BS16 3XA, Bristol

Email: hello@thechestnutpractice.co.uk

Telephone: 0117 949 1290

Complaints

If you are unhappy with how your information has been handled, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO):

Website: https://ico.org.uk

Telephone: 0303 123 1113

Changes to this notice

We may update this notice from time to time. The latest version will always be available on our website or from reception.