1. Introduction
Archview Physiotherapy Pain and Sports Injury Clinic (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act 2018 (Ireland).
We act as the Data Controller for all personal data collected through this Website and in connection with our clinical services.
2. Data Controller Contact Details
Archview Physiotherapy Pain and Sports Injury Clinic
49 Ranelagh Road, Ranelagh, Dublin 6, D06 YY30
Email: info@archviewclinic.ie
Phone: (01) 491 3228
3. What Personal Data We Collect
We may collect and process the following categories of personal data:
Contact and Identity Data:
- Name, address, email address, telephone number
- Date of birth (for clinical records)
Health Data (Special Category Data):
- Medical history, injury details, treatment records, and clinical notes
- GP referral information where applicable
Technical Data:
- IP address, browser type, browser version
- Pages visited, time and date of visits, time spent on pages
- Cookie identifiers and analytics data (see Section 8)
Communications Data:
- Enquiries submitted through our contact form
- Email correspondence with our clinic
4. How We Collect Your Data
We collect data in the following ways:
- Directly from you when you complete an online booking, contact form, or enquiry
- When you email, phone, or otherwise contact us
- During the course of providing physiotherapy treatment to you
- Automatically via cookies and analytics tools when you use our Website (see Section 8)
5. Legal Basis for Processing
We rely on the following legal bases under GDPR to process your personal data:
- Consent: Where you have given clear consent, e.g. to send you clinic updates or appointment reminders
- Contract: Where processing is necessary to fulfil an appointment or provide treatment services
- Legal obligation: Where we are required to retain records under Irish healthcare law
- Vital interests: In emergency situations where we need to protect your health or safety
- Legitimate interests: For website security, service improvement, and fraud prevention, where your interests and rights do not override ours
For health data (special category data), we rely on Article 9(2)(h) GDPR — processing necessary for the provision of healthcare — in addition to the above bases.
6. How We Use Your Data
We use your personal data to:
- Book, manage, and deliver physiotherapy appointments and treatments
- Communicate with you regarding your care and appointments
- Maintain clinical records as required by Irish healthcare regulations
- Respond to enquiries submitted through our Website or by telephone
- Improve the quality and accessibility of our services
- Send appointment reminders where you have consented to receive them
- Comply with legal and regulatory obligations
7. Data Sharing
We do not sell, trade, or rent your personal data to third parties. We may share your data only in the following circumstances:
- With other healthcare providers involved in your care, such as your GP or a specialist, where clinically necessary and with your knowledge
- With our online booking system provider for the purpose of appointment management
- With HIQA, the Data Protection Commission, or other regulatory bodies where legally required
- Where you have given explicit consent to share with a named third party
All third-party data processors we use are bound by appropriate data processing agreements and are required to handle your data securely and in accordance with GDPR.
8. Cookies
Our Website uses cookies to enhance your browsing experience and to help us understand how visitors use the site. The following types of cookies may be used:
- Strictly necessary cookies: Required for the Website to function correctly
- Analytics cookies: Used via Google Analytics to collect anonymous information about how visitors use the Website. No personally identifiable information is collected through these cookies
- Preference cookies: Used to remember your cookie consent preference
You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of the Website. On your first visit, you will be presented with a cookie consent notice. You may withdraw consent at any time by adjusting your browser settings or contacting us directly.
9. Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected. Clinical records are retained in accordance with HSE retention guidelines and applicable Irish legislation, which generally requires retention of adult patient records for a minimum of eight years from the date of last treatment.
Website enquiry data will be retained for no longer than two years unless you have an ongoing treatment relationship with us. When data is no longer required, it is securely deleted or anonymised.
10. Your Data Rights
Under GDPR, you have the following rights in relation to your personal data:
- Right of access: To request a copy of the personal data we hold about you
- Right to rectification: To request correction of inaccurate or incomplete data
- Right to erasure: To request deletion of your data in certain circumstances
- Right to restriction of processing: To request that we limit how we use your data
- Right to data portability: To receive your data in a structured, commonly used format
- Right to object: To object to processing based on legitimate interests
- Rights in relation to automated decision-making: We do not use automated decision-making or profiling
To exercise any of these rights, please contact us at info@archviewclinic.ie or in writing to our address above. We will respond within one month of receiving your request.
You also have the right to lodge a complaint with the Data Protection Commission (DPC) if you believe your data has been processed unlawfully. The DPC can be contacted at www.dataprotection.ie or by post at 21 Fitzwilliam Square South, Dublin 2, D02 RD28.
11. Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include secure servers, encrypted communications where applicable, and restricted access to personal data on a need-to-know basis.
While we take all reasonable steps to protect your information, no method of transmission over the internet is entirely secure. Any data you transmit to us is done at your own risk.
12. International Transfers
We do not routinely transfer your personal data outside of the European Economic Area (EEA). Where any transfer does occur, we ensure adequate safeguards are in place in accordance with Chapter V of GDPR.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this Policy periodically. Your continued use of our services after changes have been posted constitutes your acceptance of the revised Policy.
14. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Archview Physiotherapy Pain and Sports Injury Clinic
49 Ranelagh Road, Ranelagh, Dublin 6, D06 YY30
Email: info@archviewclinic.ie
Phone: (01) 491 3228