Privacy Policy

Thomas Wynn-Jones Osteopath

WhatsApp: +971 505 333 669

Effective Date: 14 April 2026

1. Introduction

Thomas Wynn-Jones (“we”, “us”, or “our”) is committed to protecting the privacy and confidentiality of all personal and health information that you share with us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website (thomaswynn-jonesosteopath.com), book an appointment, or receive osteopathic treatment at our clinic.

By using our website or services, you agree to the collection and use of your information in accordance with this policy. If you do not agree, please discontinue use of our website and services.

2. Who We Are

Thomas Wynn-Jones is a registered osteopath practising in Dubai, UAE, holding dual registration with:

The General Osteopathic Council (GOsC) — United Kingdom
The Dubai Health Authority (DHA) — United Arab Emirates (License: 19585325-006)

As a healthcare provider regulated by the DHA, we are legally obligated to maintain strict confidentiality and handle all patient health information in compliance with applicable UAE healthcare regulations and data protection laws.

3. Information We Collect

3.1 Personal Identification Information

Full name
Date of birth
Email address
Phone number (including WhatsApp)

3.2 Health and Medical Information

Medical history and previous diagnoses
Current symptoms, complaints, and reason for visit
Medications and allergies
Surgical history and ongoing treatments
Clinical assessment notes and treatment records
Progress notes from each consultation

3.3 Website and Technical Data

IP address and browser type
Pages visited and time spent on the website
Referral source (how you found us)
Cookie data (see Section 9)

3.4 Communication Data

Messages sent via WhatsApp, email, or the website contact form
Appointment requests and booking history

4. How We Use Your Information

We use the information we collect for the following purposes:

To provide osteopathic consultations, treatment, and follow-up care
To maintain accurate and up-to-date patient clinical records
To communicate appointment confirmations, reminders, and follow-ups
To respond to enquiries submitted via our website, email, or WhatsApp
To provide online consultations where requested
To comply with our legal and regulatory obligations under DHA and GOsC guidelines
To improve our website and user experience based on anonymous analytical data
To send you relevant health information or updates (only with your consent)

We will never use your personal or health data for marketing purposes without your explicit consent, and we will never sell your data to any third party.

5. Legal Basis for Processing Your Data

We process your personal data under the following lawful bases:

Consent — where you have given us clear permission to use your data for a specific purpose (e.g., marketing communications).
Contractual necessity — to fulfil our obligations when you book and receive treatment.
Legal obligation — to comply with DHA regulations and healthcare record-keeping requirements.
Legitimate interests — such as improving our services, website security, and fraud prevention.
Vital interests — in emergency situations where your health or safety is at risk.

6. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With other healthcare providers — if you are referred to or from another specialist, with your written or verbal consent.
With regulatory bodies — such as the Dubai Health Authority (DHA) or General Osteopathic Council (GOsC) if required by law or for professional compliance purposes.
With service providers — trusted third-party platforms (e.g., our website hosting provider, appointment booking system) who process data strictly on our behalf and under confidentiality agreements.
In an emergency — where disclosure is necessary to protect your life or the life of another person.
In legal proceedings — if required by a court order or other legal process.

7. Data Retention

We retain your clinical records and personal data for a minimum of 10 years from the date of your last consultation, or as required under DHA regulations for adult patients. For records relating to children, we retain data until the child reaches the age of 28, or for 10 years from the last consultation, whichever is longer.

Website and technical data is retained for a shorter period, typically up to 24 months, for analytical and security purposes. Communication records (emails, WhatsApp messages) are retained for up to 3 years.

After the applicable retention period, your data will be securely deleted or anonymised.

8. Data Security

We take the protection of your personal and health information seriously. We implement appropriate technical and organisational measures to safeguard your data against unauthorised access, loss, alteration, or disclosure. These measures include:

Secure, password-protected storage of all clinical records
Encrypted digital communications where feasible
Limited access to patient records on a need-to-know basis
Regular review of our data security procedures

While we take every reasonable precaution, no method of electronic data transmission or storage is completely secure. If you have concerns about how your data is stored, please contact us directly.

9. Cookies Policy

Our website (thomaswynn-jonesosteopath.com) uses cookies to enhance your browsing experience and to help us understand how visitors use the site. Cookies are small text files stored on your device.

Types of cookies we use:

Essential cookies — necessary for the website to function correctly.
Analytics cookies — help us understand visitor behaviour (e.g., Google Analytics). These are anonymised and do not identify individuals.
Preference cookies — remember your settings and choices on the site.

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the website.

10. Your Rights

You have the following rights in relation to the personal data we hold about you:

Right of Access — to request a copy of the personal data we hold about you.
Right to Rectification — to request that we correct any inaccurate or incomplete data.
Right to Erasure — to request deletion of your data, subject to our legal record-keeping obligations.
Right to Restriction — to request that we limit how we use your data in certain circumstances.
Right to Object — to object to the processing of your data for direct marketing or legitimate interest purposes.
Right to Data Portability — to request your data in a structured, machine-readable format.
Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 12. We will respond within 30 days. We may need to verify your identity before processing your request.

11. Children’s Privacy

We provide paediatric and infant osteopathy services. For patients under the age of 18, all personal and health data is collected from and with the consent of a parent or legal guardian. Parents and guardians may exercise any of the data rights described in Section 10 on behalf of their child.

Our website is not intended for direct use by children under the age of 13, and we do not knowingly collect personal data directly from children through our website.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Thomas Wynn-Jones Browns & Co., 343 Al Wasl Rd, Al Bada’a, Dubai, UAE

Email: thomaswynnjones@gmail.com
Phone: +971 54 544 5399
WhatsApp: +971 505 333 669

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or regulatory requirements. When we make significant changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you via email or a notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.