Data privacy policy
Effective Date: 26/06/2026
Privacy Notice
At Korf, we are committed to protecting your personal information and respecting your privacy. This Privacy Notice explains how we collect, use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Korf is an osteopathy and sports massage clinic based in Northamptonshire.
Data Controller: Korf Clinic
Contact Details
Address: Stable View, Horton Road, NN7 2AW, UK
Email: alienorsandt.osteo@gmail.com & ob1performancecoaching@gmail.com
Telephone: 07909 626467
What Information We Collect
To provide safe and effective treatment, we collect personal information including:
•Name, date of birth and contact details
•Emergency contact information
•Medical history and relevant health information
•Assessment findings, treatment records and clinical notes
•Appointment history and payment information where applicable
If you visit our website, we may also collect limited technical information such as your IP address and cookies to help improve our website.
Why We Collect Your Information
We use your personal information to:
•Provide osteopathy and sports massage treatment
•Maintain accurate clinical records
•Book and manage appointments
•Contact you regarding your care or appointments
•Process payments
•Meet our legal and professional obligations
With your consent, we may occasionally send you updates or health information. You can opt out at any time.
Legal Basis for Processing
We process your personal information because:
•It is necessary to provide healthcare and fulfil our contract with you.
•It is necessary for our legitimate interests in managing the clinic and communicating with patients.
•We have legal and professional obligations to maintain healthcare records.
•Where required, we rely on your consent (for example, for marketing communications).
How Your Information Is Stored
Your clinical records are securely stored using Cliniko, a cloud-based practice management system designed for healthcare providers. Cliniko uses secure, encrypted storage and complies with applicable data protection requirements. Access to your records is restricted to authorised staff and practitioners involved in your care.
Sharing Your Information
We treat your information as confidential and will never sell your personal data.
We may share your information only when necessary:
•With healthcare professionals involved in your care (with your consent where appropriate)
•With Cliniko as our secure practice management provider
•With payment providers and professional advisers where necessary
•Where required by law
How Long We Keep Your Information
We retain patient records in line with professional guidance:
•Adult records are normally kept for 8 years after your last appointment.
•Records relating to children are kept until their 25th birthday (or longer where legally required).
After this period, records are securely deleted or destroyed.
Your Rights
Under UK GDPR, you have the right to:
•Access your personal information
•Request correction of inaccurate information
•Request erasure where applicable
•Restrict or object to certain processing
•Withdraw consent where consent has been given
•Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, please contact us using the details above.
Contact and Complaints
If you have any questions about this Privacy Notice or how we use your information, please contact us.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk
This Privacy Notice may be updated from time to time. The latest version will always be available on request and on our website.