Privacy Policy

Last updated: 13 August 2026

Who we are

Nordic Centre is an osteopathy, sports therapy and personal training clinic based at Kiln Saddlery, Kingsford, Colchester, CO2 0HT. Michelle Chart Rollafson, our lead osteopath, is registered with the General Osteopathic Council (GOsC) and is the data controller for the personal information described in this policy.

If you have any questions about this policy or how we handle your information, contact [email protected] or WhatsApp 07540 589906.

Information we collect

We collect information you give us directly when you get in touch, book an appointment or attend a session, including:

• Contact details: name, email address, phone number and address
• Appointment details: treatment type, preferred day and time, and booking history
• Health information: relevant medical history, symptoms, assessment findings, treatment notes and aftercare plans, collected during consultations
• Any other information you choose to share with us, for example over WhatsApp or email

How we collect it

We collect information through three channels: our online booking system (Jane), WhatsApp messages, and directly during consultations at the clinic. We do not use cookies, analytics or tracking tools on this website, so we do not collect information about how you browse this site.

How we use your information

We use your information to:

• Book, manage and remind you of appointments
• Provide safe, appropriate osteopathic, sports therapy or personal training care, including assessment, treatment and aftercare
• Respond to enquiries sent by WhatsApp, email or through our booking system
• Meet our professional, legal and insurance obligations as a GOsC-registered practice

We do not use your information for marketing without your separate consent, and we never sell your information to third parties.

Health information

As an osteopathic clinic, some of the information we hold about you is "special category" health data under UK GDPR. We collect and use this information for the purposes of providing healthcare and managing our clinical records, which is a lawful basis specifically recognised for health professionals. Your clinical notes are only accessed by your treating practitioner and are handled with the same confidentiality as any GOsC-registered clinic.

Who we share your information with

We share information with a small number of trusted services that help us run the clinic. Each acts as a data processor on our behalf and has its own privacy and security terms:

• Jane (janeapp.com) — our online booking and practice management system, which stores your appointment and, where applicable, clinical record information
• WhatsApp (Meta) — if you message us on WhatsApp, that conversation is subject to WhatsApp's own privacy policy
• Zoho — our email provider, used to send and receive clinic correspondence
• Google Maps — embedded on our Visit Us page to show our location; Google may set its own cookies when the map loads

We do not share your information with anyone else unless we are required to by law, for example if requested by a court, regulator or in a medical emergency.

How long we keep your information

We keep clinical records for as long as necessary to provide your ongoing care and to meet the record-keeping guidance set out by the General Osteopathic Council and our professional indemnity insurer. General enquiry messages that don't lead to an appointment are kept only as long as needed to respond to you.

Your rights

Under UK GDPR, you have the right to:

• Ask what personal information we hold about you and get a copy of it
• Ask us to correct information that is inaccurate or incomplete
• Ask us to delete your information, where we are not required to keep it for clinical or legal reasons
• Object to or restrict how we use your information
• Ask for your information in a portable format

To exercise any of these rights, contact us at [email protected]. If you're unhappy with how we've handled your information, you also have the right to complain to the Information Commissioner's Office (ICO).

Keeping your information secure

We take reasonable steps to keep your information secure, including using reputable, GDPR-compliant third-party services for booking and email, and limiting access to clinical records to your treating practitioner.

Changes to this policy

We may update this policy from time to time, for example if we start using a new booking or communication tool. Any changes will be posted on this page.