Last Updated: [01-06-2026]
Doctor247 (“Doctor247”, “we”, “our”, “us”) respects your privacy and is committed to protecting your Personal Data. This Privacy Policy explains how we collect, use, store, disclose, transfer, and otherwise process your Personal Data when you access or use our website, telemedicine platform, online consultations, telephone consultations, video consultations, prescription services, referral services, medical certification services, and any related healthcare services (collectively, the “Services”).
Doctor247 is an Irish telemedicine platform connecting patients with Irish Medical Council registered healthcare professionals through secure online consultations.
This Privacy Policy applies to all patients, visitors, users, healthcare practitioners, contractors, and other individuals who interact with our Services.
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.
For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Data Protection Act 2018 (Ireland), and applicable healthcare legislation, Doctor247 acts as a Data Controller in respect of the Personal Data processed through the Services.
Contact Details:
Doctor247
Email: privacy@doctor247.ie
Website: https://doctor247.ie
Where required by law, Doctor247 may appoint a Data Protection Officer (“DPO”), whose contact details will be made available on our website.
“Personal Data” means any information relating to an identified or identifiable natural person.
“Special Category Data” means Personal Data revealing health information, genetic data, biometric data, racial or ethnic origin, religious beliefs, or other sensitive information as defined under Article 9 GDPR.
“Health Data” means any information relating to your physical or mental health, healthcare provision, medical history, prescriptions, diagnoses, referrals, treatment plans, laboratory results, consultation records, and related healthcare information.
We may collect:
Full name
Date of birth
Gender
Nationality
PPS Number where required by law
Government-issued identification documents where necessary
Email address
Mobile number
Residential address
Emergency contact information
As a healthcare provider, we process Special Category Health Data including:
Medical history
Existing conditions
Symptoms
Diagnoses
Consultation notes
Clinical assessments
Prescriptions
Referral letters
Medical certificates
Test results
Laboratory reports
Vaccination information
Medication history
Allergies
Mental health information
Images and files uploaded by patients
IP address
Browser type
Device information
Operating system
Session information
Log files
Cookies
Analytics data
Consultation dates
Consultation duration
Appointment history
Practitioner notes
Referral history
Prescription history
Transaction references
Payment status
Billing information
Doctor247 does not store complete payment card details. Payments are processed by regulated third-party payment processors.
We collect information:
Directly from you
During registration
During consultations
Through questionnaires and forms
Through uploaded documents
Through customer support communications
Through cookies and analytics technologies
Through healthcare providers authorised by you
Through pharmacies, laboratories, hospitals, and healthcare partners where legally permitted
Doctor247 processes Personal Data under one or more lawful bases under Article 6 GDPR.
Processing necessary to provide healthcare consultations, prescriptions, referrals, certificates, and related services.
Processing required to comply with Irish healthcare laws, tax laws, professional regulations, court orders, and regulatory requirements.
Processing necessary to:
Improve services
Maintain platform security
Prevent fraud
Conduct audits
Manage business operations
Where required by law, we will request explicit consent.
Examples include:
Marketing communications
Optional research participation
Certain data-sharing activities
Consent may be withdrawn at any time.
Health information is considered Special Category Personal Data under GDPR.
Doctor247 processes Health Data under Article 9(2)(h) GDPR for:
Preventive medicine
Medical diagnosis
Provision of healthcare
Medical treatment
Healthcare management
Additional processing may occur where:
Explicit consent has been obtained
Processing is required by law
Processing is necessary to protect vital interests
We process Personal Data for:
Providing healthcare services
Identity verification
Appointment scheduling
Medical diagnosis
Prescribing medication
Preparing referrals
Issuing medical certificates
Clinical record management
Healthcare continuity
Customer support
Billing and payment processing
Platform maintenance
Security monitoring
Service improvement
Regulatory compliance
Fraud prevention
Legal defence and dispute resolution
Doctor247 does not make medical decisions solely through automated processing.
All clinical decisions are made by qualified healthcare professionals.
We may share Personal Data with:
General Practitioners
Specialists
Nurses
Pharmacists
Hospitals
Clinics
Laboratories
Diagnostic centres
For prescription fulfilment.
Hosting providers
Video consultation providers
Technical support providers
Payment processors
Security providers
Where required by law, regulation, court order, or public health obligations.
We do not sell Personal Data.
We do not share Health Data for advertising purposes.
Where Personal Data is transferred outside the European Economic Area (EEA), Doctor247 shall ensure appropriate safeguards are implemented, including:
EU Standard Contractual Clauses
Adequacy Decisions
Binding Corporate Rules
Other lawful GDPR transfer mechanisms
Doctor247 retains Personal Data only for as long as necessary.
Retention periods may vary depending on:
Healthcare regulations
Professional obligations
Legal requirements
Clinical necessity
Medical records may be retained for periods required under Irish healthcare legislation and professional guidance.
At the end of the retention period, Personal Data will be securely deleted, anonymised, or archived as required by law.
You have the right to:
Request a copy of your Personal Data.
Correct inaccurate information.
Request deletion of Personal Data where legally permissible.
Restrict certain processing activities.
Receive Personal Data in a structured format.
Object to processing based on legitimate interests.
Withdraw previously granted consent.
Submit a complaint to the Irish Data Protection Commission.
Individuals may submit a Subject Access Request (“SAR”) to obtain information about Personal Data processed by Doctor247.
Doctor247 will respond within the timeframe required by GDPR.
Identity verification may be required before information is released.
Doctor247 uses cookies and similar technologies for:
Website functionality
Authentication
Security
Analytics
Performance monitoring
Non-essential cookies will only be used where valid consent has been obtained.
Users may manage cookie preferences through our Cookie Management Platform.
Doctor247 will only send marketing communications where:
Consent has been obtained; or
Another lawful basis applies under applicable law.
Users may unsubscribe at any time.
Healthcare service communications, appointment reminders, prescriptions, and clinical notifications are not considered marketing communications.
Doctor247 implements technical and organisational measures including:
Encryption in transit
Encryption at rest
Multi-factor authentication
Access controls
Audit logging
Network monitoring
Staff confidentiality agreements
Security training
Penetration testing
Vulnerability management
Access to medical records is restricted to authorised personnel with a legitimate need to know.
Doctor247 maintains procedures for identifying, investigating, and responding to Personal Data breaches.
Where required by GDPR:
Breaches will be reported to the Data Protection Commission.
Affected individuals will be notified where there is a high risk to their rights and freedoms.
Services provided to individuals under 18 years of age may require parental or guardian consent where required by law.
Doctor247 will process children’s Personal Data only where legally permitted and necessary for healthcare provision.
Our Services may contain links to third-party websites.
Doctor247 is not responsible for the privacy practices of third-party websites.
Users should review the privacy policies of those websites separately.
Doctor247 may amend this Privacy Policy from time to time.
Material changes will be communicated through the website, email, or other appropriate means.
The latest version will always be available on our website.
If you have concerns regarding the processing of your Personal Data, please contact us first.
You also have the right to lodge a complaint with:
Data Protection Commission (Ireland)
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
Website: https://www.dataprotection.ie
Doctor247
Email: privacy@doctor247.ie
Website: https://doctor247.ie
For privacy requests, Subject Access Requests, data deletion requests, or GDPR-related enquiries, please contact us using the details above.