Ranelagh Physiotherapy Clinic

Last updated: 5 August 2026

1. About this Privacy Policy

We are Ranelagh Physiotherapy Clinic (RPC), of 15A Dunville Avenue, Ranelagh, Dublin 6.

We are committed to respecting your privacy and complying with applicable data protection and privacy legislation, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

The purpose of this Privacy Policy is to explain how we collect, use, store, protect and share your personal data.

This Privacy Policy applies to personal data and sensitive personal data, including medical and health information, that is collected by us, provided to us by you, or comes to our attention through the provision of healthcare services.

For the purposes of this policy, personal data means information relating to an identified or identifiable living individual.

2. Information we collect

Depending on how you interact with Ranelagh Physiotherapy Clinic, we may collect and process the following types of personal information:

• name;
• age;
• date of birth;
• address;
• occupation;
• telephone number;
• email address;
• appointment and booking information;
• information provided in the Comments field when making an online booking;
• medical history;
• information relating to physical health and wellbeing;
• physiotherapy and treatment information;
• information you provide to us in connection with your care; and
• other information that is necessary to provide our services to you.

The Comments field within our online booking form is a free-text field which allows you to provide additional information relating to your appointment or booking. You are not required to provide health or medical information in this field. However, if you choose to do so, the information you provide may constitute special category personal data relating to your health.

Health and medical information is considered special category personal data under GDPR and is subject to additional legal and security protections.

3. Information collected through our online booking service

Our website provides a Book Now facility to allow you to request and manage appointments online.

The online booking service is provided through Cliniko, our practice management and appointment booking system.

When making an appointment through Cliniko, you may be asked to provide:

• name;
• email address;
• telephone number;
• address;
• date of birth;
• appointment and booking information; and
• information you choose to provide in the Comments field.

The Comments field is optional and allows you to provide additional information that you consider relevant to your appointment.

Please do not provide information that is not necessary for your appointment or care. If you choose to provide health, medical or other sensitive information in this field, we will treat that information as special category personal data and handle it in accordance with applicable data protection law.

Cliniko processes information on our behalf to facilitate appointment booking and practice administration. Information submitted through the online booking service may therefore be processed by Cliniko in accordance with the applicable contractual and data protection arrangements between RPC and Cliniko.

4. How we use your personal data

Personal data will be collected, processed and used by RPC for purposes including:

• providing physiotherapy, healthcare, advice and treatment;
• arranging and managing appointments;
• communicating with you about your appointments and treatment;
• maintaining appropriate patient and treatment records;
• responding to enquiries;
• administering our practice;
• providing patient and customer support;
• maintaining the security of our systems and services;
• complying with legal, regulatory and professional obligations;
• improving our services and website;
• understanding how visitors use our website;
• managing our relationship with you; and
• where permitted by law, communicating with you about our services and activities.

We will only collect and use personal data for specified, explicit and legitimate purposes and will not process it in a manner incompatible with those purposes.

5. Legal basis for processing

We process personal data in accordance with the lawful bases available to us under GDPR.

Depending on the circumstances, these may include:

Performance of a contract

We may process your personal data where this is necessary to provide the physiotherapy or healthcare services you have requested, including arranging and managing appointments.

Legal obligation

We may process personal data where processing is necessary to comply with a legal or regulatory obligation.

Legitimate interests

We may process personal data where this is necessary for our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms.

Examples may include maintaining the security of our website and systems, administering our practice and improving our services.

Consent

Where appropriate, we may rely on your consent, including where consent is required for certain marketing communications, cookies or other technologies.

Where we process health information, which is special category personal data, we will also rely on an appropriate condition under Article 9 of the GDPR, as applicable to the provision and management of healthcare services.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Confidentiality and security

Any personal data received by us, including information voluntarily provided through the Comments field of our online booking form, will be treated in the strictest confidence.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure.

Medical and health information retained by us is subject to appropriate confidentiality and security safeguards.

Access to personal data will be limited to those who require access for legitimate professional, clinical, administrative or legal purposes.

We will not disclose your personal information to third parties unless there is an appropriate legal basis for doing so, including where:

• you have provided consent where consent is required;
• disclosure is necessary to provide or support your healthcare;
• disclosure is necessary for a legitimate purpose connected with our services;
• we are required or permitted to do so by law;
• disclosure is necessary to protect your vital interests or those of another person; or
• a third-party service provider is processing information on our behalf under appropriate contractual and data protection arrangements.

7. Information sharing

We may share personal data with appropriate healthcare professionals or other individuals where necessary to provide healthcare services and where there is an appropriate legal basis for doing so.

Where sensitive personal data or health information is shared, we will apply appropriate safeguards and, where required, obtain your explicit consent.

We may also share information with trusted service providers that process data on our behalf. These may include:

• Cliniko, our practice management and online booking provider;
• email service providers used to communicate with you;
• website hosting and technical service providers;
• website analytics and search performance providers; and
• professional, legal, accounting or regulatory advisers where necessary.

These providers may only process personal data for legitimate purposes connected with the services they provide to RPC and in accordance with applicable data protection requirements.

We do not sell your personal data.

8. Email communications

We may use an email service provider to send communications to you.

