Privacy Policy
Last updated: September 2026
Greystones Dermatology respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact the clinic or book an appointment with us.
It also explains your rights under the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and other applicable Irish data protection legislation.
1. Who We Are
Greystones Dermatology is a dermatology clinic based in Greystones, Co. Wicklow, Ireland.
For the purposes of applicable data protection law, Greystones Dermatology is the data controller responsible for personal data collected through this website and in connection with the provision of our services.
Greystones Dermatology
Greystones, Co. Wicklow
Telephone: 01 287 6520
Email: reception@greystonesdermatology.ie
If you have any questions about this Privacy Policy or how your personal data is handled, please contact us using the details above.
2. Personal Data We May Collect
Depending on how you interact with Greystones Dermatology, we may collect and process information including:
your name, date of birth and contact details, including your telephone number, email address and postal address;
information you provide when making an enquiry or booking an appointment;
appointment and scheduling information;
information relating to your health, symptoms, medical history, medications, treatment or reason for attending the clinic;
correspondence between you and the clinic;
payment and transaction information, where applicable;
technical information generated when you use our website, such as your IP address, browser type, device information and website usage information; and
cookie and analytics information where you have provided the necessary consent.
Where you become a patient of Greystones Dermatology, additional personal and medical information may be collected as part of your clinical care. This information will be handled in accordance with applicable data protection law and our professional and clinical confidentiality obligations.
3. Health and Medical Information
Information concerning your health is classified as special category personal data under the GDPR and is afforded additional protection.
Where Greystones Dermatology processes health or medical information in connection with your care, we will only do so where there is an appropriate legal basis and condition for processing under applicable data protection law.
This may include processing that is necessary for medical diagnosis, the provision of healthcare or treatment, or the management of healthcare services, where that information is processed by or under the responsibility of an appropriate healthcare professional or another person subject to an appropriate duty of confidentiality.
We take the confidentiality of patient information seriously and limit access to medical information to those who require it for legitimate clinical or administrative purposes.
4. How We Use Your Personal Data
We may use your personal data to:
respond to enquiries and communicate with you;
arrange, confirm, manage or reschedule appointments;
provide dermatology consultations, assessments, treatment and follow-up care;
maintain appropriate patient and clinical records;
communicate information relevant to your care;
process payments and maintain financial records;
manage the administration and operation of the clinic;
comply with professional, regulatory, legal, insurance and accounting obligations;
maintain the security and functionality of our website and systems;
understand how visitors use our website, where you have consented to relevant analytics technologies; and
establish, exercise or defend legal claims where necessary.
We will not use your personal data for purposes that are incompatible with the purposes for which it was collected unless permitted or required by law.
5. Our Legal Bases for Processing
Depending on the circumstances, Greystones Dermatology may process personal data on one or more of the following legal bases:
Contract: where processing is necessary to provide a service you have requested or to take steps at your request before providing that service.
Legal obligation: where processing is necessary for us to comply with a legal or regulatory obligation.
Legitimate interests: where processing is necessary for the legitimate operation and administration of the clinic and those interests are not overridden by your rights and interests.
Consent: where we have specifically asked for and obtained your consent, including where consent is required for certain website cookies or similar technologies.
Vital interests: in limited circumstances where processing is necessary to protect someone's vital interests.
Where special category data, including health information, is processed, we will also identify an appropriate condition under Article 9 GDPR and applicable Irish law. This may include processing necessary for medical diagnosis, healthcare or treatment and the management of healthcare services.
6. Appointment Bookings and Acuity Scheduling
Our website may use Acuity Scheduling to facilitate online appointment bookings.
When you book an appointment online, information you provide through the booking system may be processed by Acuity Scheduling and its service providers in order to provide the booking service and associated functionality.
We recommend reviewing the privacy information presented through the booking platform when making an appointment.
Please avoid providing unnecessary medical or sensitive information through general website contact forms or email. Where we require medical information in connection with your care, we will collect it through appropriate channels.
