Privacy Notice
Data Controller: CareBridge Medical
Lawful Basis: Article 6(1)(b), 6(1)(c), and Article 9(2)(h) GDPR
Data is processed solely for healthcare provision and legal obligations.
Records retention: Minimum 8 years after last patient contact (or until age 25 for minors).
No data sold or used for marketing without separate consent.
No transfer outside EEA unless legally required.
Rights: Access, rectification, erasure, restriction, objection, and complaint to the Data Protection Commission Ireland.
Contact email for data protection queries: dpo@carebridgemedical.ie