Your privacy

Privacy policy.

How Stretch Birmingham and Exhale Osteopathy collect, use and protect your personal information. Questions? Email info@exhaleosteopathy.co.uk or call 0121 751 2440.

Who we are

Stretch Birmingham is an assisted stretching service from Exhale Osteopathy. Our clinic is at 1 Sutton Oak Corner, Streetly, Sutton Coldfield B74 2DH.

Hafi Rahman, our founder and principal osteopath, is the data controller and is responsible for how we look after your personal information. If you have any questions about this policy or your information, please contact Hafi:

The information we collect

We only collect the information we need to look after you. This may include:

  • Contact details: your name, address, phone number, email address and date of birth.
  • Health information: relevant medical history, your movement screen findings, session notes and any home stretches we give you.
  • Other healthcare contacts: your GP’s details, and those of any other healthcare professional you ask us to contact.
  • Payment records: what you have paid and when. Card payments are processed by our card payment provider; we do not store your full card number.
  • Messages: anything you send us by email, by phone or on social media.

How we use your information

We use your information to:

  • book, change and remind you about appointments
  • screen, stretch and advise you safely, and keep accurate records
  • communicate with your GP or other healthcare professionals when it is in your interest and you have agreed, or when we have to
  • take payment and keep financial records
  • reply to your enquiries
  • meet our legal and professional duties, including those set by the General Osteopathic Council and the Health and Care Professions Council

We will not use your information for marketing without your permission, and we never sell your information.

Our lawful reasons

Under UK data protection law, we must have a lawful reason to use your information. We rely on:

  • Contract: to provide the session you have booked and take payment.
  • Legal obligation: to keep clinical and financial records as required by law and by our regulators.
  • Legitimate interests: to run the clinic safely and efficiently, for example sending appointment reminders and replying to enquiries.
  • Consent: for anything optional, such as sharing information with someone you name or sending you news. You can withdraw consent at any time.

Health information is a special category of personal information. We use it because it is needed to provide healthcare, under Article 9(2)(h) of the UK GDPR and Schedule 1 of the Data Protection Act 2018. It is only seen by our clinicians and the staff who need it to support your care, all of whom have a duty of confidentiality.

Who we share your information with

We only share your information when we need to, and only as much as is needed:

  • Cliniko, our online booking and patient records system, which stores your records securely in the UK.
  • Your GP or other healthcare professionals, with your agreement, or without it only where the law allows, for example to protect you or someone else from serious harm.
  • Service providers who help us run the clinic, such as our website host, email provider, card payment provider and accountants. They may only use your information to provide their service to us.
  • Regulators, courts or the police, if we are legally required to.

If any of our service providers store information outside the UK, we make sure it is protected by safeguards approved under UK data protection law.

How long we keep your information

  • Adult client records: 8 years after your last appointment.
  • Financial records: 6 years, as required by HMRC.
  • Enquiries that do not lead to an appointment: no longer than 12 months.

After this, your information is securely deleted or destroyed.

Keeping your information safe

Your records are kept on secure, password protected systems that only authorised members of our team can access. Any paper records are kept locked away and are securely shredded when no longer needed.

Your rights

You have the right to:

  • ask for a copy of the information we hold about you
  • ask us to correct anything that is wrong or incomplete
  • ask us to delete your information, where we are not required to keep it
  • ask us to limit how we use your information, or object to how we use it
  • ask us to send your information to another provider
  • withdraw your consent at any time, where we rely on it

To use any of these rights, contact us using the details above. It is free, and we will reply within one month.

Cookies and our website

This website only uses the cookies it needs to work. We do not use advertising or tracking cookies. Some pages show Google Maps, which may set its own cookies when it loads; see Google’s privacy policy for details. When you book online you use Cliniko’s booking system, which is covered by Cliniko’s privacy policy.

Making a complaint

If you are unhappy with how we have handled your information, please talk to us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: visit ico.org.uk or call 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.

Last updated: 8 November 2026