7. Website Hosting and Third-Party Service Providers
Our website is hosted using Squarespace.
We may use trusted third-party service providers to support the operation of our website and clinic, including providers of:
website hosting and maintenance;
appointment scheduling;
email and communications;
IT and data storage;
payment processing;
accounting and professional services; and
website analytics, where applicable.
These providers may process personal data on our behalf only where necessary to provide their services and subject to appropriate data protection arrangements.
Some technology providers may process or store information outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we will ensure that an appropriate mechanism and safeguards are in place as required by applicable data protection law.
8. Sharing Your Personal Data
We will not sell your personal data.
Where necessary and lawful, personal information may be shared with third parties involved in your care or the operation of the clinic. Depending on the circumstances, this may include:
healthcare professionals involved in your care;
laboratories, pathology services or other diagnostic providers;
hospitals or other healthcare providers where referral or further treatment is required;
IT, booking and other service providers acting on our behalf;
professional advisers, including accountants, insurers and legal advisers; and
regulatory, statutory or law-enforcement bodies where disclosure is required or permitted by law.
Where information relates to your healthcare, it will only be shared where there is an appropriate clinical, legal or other lawful basis for doing so.
9. Cookies
Our website may use cookies and similar technologies to enable essential website functionality and, with your consent where required, to understand how visitors use the website.
Strictly necessary cookies may be used without consent where they are required for the website or a service you have requested to function.
Optional cookies, including analytics or marketing cookies where used, will not be placed on your device until the necessary consent has been obtained.
You can accept, reject or manage optional cookies through the cookie controls provided on our website. You can also change or withdraw your consent at any time through the available cookie settings.
Further information about the cookies used on this website, including their purpose and duration, should be available through our Cookie Policy or cookie preference tool.
10. How Long We Keep Your Information
We retain personal data only for as long as necessary for the purposes for which it was collected and to meet applicable legal, regulatory, professional, clinical, insurance and accounting requirements.
Patient and clinical records may need to be retained for longer periods because of professional, clinical and legal requirements.
Retention periods may vary depending on the type of information involved, the patient's age, the nature of the care provided and any applicable legal or professional requirements.
When personal data is no longer required, it will be securely deleted, destroyed or anonymised as appropriate.
11. How We Protect Your Information
We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
Access to patient and personal information is restricted to individuals who require access for legitimate clinical, administrative or operational purposes.
While we take appropriate steps to protect information, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
12. Children's Personal Data
Greystones Dermatology provides care to children and young people as well as adults.
Where we process personal data relating to a child in connection with healthcare, we will handle that information with particular care and in accordance with applicable data protection law, professional obligations and the circumstances of the child's care.
Information relating to a child may be provided by a parent, guardian or other person authorised to act on the child's behalf where appropriate.
13. Your Data Protection Rights
Subject to applicable law and certain exemptions, you may have the right to:
request access to the personal data we hold about you;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data in certain circumstances;
request restriction of the processing of your personal data;
object to certain types of processing;
request the transfer of certain personal data to you or another organisation;
withdraw consent at any time where processing is based on consent; and
lodge a complaint with the Data Protection Commission.
These rights are not absolute and may be restricted in certain circumstances, including where we are legally or professionally required to retain particular medical or clinical records.
To exercise any of your rights, please contact us using the details set out in Section 1.
We may need to verify your identity before responding to a request in order to protect the confidentiality of your information.
14. Complaints
If you have concerns about how Greystones Dermatology has handled your personal data, please contact us in the first instance so that we have an opportunity to address your concerns.
You also have the right to make a complaint to the Irish Data Protection Commission.
Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland
Further information is available from the Data Protection Commission at www.dataprotection.ie.
15. Links to Other Websites
Our website may contain links to third-party websites or services. Greystones Dermatology is not responsible for the privacy practices of third-party websites, and we recommend reviewing their privacy information before providing personal data.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations or data protection practices.
The most recent version will be published on this website and the date of the latest update will appear at the top of this page.