Last updated: 8 September 2026

 

WHO WE ARE

Omega Health Injury & Wellness Centre CIC (company number 17256599) is the controller of the personal information described in this policy.

 

Contact us at: Omega Health Injury & Wellness Centre CIC, David Lloyd Clubs, 11 The Havens, Ipswich IP3 9SJ, United Kingdom. Email: info@omegahealthinjuryclinic.co.uk. Telephone: 07798 738363.

 

WHAT INFORMATION WE COLLECT

We may collect your name, date of birth, address, telephone number, email address, emergency contact details, appointment and account information, payment and transaction details, correspondence, marketing preferences, and information submitted through our website or booking system.

 

Because we provide healthcare and treatment, we may also collect health information. This can include your symptoms, medical history, medication, examination findings, clinical notes, treatment plans, progress, referrals and other information needed to provide safe and appropriate care. Health information is special category data and receives additional protection.

 

When you use our website, we may collect technical information such as your IP address, device and browser details, pages visited, referring website and cookie choices. Non-essential analytics and advertising technologies are used only according to the choices you make through our cookie banner.

 

HOW WE COLLECT INFORMATION

We usually obtain information directly from you when you contact us, complete a form, book or attend an appointment, make a payment, subscribe to communications or use our website. We may also receive information from a parent or guardian, your authorised representative, another healthcare professional or referral source where this is appropriate and lawful.

 

WHY WE USE YOUR INFORMATION AND OUR LAWFUL BASES

We use personal information to respond to enquiries, arrange and manage appointments, provide assessment and treatment, keep clinical records, take payment, communicate about your care, operate and secure our website, meet professional and legal duties, manage complaints or claims, and improve our services.

 

For booking and providing services, we normally rely on taking steps at your request and performing our contract with you. For legal, tax and regulatory records, we rely on legal obligations. For service administration, security, fraud prevention and the defence of legal claims, we may rely on our legitimate interests or legal claims where appropriate. In an emergency, we may use information to protect vital interests.

 

For health information used to assess, diagnose or provide treatment, we rely on the applicable Article 6 lawful basis and the health or social care condition in Article 9(2)(h) of the UK GDPR, together with Schedule 1, Part 1, paragraph 2 of the Data Protection Act 2018. This processing is carried out by, or under the responsibility of, practitioners who owe duties of confidentiality. Where information is needed for a legal claim, Article 9(2)(f) may also apply.

 

We use consent for optional email or text marketing and for non-essential analytics and advertising cookies. You may withdraw that consent at any time without affecting earlier lawful processing.

 

WHO WE SHARE INFORMATION WITH

We share information only where needed and with appropriate safeguards. Recipients may include:

 

• practitioners and authorised staff involved in your care;

• Jane App, which provides our appointment booking and practice-management system;

• Wix, which hosts and operates our website;

• Usercentrics, which manages cookie consent;

• Google services used for analytics, advertising and tag management, where you have consented;

• payment processors used through our booking or payment systems;

• professional advisers, insurers, IT and security providers;

• regulators, courts, law-enforcement bodies or other organisations where disclosure is required by law; and

• another healthcare professional, such as your GP, where you ask us to share information, where sharing is necessary for your care, or where another lawful basis applies.

 

We do not sell your personal information.

 

INTERNATIONAL TRANSFERS

Some service providers may process information outside the United Kingdom. Where this happens, we require an appropriate legal safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement or an approved UK addendum to standard contractual clauses.

 

HOW LONG WE KEEP INFORMATION

We keep information only for as long as it is needed for the purpose for which it was collected and to meet legal, insurance and professional requirements.

 

Clinical records are normally kept for at least eight years after the last consultation. For a patient who was a child when treated, records are normally kept until at least their 25th birthday, or longer where the eight-year minimum requires it. Financial and tax records are generally kept for six years after the relevant accounting period. Enquiry information that does not lead to treatment is normally deleted after 12 months unless there is a reason to keep it longer. Marketing information is kept until you unsubscribe or withdraw consent, although we may retain a minimal suppression record so that we respect your choice. Website and consent records are kept in accordance with our consent-management settings and applicable legal requirements.

 

COOKIES AND ONLINE TRACKING

Our website uses essential cookies that are necessary for it to work. With your permission, it may also use functional, analytics and marketing technologies. These can support features, measure website use and help us understand advertising performance. You can accept, deny or customise non-essential cookies through the banner and change your choice later through the privacy settings control on the website.

 

YOUR DATA-PROTECTION RIGHTS

Depending on the circumstances, you may have the right to ask for access to your information, correction of inaccurate information, deletion, restriction of use, transfer of information, or to object to processing. You may withdraw consent at any time. These rights are subject to legal limits, including duties to retain clinical records.

 

To exercise a right, contact info@omegahealthinjuryclinic.co.uk. We may need to confirm your identity before responding. We do not use your personal information to make solely automated decisions that have legal or similarly significant effects.

 

SECURITY

We use reasonable technical and organisational safeguards and limit access to people who need the information for their work. No internet or storage system is completely secure, but we review our arrangements and those of the service providers we use.

 

COMPLAINTS

Please contact us first if you have a concern so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or by telephoning 0303 123 1113.

 

CHANGES TO THIS POLICY

We may update this policy when our services, suppliers or legal obligations change. The latest version and revision date will appear on this page.