Privacy Policy

Who We Are

Sutton Clinic is a general medical practice located at 31 Howth Rd, Burrow, D13 H582, Dublin. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 (Ireland), and relevant HSE guidelines.

What Personal Data We Collect

As part of providing healthcare services, we may collect and process:

1. Personal Information

• Name, address, phone number, and email address.
• Date of birth and PPS number (where required).

2. Medical Information (Special Category Data)

• Comprehensive medical history and clinical records.
• Diagnosis, treatment details, and prescriptions.
• Laboratory test results and clinical investigative notes.

3. Administrative Information

• Appointment scheduling details and histories.
• Referral letters and incoming/outgoing clinical correspondence.
• Payment and billing information.

Legal Basis for Processing

We process your data under the following strict lawful bases:

• Provision of Healthcare (Article 9(2)(h) GDPR)
• Legal Obligation (Medical record keeping rules)
• Patient Consent (Where specific communications apply)
• Legitimate Interests (Service security and enhancements)

How We Use Your Data

Your data is strictly used to:

• Provide safe, continuity-driven, and effective medical care.
• Maintain highly accurate, comprehensive medical records.
• Communicate with you regarding check-ups, appointments, and active treatments.
• Refer you securely to medical specialists or secondary healthcare providers.
• Comply fully with legal, statutory, and regulatory practitioner obligations.

Sharing Your Information

We may share your data where medically necessary or legally required with:

• The Health Service Executive (HSE).
• Hospitals, specialized consultants, and external healthcare professionals.
• Accredited laboratories for specific diagnostics and blood screening.
• Regulatory or statutory public health bodies where explicitly mandated by law.

All data sharing infrastructure is operated securely and limited strictly to the minimum info necessary.

Data Retention

We retain your medical files in rigid alignment with national Irish healthcare retention guidelines:

• Adult records: A minimum timeline of 8 years following your last active contact.
• Children’s records: Retained until the individual reaches age 25 (or 26 years depending on specific legal or case circumstances).

Records may occasionally be kept for longer durations where explicitly required for ongoing clinical or defense reasons.

Your Rights Under GDPR

You maintain full entitlement to execute the following data rights:

• Access your stored personal data files.
• Request correction or rectification of any inaccurate data.
• Request absolute restriction of processing features.
• Request erasure metrics (where legally and medically permissible).
• Object directly to specific configurations of processing.
• Request structured data portability formats.

To exercise any stated right, please query the clinic management directly. You also preserve a legal right to submit complaints directly to the Data Protection Commission.

Data Security

We enforce technical and administrative security frameworks to protect your data, including:

• Secure physical and electronic storage arrays for all medical files.
• Restricted profile access policies restricted strictly to authorized staff members.
• Fully encrypted on-site systems and secure digital communication modules.
• Regular data protection audit schedules and workflow reviews.

Confidentiality

All patient information is treated under medical privilege as strictly confidential. Our administrative and clinical personnel are exhaustively trained in personal data protocols and professional confidentiality parameters matching HSE structures.

Cookies & Website Data

Our website may collect baseline technical markers (like IP address blocks and anonymized browsing patterns) to optimize performance. Cookies may be utilized to refine your front-end experience. You hold full agency to manage cookie permissions within your web browser settings.

Contact Us

If you hold questions or clear inquiries relative to this Data Privacy Policy or your medical records management:

Updates to This Policy

We may refresh this Privacy Policy document at intervals to reflect legal adjustments, updated HSE parameters, or statutory changes. Revised provisions are immediately applicable once committed to this page layout.