This policy explains what personal data The Iron Osteo collects through this website, why we collect it, how we protect it, and the rights you have over it. We keep data collection to the minimum needed to run the service and never sell your information.
Who we are
The Iron Osteo is the osteopathy and strength-coaching practice of Luke Sanders, based at UNTIL, 111 Charing Cross Road, London WC2H 0DT. For any privacy question, or to exercise any of the rights below, contact admin@theironosteo.com. The Iron Osteo is the data controller for personal data collected through this website.
What we collect
- Enquiries you send us. When you use a contact form, we receive the name, email address and any details you choose to include. Forms are delivered via Formspree.
- Newsletter sign-ups. If you subscribe, we store the email address you provide. Our mailing list is managed by Mailchimp.
- Analytics. If you accept cookies, Google Analytics 4 collects anonymised usage data — pages visited, approximate location, device and browser type — to help us understand how the site is used. Analytics do not run unless you consent.
- Payments. If you purchase a programme or session, payment is processed securely by Stripe. We never see or store your full card details.
- Essential cookie. We store a single small cookie (
io_cookie_consent) recording your cookie choice so we don't ask again on every visit.
How we use your data
- To respond to enquiries and arrange appointments or coaching.
- To send the newsletter, where you have subscribed.
- To process payments for programmes and sessions.
- To understand and improve how the website performs.
Legal basis
We rely on your consent for analytics cookies and newsletter emails; on the performance of a contract (or steps to enter one) when you enquire, book or pay; and on our legitimate interest in running and improving the practice. You can withdraw consent at any time.
Cookies
The site uses only the essential consent cookie by default. Analytics cookies from Google are set solely if you select "Accept" on the cookie banner. Choosing "Decline" — or ignoring the banner — means no analytics cookies are placed. You can clear cookies at any time in your browser settings.
Sharing and third parties
We share personal data only with the service providers that make the website work, each acting as our data processor: Formspree (contact forms), Mailchimp (newsletter), Google (analytics) and Stripe (payments). We do not sell your data or share it for advertising. Some of these providers may process data outside the UK/EEA; where they do, that transfer is covered by appropriate safeguards such as Standard Contractual Clauses.
How long we keep it
We keep enquiry and client correspondence for as long as needed to provide the service and to meet legal and professional record-keeping obligations, then delete it. Newsletter data is kept until you unsubscribe. Analytics data is retained according to Google's standard retention settings.
Your rights
Under UK data protection law you have the right to access the data we hold about you, to have it corrected or erased, to restrict or object to its use, to data portability, and to withdraw consent at any time. To make a request, email admin@theironosteo.com. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Data security
The website is served over HTTPS and we use reputable providers who apply their own security controls. No online service can be guaranteed completely secure, but we take reasonable steps to protect your information.
Children
This website is not directed at children, and we do not knowingly collect data from anyone under 16 through it.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.
Contact
Questions about this policy or your data: admin@theironosteo.com.