Privacy Policy

Western Rheumatology

Introduction

At Western Rheumatology, we are committed to protecting the privacy and personal data of our patients. This Privacy Policy outlines how we collect, use, and share information in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. By accessing our services, you agree to the terms of this Privacy Policy.

Data We Collect

We collect and process personal data necessary for providing high-quality healthcare services. This may include:

  • Personal Identification Information: Name, address, date of birth, contact details, and PPS number (where required).
  • Medical Information: Health history, treatment plans, laboratory results, and imaging data.

Payment and Insurance Information: Billing details, payment history, and health insurance information.

How We Use Your Data

Your personal data is used to provide and manage your healthcare services effectively, including:

  • Diagnosing and treating rheumatologic conditions.
  • Managing appointments, treatment schedules, and follow-ups.
  • Communicating with you regarding your care.
  • Processing payments and handling insurance claims.

Data Sharing

To provide efficient and secure healthcare services, we share necessary data with trusted third parties. These include:

  • iMedDoc (Clanwilliam Health): For secure electronic medical record (EMR) management.
  • Billink (billinkpayments.com): For processing payments and managing billing services.
  • HSE PCRS High Tech Hub: For prescription approvals and reimbursement of high-tech medications.
  • Relevant Health Insurers: To process claims and ensure coverage of your treatments.
  • Private Hospitals: Such as Blackrock Health Galway Clinic and Bon Secours Hospital Galway, to facilitate treatment and continuity of care.
  • Heidi AI: For AI-assisted healthcare management and operational efficiency.

Additionally, when communicating with other healthcare professionals, we use the HSE-run Healthmail Net, which ensures secure, encrypted communication to protect your data.

We ensure that all data shared with these third parties is done so securely and strictly for the purposes outlined.

Legal Basis for Data Processing

We process your personal data based on the following legal grounds:

  • Consent: You have provided explicit consent for the processing of your data.
  • Contractual Necessity: Data processing is necessary for the delivery of healthcare services.
  • Legal Obligations: To comply with regulatory requirements, including those of the HSE and relevant health insurers.

Legitimate Interests: To improve our services and ensure operational efficiency.

We process your personal data for the following purposes:

Processing repeat prescription forms
Conducting statistical analysis
Improving user experience

We may disclose your personal data to the following recipients in connection with the purposes listed above:

to third parties who provide services to us, such as professional advisers, auditors and IT service providers to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation.

Cookies

This website uses cookies to distinguish you from other users of our website. This helps us to provide you with a positive and relevant experience when you browse our website and also allows us to improve our site and its functionality.

Web browser place cookies on user's hard drive for record-keeping purposes and sometimes to track information about them. A user may choose to set their web browser to refuse cookies. If they do so, note that some parts of the website may not function as intended.

For detailed information on the cookies we use and the purposes for which we use them please see our Cookie Policy.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Access: Request access to the personal data we hold about you.
  • Rectification: Request corrections to inaccurate or incomplete data.
  • Erasure: Request the deletion of your personal data, subject to legal and regulatory obligations.
  • Restriction: Request the limitation of data processing under certain conditions.
  • Data Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to the processing of your data under specific circumstances.

To exercise these rights, please contact us using the details provided below.

Data Security

We retain personal data only as long as necessary to provide our services and comply with legal obligations. When data is no longer required, it is securely deleted or anonymized.

Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The latest version will always be available on our website.

Contact Us

If you have any questions or concerns about this Privacy Policy or how your personal data is handled, please contact us at:

Western Rheumatology
Suite 19, Blackrock Health Galway Clinic
 Phone: +353 (91) 342508
 Email: reception@wrh.ie