At The IV Lounge, we are committed to safeguarding your personal and medical information in strict compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 of Ireland. This section outlines our practices regarding the collection, use, storage, and protection of your data, as well as our confidentiality obligations.

• Personal Details: Information such as your name, contact details, and date of birth is collected to facilitate consultations and ensure safe and effective service provision.
• Medical Information: Relevant health information, including medical history, current medications, allergies, and previous treatments, is gathered through consultation forms to personalise your IV therapy and reduce any risks.
• Digital Information: When you visit our website, we may collect anonymized data through cookies to enhance your browsing experience and monitor site performance (see our Cookie Policy for more details).

• Service Delivery: To provide safe and tailored IV therapies and wellness services.
• Communication: To contact you regarding your appointments, feedback, or customer service inquiries.
• Regulatory Compliance: To meet legal obligations related to healthcare and safety standards.
• Marketing (with Consent): To keep you informed about our promotions, new services, and updates if you opt in to receive such communications. You can withdraw consent at any time.

• Storage of Information:
  – We store your information securely in electronic and/or paper formats,
  – We use secure servers, encrypted databases, and restricted access protocols to authorised personnel only,
  – We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.
• Protection of Information: We ensure that your data is:
  – Processed lawfully, fairly, and transparently,
  – Collected for specified, explicit, and legitimate purposes,
  – Adequate, relevant, and limited to what is necessary,
  – Accurate and kept up to date,
  – Processed in a manner that ensures appropriate security.
• Retention Policy: Personal data is stored only as long as necessary to meet service, legal, or business needs, or until you request deletion, subject to regulatory retention requirements.
• Third-Party Service Providers: We work with trusted third parties for analytics and service delivery, ensuring they adhere to GDPR standards. No personal health data is shared without explicit consent.

Under GDPR, you have the right to:

1. Access your data.
2. Request correction of inaccurate data.
3. Request data erasure under specific conditions.
4. Restrict or object to processing.
5. Withdraw consent where applicable.

We are dedicated to maintaining the confidentiality of your medical information. Your records will not be disclosed to third parties without your explicit consent, except where required by law or where necessary to protect your vital interests.

We may be obligated to disclose your information without your consent in certain circumstances, such as:

• Compliance with legal obligations or court orders,
• Reporting notifiable diseases to public health authorities,
• Preventing serious harm to you or others.

In such cases, we will limit the disclosure to the minimum necessary and inform you of the disclosure unless prohibited by law.

In the unlikely event of a data breach that may pose a risk to your rights and freedoms, we will notify you and the Data Protection Commission promptly, in accordance with GDPR requirements.

By engaging our services, you acknowledge and agree to the collection, use, and protection of your personal and medical information as described in this section.