This may include communications relating to:

• appointments;
• appointment reminders;
• administrative matters;
• responses to enquiries;
• information relating to services; and
• where permitted, marketing communications.

Our email service providers may process your name, email address and other information necessary to send these communications.

Where marketing communications require consent, we will seek and manage consent in accordance with applicable data protection and electronic communications legislation.

You may unsubscribe from marketing communications at any time by using the unsubscribe facility provided in the communication or by contacting us.

9. Google Analytics

We use Google Analytics on our website to understand basic information about how visitors use our website and to help us improve its content, functionality and performance.

Google Analytics may collect information such as:

• pages visited;
• approximate geographical location;
• browser and device information;
• how visitors arrived at our website;
• interactions with our website; and
• information about website usage and performance.

We use this information primarily in aggregated or statistical form to understand website traffic and improve our online services.

Where cookies or similar technologies used for analytics require consent under applicable law, we will seek your consent before activating those technologies.

You can manage your cookie preferences through the cookie consent mechanism available on our website.

10. Google Search Console

We use Google Search Console to monitor and understand how our website performs in Google Search.

This may provide us with information about:

• search queries;
• impressions;
• clicks;
• pages appearing in search results;
• website search performance; and
• technical aspects of our website.

We use this information to improve the visibility, accessibility, content and technical performance of our website.

Google Search Console is not used by RPC for the purpose of intentionally identifying individual patients.

11. Cookies

Our website uses cookies and similar technologies.

Cookies are small text files placed on your device that allow a website to recognise your device and perform certain functions.

We may use:

• strictly necessary cookies, which are required for the website to operate;
• analytics cookies, which help us understand website usage and performance; and
• other cookies or similar technologies where applicable.

Where required by law, we will obtain your consent before placing non-essential cookies on your device.

You can accept, reject or manage non-essential cookies through the cookie consent mechanism provided on our website.

You can also change or withdraw your cookie preferences at any time.

12. Online booking and third-party websites

Our website may contain links or functionality that connects you with third-party websites or services, including Cliniko.

Once you leave the RPC website or interact directly with a third-party service, that organisation's own privacy policy and terms may apply.

We encourage you to review the privacy information provided by third-party services before submitting personal information to them. 

13. Retention of data

We will retain personal data only for as long as necessary for the purposes for which it was collected and for any period required or permitted by law.

Patient and medical information may need to be retained for periods required by applicable legislation, professional standards, regulatory requirements or for the establishment, exercise or defence of legal claims.

Information relating to appointments, administration and communications will be retained for as long as reasonably necessary for the relevant purpose.

Information relating to online bookings will be retained in accordance with our practice's retention requirements and the retention arrangements applicable to our practice management system.

We will periodically review information held by us and securely delete or dispose of information that is no longer required.

14. Accuracy of data

Any information you provide to us should be complete, accurate and up to date.

You should notify us as soon as possible if any personal information we hold about you becomes inaccurate or out of date.

You have the right to request correction of inaccurate personal data and completion of incomplete personal data.

15. Your data protection rights

Subject to applicable legal limitations and exemptions, you have the right to:

• request access to the personal data we hold about you;
• request information about how we process your personal data;
• request correction of inaccurate personal data;
• request completion of incomplete personal data;
• request deletion of personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain processing;
• request that your personal data be provided to you or a third party in a structured, commonly used and machine-readable format where the right to data portability applies; and
• withdraw consent where processing is based on consent.

These rights are not absolute and certain legal exemptions or restrictions may apply.

16. Access requests

If you wish to obtain a copy of the personal data we hold about you, you should make a written request to Ranelagh Physiotherapy Clinic using the contact details below.

We may require appropriate information from you to verify your identity before releasing personal data.

We will respond to a valid data access request without undue delay and, in any event, normally within one month of receiving the request.

Where a request is particularly complex or where you have made multiple requests, this period may be extended by up to two further months where permitted by GDPR. If an extension is required, we will inform you of the reasons for the delay.

17. Withdrawal of consent

Where we process your personal data on the basis of consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of any processing that took place before your consent was withdrawn.

Please note that withdrawal of consent does not necessarily mean that we must delete all information relating to you where we have another lawful basis or legal obligation to retain or process that information.

18. Automated decision-making and profiling

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

19. International transfers

Some of the third-party service providers we use may process personal data outside Ireland or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law.

This may include relying on an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.

20. Data breaches

We take the security of personal data seriously.

If we become aware of a personal data breach, we will assess the nature and potential impact of the breach and take appropriate action.

Where legally required, we will notify the Data Protection Commission within the applicable statutory timeframe and, where required, notify affected individuals.

21. Complaints

If you are unhappy with how we process your personal data, we encourage you to contact us first so that we have an opportunity to investigate and address your concerns.

You also have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission
Ireland

Further information about the Data Protection Commission and how to make a complaint is available on its official website. 

22. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, data processing activities or applicable legislation.

The most recent version will be published on our website and the date of the latest update will be shown at the beginning of the policy.

23. Contact us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we process your personal data, please contact:

Ranelagh Physiotherapy Clinic (RPC)
15A Dunville Avenue
Ranelagh
Dublin 6
Ireland

Email: info@ranelaghphysio.ie
Telephone:  01 4965820

Data Controller: Ranelagh Physiotherapy Clinic