Privacy & Cookies Policy

1. Who We Are

This website, drzaf.co.uk (the “Site”), is operated by SPORTSDRZAF LTD (“we”, “us”, or “our”), a private limited company registered in England and Wales, trading as Dr Zaf — Elite Sports Medicine. We are the data controller responsible for your personal data.

• Company Name: SPORTSDRZAF LTD
• Company Registration Number: 17337640
• Email: hello@drzaf.co.uk

We are committed to protecting your privacy and to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

2. What This Policy Covers

This Privacy & Cookies Policy explains:

• What personal data we collect
• Why we collect it
• How we use and store it
• When and how we may share it
• Your data protection rights
• How we use cookies on our website

3. The Data We Collect

a. Information you give us. When you contact us through the Site’s enquiry form or by email, we may collect:

• Full name
• Email address
• Organisation or team name (optional)
• The subject and content of your message
• Any other information you choose to share with us voluntarily

Please do not send us sensitive personal or medical information through the website contact form. If you need to discuss your health or a clinical matter, we will arrange a secure and appropriate way to do so.

b. Information we collect automatically. When you visit the Site, we (and our analytics provider) may collect limited technical data such as your IP address, browser and device type, the pages you view, and how you arrived at the Site. This is collected through cookies and similar technologies — see Section 10 (Cookies) — and, where required, only with your consent.

4. How We Use Your Data

We use your data for the following purposes:

• To respond to your enquiries and questions
• To arrange and provide consultations, services and other work you request
• To communicate with you and manage our relationship with you
• To operate, maintain, secure and improve the Site
• To comply with our legal or regulatory obligations

5. Lawful Basis for Processing

Under the UK GDPR, our lawful bases for processing your data are:

• Consent – for non-essential cookies and analytics, and for any optional information you choose to provide.
• Legitimate interests – to respond to enquiries, manage our relationship with you, and run, secure and improve the Site.
• Contract – where processing is necessary to take steps at your request before, or to perform, a contract with you.
• Legal obligation – to meet regulatory or compliance requirements.

6. How We Store and Protect Your Data

Your personal data is stored securely on password-protected systems and devices, with access restricted to authorised personnel only. We implement appropriate technical and organisational measures to safeguard your data against accidental loss, unauthorised access, or disclosure.

We retain your data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements. Enquiries that do not lead to an ongoing relationship are deleted once they are no longer needed.

7. Sharing Your Data

We do not sell your personal data. We only share it where necessary:

• With trusted service providers who help us operate the Site and communicate with you — for example our website host, email provider and analytics provider — who process data on our behalf under appropriate confidentiality and data-protection terms;
• Where we are required to do so by law, or to establish, exercise or defend legal claims.

8. International Transfers

Some of our service providers may store or process data on servers located outside the United Kingdom. Where this happens, we ensure that appropriate safeguards — such as a UK adequacy decision or the ICO’s International Data Transfer Agreement / standard contractual clauses — are in place to protect your data in accordance with UK GDPR.

9. Your Data Protection Rights

Under the UK GDPR, you have the right to:

• Access your data
• Correct inaccurate or incomplete data
• Request erasure of your data (the “right to be forgotten”)
• Restrict processing of your data
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)
• Data portability (in certain circumstances)
• Lodge a complaint with the Information Commissioner’s Office (www.ico.org.uk)

To exercise any of your rights, please contact us at hello@drzaf.co.uk.

10. Cookies Policy

Our website uses cookies to help it function and to help us understand how it is used. Cookies are small text files placed on your device when you visit a website.

a. Types of cookies we use:

• Strictly necessary cookies – essential for the operation of the Site.
• Analytical / performance cookies – help us measure how visitors interact with the Site so we can improve it.
• Functionality cookies – remember choices you make to improve your experience.

We do not use cookies to collect personally identifiable information without your consent. Where non-essential cookies (such as analytics) are used, we will ask for your consent through our cookie banner when you first visit the Site.

b. Managing cookies: You can control or delete cookies at any time through your browser settings, and you can withdraw or change your consent to non-essential cookies via the cookie banner.

11. Updates to This Policy

We may update this policy from time to time. Any changes will be posted on this page and, where appropriate, the “Last updated” date above will change. Please check back regularly to stay informed.

12. Contact Us

If you have any questions about this policy or wish to exercise your rights, please contact:

Data Protection Contact
SPORTSDRZAF LTD
Email: hello@drzaf.co.uk