Lumena Clinic is a private osteopathic practice based in Milton Keynes. Our website address is https://lumenaclinic.co.uk. We are committed to protecting your privacy and handling your personal data in a safe, transparent, and lawful manner.
What personal data we collect and why
We collect personal data only when it is necessary to provide you with osteopathic care and to manage your appointments. We may collect your name, date of birth, address, email address, phone number, medical history, clinical notes, appointment history, communication records, and payment information. We do not store card details. We collect this data when you book an appointment, fill in a health questionnaire or consent form, contact us, or attend a consultation.
How we use your data
We use your data to book and manage your appointments, provide osteopathic assessment and treatment, keep accurate clinical records as required by the General Osteopathic Council, communicate with you about your care, process payments, and comply with legal and regulatory obligations. We do not share your data with third parties unless required by law or necessary for your care, such as a referral to your GP or another healthcare professional.
Legal basis for processing your data
We process your personal data under the legal bases of contractual necessity, legal obligation, legitimate interest, and consent for marketing communications.
Cookies and embedded content
We retain clinical records for a minimum of 8 years from the date of your last appointment, as required by our professional indemnity insurance and the General Osteopathic Council. After this period, your data is securely deleted or anonymised.
Your rights
You have the right to access, correct, delete, restrict, or object to the processing of your data, and to request a copy of your data in a machine-readable format. To exercise any of these rights, please contact us at info@lumenaclinic.co.uk, by phone at 01908 382 925, or by post at Lumena Clinic, Fortuna House, 651 South Fifth Street, Milton Keynes, MK9 2PQ. We will respond within 30 days.
Who we share your data with
We do not sell or rent your personal data. We may share your data with your GP or other healthcare professionals with your consent, with Cliniko our practice management software, with our payment processor, or with law enforcement or regulatory bodies if required by law. All third-party processors we use are GDPR compliant.
Data security
We take the security of your personal data seriously and use secure systems to store clinical records. Access is restricted to staff who need it for your care. We regularly review our security practices.
How to complain
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office. Their contact details are available at www.ico.org.uk.
Updates to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page. If you have any questions, please contact us.