Privacy Policy

At Bayside Medical Centre, we take your privacy and the confidentiality of your personal and medical information seriously. This Privacy Policy explains how we collect, use, store and protect your personal information in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and our professional obligations as a healthcare provider.

Who We Are
Bayside Medical Centre is a General Practice providing primary healthcare services to our patients. For the purposes of data protection legislation, Bayside Medical Centre is the Data Controller for the personal information we hold about our patients.

Bayside Medical Centre
Bayside Shopping Centre,
Sutton, Dublin, D13 W2K1 Ireland

Phone: +353 18391801

Email: baysidemedicalcentre@gmail.com

Information We Collect

In order to provide appropriate healthcare and manage our practice, we may collect and process information including:

  • Your name, date of birth, address and contact details

  • PPS number, Medical Card or GP Visit Card details where applicable

  • Medical history and clinical notes

  • Diagnoses, treatments and medication records

  • Test results and investigation reports

  • Referral letters and correspondence with hospitals, consultants and other healthcare professionals

  • Appointment and attendance information

  • Information relating to payments, healthcare schemes or insurance where applicable

  • Information you provide when contacting us by telephone, email or through our website

We only collect information that is necessary for the provision and administration of your healthcare and the operation of the practice.

How We Use Your Information

We may use your personal information to:

  • Provide safe and appropriate medical care

  • Maintain your medical record

  • Manage appointments, prescriptions, referrals and test results

  • Contact you in relation to your healthcare, appointments, recalls or preventive services

  • Communicate with other healthcare professionals involved in your care

  • Process relevant HSE schemes, Medical Cards, GP Visit Cards and other healthcare claims

  • Meet our legal, regulatory and professional obligations

  • Manage the administration and operation of the practice

  • Carry out appropriate clinical audit, quality assurance and service improvement activities

Our Legal Basis for Processing Your Information

We process personal information only where we have a lawful basis for doing so under data protection legislation.

As a healthcare provider, the processing of health information is generally necessary for the purposes of medical diagnosis, the provision of health or social care or treatment, or the management of healthcare services, in accordance with Article 9(2)(h) of the GDPR.

Depending on the circumstances, other lawful bases may apply, including compliance with a legal obligation, protecting vital interests, the performance of a task in the public interest, or your consent where consent is specifically required.

Sharing Your Information

Your information will only be shared where necessary and appropriate. This may include:

  • GPs, nurses and other healthcare professionals involved in your care

  • Hospitals, consultants and allied healthcare professionals

  • Pharmacies and laboratories

  • The HSE and other relevant public health or government bodies

  • Out-of-hours and other healthcare services

  • Health insurers or other organisations where you have authorised disclosure

  • Service providers who support our clinical, IT and practice-management systems and who process information on our behalf under appropriate data-protection arrangements

Information may also be disclosed where we are legally required or permitted to do so.

We will not sell your personal information to third parties.

Confidentiality and Security

We take appropriate measures to protect the confidentiality and security of patient information.

Access to medical records is restricted to authorised members of the practice team and is limited to the information they require to carry out their duties. All members of the practice team are required to respect patient confidentiality.

We use appropriate organisational and technical safeguards to protect personal information against unauthorised access, loss, alteration or disclosure.

Retaining Your Medical Records

Medical records are retained in accordance with applicable legal, professional and healthcare record-retention requirements.

The length of time we retain information may vary depending on the type of record, the patient's circumstances and any legal or professional requirements that apply.

Transferring to Another GP

If you decide to transfer to another GP practice, we can provide a copy of your medical records to your new GP following an appropriate request and confirmation of your authority to transfer the records.

We may retain a copy of your records where required for legal, regulatory or professional purposes.

Access to Your Information and Your Rights

Under data protection legislation, you have a number of rights in relation to your personal information. Depending on the circumstances, these may include the right to:

  • Request access to the personal information we hold about you

  • Request correction of inaccurate or incomplete information

  • Request restriction of certain processing

  • Object to certain types of processing

  • Request erasure of information where the right to erasure applies

  • Request data portability where applicable

Some of these rights are not absolute, particularly where medical records must be retained for healthcare, legal or professional reasons.

If you wish to exercise your data-protection rights, please contact the practice using the details above. We may need to verify your identity before releasing personal information.

You also have the right to raise a concern or lodge a complaint with the Data Protection Commission (DPC).

Website Privacy

When you visit our website, certain technical information may be collected automatically, such as your IP address, browser type, device information and information about how the website is accessed.

This information may be processed for purposes such as website security, ensuring the website functions correctly and, where you have consented, understanding how visitors use our website.

If you contact us or submit information through our website, we will use the information you provide for the purpose of responding to your enquiry or providing the service you have requested.

Please do not submit urgent or emergency medical information through website contact forms or general email.

Online Forms and Appointment Requests

Where our website allows you to request an appointment, prescription or other service online, the information you provide will be used to process your request and may be added to your patient record where appropriate.

Please be aware that submitting an online request does not constitute confirmation of an appointment unless you receive confirmation from the practice.


Cookies

Our website may use cookies and similar technologies to help the website function correctly and, where applicable, to understand how visitors use the site. Some cookies are strictly necessary for the operation and security of the website and do not require consent. Other cookies, including analytics, advertising or other non-essential cookies, will only be used where you have provided the appropriate consent. Where non-essential cookies are used, you will be given the opportunity to accept or reject them and manage your preferences through our cookie consent tool. Further information about the individual cookies used on this website, their purpose and how long they remain on your device is available in our Cookie Policy.

Third-Party Websites and Services

Our website may contain links to external websites or use services provided by third parties, such as online booking systems, maps or embedded content.

These third parties may process personal information in accordance with their own privacy policies. We encourage you to review the privacy information provided by those services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or the way we process personal information.

Last updated: September 2026

Contact Us

If you have any questions about this Privacy Policy, how your information is used or your data-protection rights, please contact:

Bayside Medical Centre
Bayside Shopping Centre,
Sutton, Dublin, D13 W2K1 Ireland

Phone: +353 18391801

Email: baysidemedicalcentre@gmail.com