Legal template

Privacy notice

This starter notice requires Irish legal/GDPR review before you accept patients.

Data controller

[LEGAL BUSINESS NAME], [BUSINESS ADDRESS], [PRIVACY EMAIL].

Health information

Health information should be collected only through an approved secure clinical system and processed under an appropriate legal basis and special-category condition.

Payments

Payment may be processed by Stripe. Do not place symptoms, diagnoses, medication lists, clinical records or other medical information into Stripe metadata.

Clinical records

Clinical records should be kept separately in an appropriate secure medical-record system and retained in line with applicable professional and legal requirements.

Sharing

Information may be shared where clinically and legally appropriate with pharmacies, hospitals, laboratories, the patient's usual doctor or other healthcare professionals.

Contact

Privacy queries: [PRIVACY EMAIL].