Who We Are

iNeuron Clinic ("we", "us", "our") is a specialist healthcare provider offering assessment, diagnosis, and treatment services for Attention Deficit Hyperactivity Disorder (ADHD) and related neurodevelopmental conditions.

For the purposes of the General Data Protection Regulation (GDPR) (EU) 2016/679, iNeuron Clinic is the data controller responsible for your personal data.

Data We Collect

Personal identification data: Full name, date of birth, gender identity, contact details (email, phone, address), next of kin or emergency contact information.

Health and clinical data: Medical history, current and past diagnoses, ADHD assessment results, psychological test scores, medication details, prescription history, side-effect records, therapy session notes, clinical correspondence, and referral letters from other healthcare providers.

Financial data: Payment information (processed via secure third-party processors), insurance or funding details, invoice and billing records.

Technical and usage data: IP address, browser type, device identifiers, pages visited on our website, appointment portal usage logs, and cookie data.

Legal Basis for Processing

Under GDPR Article 6, we process your personal data on the following lawful bases: contract (to deliver clinical services), legal obligation (healthcare regulation and tax law), vital interests (to protect your life or that of another), legitimate interests (service improvement and fraud prevention), and explicit consent (marketing communications).

For special category health data, we additionally rely on GDPR Article 9(2)(h) — processing necessary for the provision of healthcare and treatment.

How We Use Your Data

We use your personal data to: provide ADHD assessments, diagnoses, treatment plans, and follow-up care; schedule and manage appointments; communicate with your GP, psychiatrists, or other healthcare professionals; process payments; comply with our legal and regulatory obligations; conduct internal audit and quality assurance; and send service-related communications (appointment confirmations, clinical letters).

We will never sell your personal data to any third party for commercial purposes. Your health information is used solely for your care and our lawful obligations.

Special Category (Health) Data

Your ADHD-related health data constitutes special category data under GDPR Article 9 and receives the highest level of protection. Access is strictly limited to clinicians and administrative staff directly involved in your care. All health records are encrypted at rest (AES-256) and in transit (TLS 1.2+). Access logs are maintained and reviewed regularly.

Data Sharing & Third Parties

We share your data only where necessary and lawful. Recipients may include: your GP and other clinicians involved in your care; IT and software providers (electronic health record systems, scheduling platforms) — all subject to Data Processing Agreements under GDPR Article 28; regulated payment processors; and regulatory or legal bodies where legally required (e.g. safeguarding authorities).

All third-party processors are contractually required to process data only on our documented instructions and implement appropriate security measures.

Data Retention

Your Rights Under GDPR

You have the following rights regarding your personal data:

• →Right of access — Request a copy of the personal data we hold about you
• →Right to rectification — Ask us to correct inaccurate or incomplete data
• →Right to erasure — Request deletion where there is no lawful basis to retain it
• →Right to restriction — Ask us to limit how we use your data
• →Right to data portability — Receive your data in a structured, machine-readable format
• →Right to object — Object to processing based on legitimate interests or direct marketing
• →Right to withdraw consent — Where processing is based on consent, you may withdraw at any time

To exercise any of these rights, contact our Data Protection Officer at admin@ineuronclinic.com. We will respond within 30 days as required by GDPR Article 12.

Cookies

Our website uses strictly necessary cookies (required for site function), analytics cookies (with your consent, e.g. Google Analytics), and marketing cookies (with your explicit consent). You can manage your cookie preferences at any time.

Security

We implement AES-256 encryption for data at rest, TLS 1.2+ for data in transit, role-based access controls, multi-factor authentication for all staff systems, regular staff training on data protection, and documented incident response procedures. In the event of a personal data breach likely to affect your rights, we will notify the relevant supervisory authority within 72 hours in accordance with GDPR Articles 33 and 34.

Contact & Complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission Ireland at dataprotection.ie.