Privacy Policy
Effective Date: 10 Jan 2024
iNeuron Clinic ("we," "us," or "our") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data. Please read this document carefully to understand our practices regarding your personal information.
1. Data Controller Information
iNeuron Clinic is the data controller responsible for your personal data. If you have any questions or concerns about this Privacy Policy or the handling of your personal data, please contact us:
2. Data We Collect
We collect the following types of personal data:
A. Personal Identification Information
- Name
- Date of Birth
- Contact Information (e.g., phone number, email address)
B. Medical and Health Information
- Medical history
- Diagnosis, treatment records, and prescriptions
- Insurance details
- Emergency contact information
C. Financial Information
- Billing details
- Payment information (e.g., card details, if applicable)
D. Technical Information
- IP address
- Browser type and version
- Device identifiers
- Cookies and analytics data
3. How We Collect Data
We collect personal data in the following ways:
- Directly from You: When you fill out forms, schedule appointments, or communicate with us.
- Automatically: Through cookies, analytics tools, or other tracking technologies on our website.
- From Third Parties: Such as referrals, insurance companies, or other healthcare providers.
4. Purposes of Data Processing
Your personal data is processed for the following purposes:
- Provision of Healthcare Services: To diagnose, treat, and manage your healthcare needs.
- Administration: To manage appointments, patient records, and billing.
- Legal Compliance: To meet regulatory and legal obligations.
- Marketing: With your explicit consent, to inform you about our services, offers, or events.
- Website Analytics: To improve the functionality and user experience of our website.
5. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Consent: When you provide explicit consent for specific purposes (e.g., marketing).
- Contractual Necessity: To fulfill our obligations under a contract with you.
- Legal Obligation: To comply with applicable laws and regulations.
- Vital Interests: To protect your or another person’s vital interests.
- Public Interest: For the performance of a task carried out in the public interest.
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided it does not override your rights.
6. Data Sharing and Disclosure
Your data may be shared with:
- Healthcare Providers: To ensure coordinated care and treatment.
- Service Providers: Who assist us in providing services (e.g., IT support, payment processors).
- Legal and Regulatory Authorities: To comply with legal obligations.
- Insurance Companies: For billing and claims purposes.
- Third Parties: With your explicit consent or as required by law.
We will never sell or rent your personal data to third parties.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. For example:
- Medical Records: Retained for a minimum of five (5) years from the date of your last interaction with the clinic, in compliance with healthcare regulations.
- Financial Records: Retained for tax and audit purposes.
8. Your Rights
Under GDPR, you have the following rights:
- Right to Access: Request access to your personal data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data under certain conditions.
- Right to Restrict Processing: Request to limit the processing of your data.
- Right to Data Portability: Request transfer of your data to another service provider.
- Right to Object: Object to the processing of your data for direct marketing or other purposes.
- Right to Withdraw Consent: Withdraw consent at any time, where processing is based on consent.
- Right to Complain: Lodge a complaint with a supervisory authority (e.g., the Data Protection Commissioner in Ireland).
9. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These measures include:
- Encryption of sensitive data.
- Secure storage systems.
- Regular security assessments.
- Access controls and staff training.
10. Data Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure adequate protection through:
- Standard Contractual Clauses approved by the European Commission.
- Other lawful safeguards as required under GDPR.
11. Cookies and Online Tracking
Our website uses cookies and similar technologies. For detailed information on how we use cookies, please see our Cookie Policy.
12. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website, and significant updates will be communicated directly to you.
13. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Thank you for trusting iNeuron Clinic with your personal data. We are committed to safeguarding your privacy and providing quality healthcare services.