Privacy Policy Dr Datler Sports Clinic - updated 01/03/2026

At Dr Datler Sports Clinic (formerly Blackheath Sports Clinic), we are committed to protecting the privacy and security of our patients' personal and medical information. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Dr Christoph Datler (GOsC Registration: 9006) is the Data Controller for this clinic.

1. The Information We CollectTo provide safe and effective osteopathic care, we must collect certain personal and medical information. This includes:

• Contact Details: Name, address, date of birth, phone number, and email address.
• Medical Information (Special Category Data): Your medical history, details of your current symptoms, GP contact details, lifestyle information, and clinical notes from your treatment sessions.
• Technical/Booking Data: Information collected when you use our website or book an appointment online via our booking partner, Setmore.

2. Why We Collect This Information (Our Legal Basis)Under UK GDPR, we must have a lawful basis for processing your data.

• We hold your general personal data to fulfil our Contract with you (to book appointments and manage your care).
• We hold your health data under the legal basis of the Provision of Health or Social Care (Article 9(2)(h) of the UK GDPR). We need this information to safely assess, diagnose, and treat you.

3. How We Store Your DataYour clinical records and personal data are stored securely:

• Digital Records: Stored on secure, password-protected, and encrypted clinic management systems.
• Online Bookings: We use Setmore to manage our diary. Setmore is a secure third-party processor that complies with data protection regulations. When you book online, your name, contact details, and appointment times are processed by them on our behalf.

4. Who We Share Your Data WithWe take your confidentiality seriously. We will never sell your data to third parties. We will only share your information if:

• You explicitly request or consent to us sharing your medical notes with another healthcare professional (e.g., your GP, a consultant, or an insurance provider like Aviva, WPA, Cigna, or Vitality).
• We are required to do so by law or for a safeguarding concern.
• It is necessary for our secure third-party processors (like Setmore for bookings or our accountancy software for invoicing) to function.

5. How Long We Keep Your RecordsAs a registered healthcare provider, we have a legal obligation to retain your medical records for a specific period, even if you stop receiving treatment.

• Adults: We retain your records for 8 years after the date of your last treatment.
• Children: If the patient is under 18, records are kept until their 25th birthday (or 26th birthday if they were 17 at the conclusion of treatment). After this time, your records will be securely destroyed or permanently deleted.

6. Your Rights Under UK GDPR, you have the right to:

• Access: Request a copy of the medical and personal data we hold about you (a Subject Access Request). We will provide this within 30 days.
• Rectification: Ask us to correct any factual inaccuracies in your contact details or records (though clinical opinions cannot be altered, an addendum can be added).
• Erasure: Request that we delete your data. (Please note: Due to our legal obligation to retain medical records, the right to erasure does not apply to your clinical notes until the mandatory retention period has passed).

7. Contact Us
If you have any questions about this Privacy Policy, how we handle your data, or if you wish to make a Subject Access Request, please contact us at:
Dr Datler Sports Clinic Email: [email protected]
Phone: 077764 20933
Bromley Clinic: 64 Mays Hill Road, Bromley, London BR2 0HT
Blackheath Clinic: 1A Eliot Hill, Blackheath, London SE13 7EB

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data is being mishandled (www.ico.org.uk).