Privacy Policy

Last updated: May 2025

Who We Are

Kinsealy Medical Centre is a GP practice located at 20 The Rise, Melrose Park, Swords, Co. Dublin K67 F683. We are the data controller for the personal information we hold about you. You can contact us by phone at (01) 840 5940 or by email at kinsealymedicalcentre@protonmail.com.

What Information We Collect

We collect and process personal information necessary to provide you with healthcare services, including:

• Your name, date of birth, address, and contact details
• Medical history, clinical notes, diagnoses, and treatment records
• Medication and prescription records
• Test results and investigation reports
• Referral letters and correspondence with other healthcare providers
• PPS number and health card details where relevant

Why We Use Your Information

We use your personal information to:

• Provide you with safe and appropriate medical care
• Communicate with other healthcare providers involved in your care
• Comply with our legal and regulatory obligations
• Process claims with the HSE, insurance companies, and scheme administrators
• Manage appointments and recalls for preventive care

Legal Basis for Processing

We process your personal data on the basis of providing healthcare services under GDPR Article 6(1)(b) (performance of a contract) and Article 9(2)(h) (medical diagnosis and healthcare). Where required, we will seek your explicit consent.

Who We Share Your Information With

Your information may be shared with:

• Other healthcare professionals involved in your care (hospitals, specialists, pharmacies)
• The HSE and relevant government bodies as required by law
• Health insurance companies and scheme administrators where you have authorised this
• Our GP software and clinical systems providers, who process data on our behalf under strict data processing agreements

We will never sell your personal data to third parties or use it for marketing purposes without your explicit consent.

How Long We Keep Your Records

We retain patient records in accordance with HSE retention guidelines. GP records are generally retained for a minimum of 8 years after the last attendance, or until age 25 in the case of children. Records may be kept longer where required by law or professional obligations.

Your Rights

Under GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of data in certain circumstances
• Restriction — request we restrict processing in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests

To exercise any of these rights, please submit a written request to reception. We will respond within 30 days. A fee may apply in certain circumstances.

Data Security

We take the security of your personal data seriously. Our clinical system is maintained by accredited healthcare IT providers. Access to patient records is restricted to authorised staff only. All staff are trained in data protection obligations.

Complaints

If you have concerns about how we handle your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie or by phone at 01 765 0100.

Changes to This Policy

We may update this privacy policy from time to time. The current version will always be available on this page. We encourage you to review it periodically.