Privacy Policy
Data Controller
The data controller responsible for your personal data is EVELYN'S Medical Care, registered in the Republic of Ireland under company number 744415, tax number 4171111FH. Registered office: 2 The Park, Moyglare Hall, Maynooth, Co. Kildare, W23W8Y4, Ireland. Clinic: 31/32 Cumberland St N, Dublin 1. Contact: [email protected].
Data We Collect
We collect data you provide voluntarily when contacting us: your name, phone number, email address, and any medical information you choose to share via WhatsApp, phone, or email to book an appointment. We also collect navigation data (pages visited, browser type, device) when you consent to analytics cookies via our cookie banner.
Legal Basis
We process your data under the following legal bases under GDPR: (a) your consent when you contact us or accept analytics cookies; (b) the performance of a contract or pre-contractual steps when you book an appointment; (c) our legitimate interest in responding to your enquiry and providing medical care.
Purposes
We use your data to: schedule and manage appointments, respond to your enquiries, send confirmation or follow-up messages related to your visit, and — only if you consent — measure website traffic to improve the site.
Data Retention
Contact data is kept for as long as needed to provide care and meet legal or professional record-keeping obligations. Medical records created during consultations are held by the clinic in accordance with Irish medical record retention rules. Analytics data is retained according to each provider's policy (Google Analytics, Meta Pixel).
Recipients
Your data may be processed by the following third parties acting as processors: hosting (Netlify), media storage (Cloudflare R2), messaging (WhatsApp / Meta), and — only with your consent — analytics (Google Analytics 4, Google Tag Manager, Meta Pixel). We do not sell your data to third parties.
International Transfers
Some processors (Google, Meta, Cloudflare) may transfer data outside the European Economic Area. These transfers are governed by Standard Contractual Clauses or equivalent safeguards under GDPR Article 46.
Your Rights under GDPR
You have the right to access, rectify, erase, restrict, object to, and port your personal data, and to withdraw consent at any time. To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the Data Protection Commission of Ireland (www.dataprotection.ie).
Health Data
This website does not process medical records or health data electronically. Any health information you share via WhatsApp, phone, or email is handled by the clinic directly during your consultation and is not stored on this website's servers.
Changes to This Policy
We may update this policy. The date of the last revision will always be shown at the top of this page. We recommend reviewing it periodically.