Privacy Policy

At Lucan Orthodontics, your privacy matters. This policy explains what personal data we collect, why we collect it, how we keep it safe, and the choices you have.

1. Who we are

Lucan Orthodontics is the data controller for personal data collected through this website and in our practice.

‍Address: 189A Beech Park, Lucan, Co. Dublin, K78 D599

Phone: 01 628 0985

‍Email: info@lucanorthodontics.ie

Website: https://lucanorthodontics.ie/

2. The types of personal data we collect

We collect different information depending on how you interact with us.

‍When you contact us (website forms, email, phone):

- Name, email address, phone number
- The information you choose to share in your message
- Appointment request details such as preferred times and general concerns

If you become a patient:

- Personal details needed to provide care
- Health and dental information relevant to your treatment
- Clinical records, images, X rays, scans and treatment notes
- Payment and billing information (handled through our practice systems, not stored on this website)

When you use our website:

‍- Technical information such as IP address, device and browser details
- Pages visited and how visitors use the site
‍

This is collected through cookies and analytics tools (see Cookies and Analytics below).

3. What we use your data for

We use your personal data to:

- Respond to enquiries and appointment requests
- Provide orthodontic care and manage appointments
- Maintain accurate clinical records
- Communicate with you about your treatment and care
- Manage billing and administration
- Keep our website working securely and reliably
- Understand website usage so we can improve the site and services

We do not sell your personal data.

4. Legal basis for processing

Under GDPR, we must have a legal reason to use your data. Depending on the situation, we rely on:

Steps prior to a contract or performance of a contract : for example, replying to enquiries, arranging appointments, and providing treatment services.   ‍

Legal obligation: for example, record keeping and regulatory requirements.

Legitimate interests: for example, running and improving our services, and keeping our website secure. We only do this where it does not override your rights.

‍Consent: for example, where required for optional cookies, and for marketing if we offer it.

Health information: health and dental information is treated as special category data under GDPR. We process it only where necessary to provide care and to maintain appropriate clinical records, with safeguards in place.

5. Marketing and newsletters

We do not send marketing emails unless you have clearly opted in.

If we introduce a newsletter in future:

- You will only receive it if you sign up
- You can unsubscribe at any time using the link in the email
- We will not send marketing to children

6. Cookies and analytics (GA4)

Our website uses cookies and Google Analytics 4 (GA4) to understand how visitors use the site. This helps us improve pages, navigation and content.

GA4 may collect online identifiers and technical information such as:

- IP address (in a form that may be processed by Google)
- Device and browser type
- Pages visited and interactions on the website

Where required, we only use analytics cookies with your consent. You can manage cookies through our cookie banner and through your browser settings.

For more details, see our Cookie Policy.

7. Sharing your data

We only share personal data when it is necessary, and we never sell it.

We may share data with:

Clinical and healthcare professionals involved in your care where appropriate‍

Service providers who support our business and systems (for example IT support, website hosting, and analytics providers such as Google)

These providers act as processors under contract and must protect your information.
   
Regulators or authorities where required by law

8. International transfers

Some service providers, including Google, may process data outside Ireland or the EEA. Where this happens, we use appropriate safeguards such as Standard Contractual Clauses or other GDPR approved protections.

9. How we protect your data

We take practical steps to keep your information secure, including:

- SSL encryption on our website
- Access controls so only authorised team members can access data
- Secure practice systems for clinical records
- Staff confidentiality and training
- Ongoing maintenance and updates

No online system is 100 percent secure, but we work hard to protect your information and reduce risk.

10. Data retention

We keep personal data only for as long as needed for the purpose it was collected, and as required by law and professional obligations.

In general:

Enquiries and appointment requests are kept for a limited period to manage communication and follow up

‍Clinical records are kept for the period required for healthcare record keeping and professional standards

Analytics data is retained in line with our analytics settings and cookie choices

If you would like more detail on retention for a specific type of data, contact us.

11. Your rights

Under GDPR, you have the right to:

- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion in certain situations
- Restrict or object to certain types of processing
- Data portability where applicable
- Withdraw consent at any time where consent is the basis for processing

To make a request, email info@lucanorthodontics.ie with the subject line Data Protection Request. We may need to confirm your identity before processing a request.

12. Changes to this policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page, with the effective date shown at the top.

13. Contact us and complaints

If you have questions about this policy or how we handle personal data, contact us:

Lucan Orthodontics

189A Beech Park, Lucan, Co. Dublin, K78 D599

Email: info@lucanorthodontics.ie

Phone: 01 628 0985

You also have the right to lodge a complaint with the Data Protection Commission (Ireland).

Website: https://www.dataprotection.ie