Legal & Compliance
Privacy Policy
Last updated: 1 April 2025
1. Introduction
Clanmaurice Medical Practice ("we", "us", "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information, and sets out your rights under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
This policy applies to all data collected via this website, our booking and online service forms, and any communications you have with our practice.
2. Data Controller
Clanmaurice Medical Practice
Abbeydorney, Co. Kerry, Ireland
Ballyheigue, Co. Kerry, Ireland
Email: reception@clanmauricemp.com
Phone (Abbeydorney): 066 713 5525
Phone (Ballyheigue): 066 713 3200
Data Protection Contact: reception@clanmauricemp.com
3. Personal Data We Collect
We collect personal data when you:
- Submit a booking or appointment request via this website
- Complete an online prescription request
- Submit an online consultation form
- Complete an online services request (blood results, certificates, letters)
- Contact us via telephone, email, or the contact form
- Register interest in a clinic service
The types of personal data we may collect include:
- Identity data: Full name, date of birth
- Contact data: Email address, telephone number
- Health data: Symptoms, medical conditions, medications, allergies, reason for appointment
- Financial data: Payment information processed via Stripe (we do not store card details)
- Technical data: IP address, browser type, and usage data (where analytics cookies are accepted)
4. How and Why We Use Your Data
Booking and scheduling appointments
Contract / Provision of healthcare
Processing online prescription and service requests
Provision of healthcare; Explicit consent
Sending appointment confirmations and reminders
Legitimate interest; Contract
Processing payments via Stripe
Contract; Legal obligation
Responding to enquiries and contact requests
Legitimate interest; Consent
Notifying patients of clinic service launches
Consent
Improving website experience (analytics)
Consent
Complying with legal and regulatory obligations
Legal obligation
5. Data Retention
We retain personal data only for as long as necessary:
- Patient medical records: Retained for a minimum of 8 years from last contact, as required by Irish medical standards and the Medical Council guidelines.
- Booking and appointment records: Retained for 7 years.
- Payment records: Retained for 7 years for accounting and regulatory compliance.
- Contact and enquiry data: Retained for 2 years unless the enquiry results in an ongoing patient relationship.
- Website analytics data: Retained in aggregated, anonymised form.
After the applicable retention period, data is securely deleted or anonymised.
6. Third-Party Processors
We share your data with the following trusted third-party processors where necessary to deliver our services. All processors are GDPR-compliant and bound by data processing agreements.
Base44 (Platform Host)
Website hosting, database, and application platform
Data location: EU
Resend / Email Provider
Transactional emails (confirmations, notifications)
Data location: EU
We do not sell or rent your personal data to any third party for marketing purposes.
7. Your Rights Under GDPR
You have the following rights in relation to your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data, subject to legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances.
Right to Portability
Request your data in a structured, commonly-used machine-readable format.
Right to Object
Object to processing based on legitimate interest or for direct marketing purposes.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent. Withdrawal does not affect prior lawful processing.
Automated Decision-Making
Not be subject to decisions based solely on automated processing that significantly affect you.
To exercise any of these rights, please contact us at reception@clanmauricemp.com. We will respond within 30 days. Identity verification may be required.
8. Cookies
We use cookies and similar tracking technologies on this website. The following categories of cookies may be used:
Strictly Necessary — No consent required
Essential for the website to function. Cannot be disabled.
Analytics — Consent required
Help us understand how visitors use the site. All data is aggregated and anonymous.
Marketing — Consent required
Used to track visitors across websites to display relevant advertising.
You can manage your cookie preferences at any time using the Cookie Settings option in the website footer.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include:
- TLS/HTTPS encryption for all data transmitted via this website
- Access controls limiting data access to authorised personnel only
- Secure third-party processors subject to GDPR-compliant data processing agreements
- Payment data processed exclusively by Stripe — we do not store card numbers or payment credentials
10. Right to Complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Data Protection Commission (DPC), which is the supervisory authority in Ireland:
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Phone: +353 (0)1 765 0100
We would, however, appreciate the opportunity to address your concerns directly before you contact the DPC. Please reach out to us first at reception@clanmauricemp.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The date at the top of this page indicates when it was last updated. We recommend reviewing this policy periodically.