Privacy Policy
We take the privacy of your health information seriously. This policy explains who we are, what we collect, how we use it, who we share it with, and the rights you have over your data.
Who we are
The Adare Clinic, operated by Adare Clinic, is the data controller for the information processed through this website. Our dermatologists and clinical staff act on our behalf and are each bound by professional confidentiality obligations. We are registered with, and you can complain to, the Data Protection Commission (DPC) in Ireland at dataprotection.ie.
What we collect
Photographs of your concern, a written clinical and medical history, contact and identity details, consent records, and confirmation that payment was made (we do not store your full card details — payment is processed by our payment provider). We never request more information than a dermatologist needs to respond to you.
Legal basis
We process your account and contact details under Article 6(1)(b) GDPR because it is necessary to provide the consultation service you requested. We process your health information — photos, symptoms, and medical history — under Article 9(2)(h) GDPR, for the provision of health care by professionals subject to an obligation of professional secrecy. Where we ask you to tick a consent box during intake, this is additional transparency and confirmation, not the sole legal basis for processing your health data.
Who we share it with
Your information is only shared with the reviewing dermatologist and support staff who need it to process your case. We also use trusted service providers (processors) who host or handle data on our behalf under contract: DigitalOcean (database and photo storage), Vercel (website hosting), Resend (email delivery for case notifications), and Stripe (payment processing). None of these providers may use your data for their own purposes.
Where your data is hosted
All data and photographs are hosted securely in the United Kingdom and are only accessible to the clinical and support staff who need it to process your case. We are finalizing documentation of the international transfer safeguard that applies to this UK hosting arrangement.
How long we keep it
We keep consultation records for as long as needed to provide your care and to meet our legal, clinical, and regulatory record-keeping obligations. We are finalizing a fixed retention schedule for cases and photographs; until then, you can request erasure at any time as described below.
Cookies
We use only strictly necessary session cookies to keep you securely signed in. We do not use marketing, advertising, or analytics cookies.
Your rights
Under GDPR you have the right to access, correct, restrict, object to, or request erasure or a portable copy of your data. You may exercise these rights at any time by contacting support@theadareclinic.ie, or by using the Cancel account option in your account settings. You also have the right to lodge a complaint with the Data Protection Commission.