Privacy Policy
Last updated: 17 Nov 2025
This Privacy Policy explains how Plasma-Med (“we”, “our”, “the Clinic”) collects, uses, stores, and protects your personal data when you visit our website, book an appointment, or use our services. We are committed to safeguarding your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (Ireland).
1. Data Controller
Plasma-Med
Dublin, Ireland
Email: infoplasmamed@gmail.com
Phone: +353 87 316 12 91
We act as the Data Controller for all personal data you provide to us.
2. Personal Data We Collect
We may collect the following categories of information:
2.1. When you use our website
IP address and device information
Browser type and browsing behaviour
Cookies and tracking technologies (see Cookie Policy)
2.2. When you contact us
Name
Email address
Phone number
Message content
2.3. When you book an appointment
Full name
Contact details
Chosen service
Preferred date and time
Payment details (processed securely through Wix Payments or other external providers)
2.4. During treatments
Depending on the service, we may collect:
Basic health information
Treatment history
Notes required for safe procedure delivery
We collect only the minimum amount of medical or health-related data necessary for treatment safety and legal compliance.
3. How We Use Your Data
We use your information to:
Process appointment bookings
Provide aesthetic, wellness, and health-related services
Communicate about your appointment or enquiry
Maintain treatment records as required by Irish health & safety regulations
Improve website performance and user experience
Comply with legal and regulatory obligations
We do not sell or share your data with third parties for marketing purposes.
4. Legal Basis for Processing
We process your personal data on one or more of the following legal bases:
Article 6(1)(b) GDPR – to perform a contract (e.g., treatment booking)
Article 6(1)(c) GDPR – to comply with legal obligations
Article 6(1)(f) GDPR – legitimate interest (communication, website security)
Article 9(2)(h) GDPR – processing of health data required for medical/aesthetic care
5. Data Storage & Retention
Your personal data is stored securely through:
Wix platform (website + bookings)
Encrypted devices and password-protected systems
Retention periods:
General enquiries: up to 12 months
Booking data: up to 7 years (legal requirement)
Health-related treatment notes: up to 7 years (clinical requirement)
6. Data Sharing
We may share limited data with:
Wix (website and booking platform)
Payment providers (for processing payments)
Medical or insurance bodies, if legally required
Regulatory authorities, when compliance is mandatory
All third parties comply with GDPR and process data securely.
7. Your Rights
Under GDPR, you have the right to:
Access your data
Rectify inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing
Object to processing
Request data portability
Withdraw consent at any time, where applicable
To exercise these rights, contact us at: infoplasmamed@gmail.com
8. Security Measures
We implement technical and organisational measures to protect your data, including:
Encrypted transmission (SSL)
Secure storage platforms
Restricted access to personal information
Staff confidentiality policies
9. Changes to This Policy
We may update this Privacy Policy occasionally. The “Last updated” date will always reflect the most recent version.
10. Contact
If you have questions about this Privacy Policy or how your data is handled, please contact:
Email: infoplasmamed@gmail.com
Phone: +353 87 316 12 91
