How we collect, use and protect your personal data — and what your rights are.
This website is operated by Yummy Discoveries Ltd (trading as Apple Tree Osteopaths and Baby Pathway), a company registered in England and Wales. When we refer to "we", "us" or "our" throughout this policy, we mean Yummy Discoveries Ltd.
Our primary practice address is Carmenta Life, Chesham House, Church Lane, Berkhamsted, HP4 2AX. You can contact us at info@appletreeosteopaths.co.uk or on 07591 791636.
We are committed to handling your personal data with care, transparency and respect. This policy explains what we collect, why we collect it, and what your rights are.
When you come to see us — or bring your child or baby — we record information relevant to your care. This includes medical history, current medications, symptoms, progress notes, and any relevant correspondence with other healthcare professionals. We may also record photographs or videos where clinically relevant, always with your explicit consent.
This information is essential for providing safe, appropriate care. It is stored securely and accessed only by practitioners and administrative staff directly involved in your treatment. All staff handling clinical data have signed a confidentiality agreement.
We use Cliniko, Physitrack and Skully to store and manage clinical records. Skully is used specifically to measure and monitor head shapes as part of our paediatric assessments.
We use your contact details — name, phone number and email address — to manage appointments, send reminders and share information relevant to your care. This includes administrative communications such as booking confirmations and pre-appointment forms.
If you choose to sign up to our newsletter, communications may come from either the Apple Tree Osteopaths or Baby Pathway brand, but your data is always held by the same organisation and handled in exactly the same way.
Newsletter sign-up is always opt-in. You will never be added to our mailing list without actively choosing to do so. You can unsubscribe at any time using the link in any email we send, or by contacting us directly. We use Systeme.io to manage newsletter and marketing communications.
Our website uses Google Analytics 4 and Microsoft Clarity to help us understand how visitors use the site. Both tools are configured to anonymise data — we do not collect personally identifying information through either platform. You can manage your cookie preferences using the banner on our website, or through your browser settings.
Contractual necessity — to provide the osteopathic care you have requested and to manage your appointments.
Explicit consent — for the processing of sensitive health data, and for any marketing or newsletter communications you have opted into.
Legitimate interests — to respond to enquiries and to maintain records necessary for the safe running of our practice.
We do not sell, rent or share your personal data for commercial purposes.
In some circumstances, it may be necessary to share relevant aspects of your records with other healthcare professionals — for example, your GP, a paediatrician, or a specialist — where this is in your or your child's best interests. We will always inform you before doing so where possible.
We may also be required to disclose information to meet a legal obligation.
We retain patient records for eight years following the end of your treatment, in line with our professional and legal obligations. After this period, data is securely deleted.
Records relating to patients who were minors at the time of treatment are retained until they reach the age of 25.
Cliniko — our practice management system, used for clinical records, appointment bookings and patient communications. Cliniko's servers are based in Australia; however, Cliniko is contractually committed to protecting patient data in accordance with UK GDPR.
Physitrack — used to assign and manage home exercise and activity programmes. Data is stored securely in accordance with GDPR.
Skully — used to measure and monitor head shapes as part of our paediatric assessments. Data is stored securely in accordance with GDPR.
Systeme.io — used to manage newsletter sign-ups and marketing communications for the Apple Tree Osteopaths and Baby Pathway brands. Data is stored securely in accordance with GDPR.
Google Analytics 4 and Microsoft Clarity — used for anonymised website analytics. No personally identifying information is collected through these tools.
All data is accessed only by authorised staff and practitioners. Where data is accessed on personal devices, those devices are password protected.
To request access to your data, or to exercise any of the rights listed above, please contact us at info@appletreeosteopaths.co.uk.
To protect your privacy, we will ask you to provide proof of identity before releasing any personal information. We accept a copy of a driving licence or passport, plus a recent utility bill or bank statement. At least one form of photographic ID is required.
We will respond to all requests within one month, in line with UK GDPR requirements.
If you have a concern about how we are handling your personal data, please contact us in the first instance at info@appletreeosteopaths.co.uk. We will do our best to resolve your concern promptly.
If you are not satisfied with our response, you have the right to refer your concern to the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Tel: 0303 123 1113 · ico.org.uk
This policy was last reviewed in April 2026. We may update it from time to time — the current version will always be available on our website.