Privacy Policy

QuickGP Ireland — Online GP, Face-to-Face & Dermatology Clinic

Effective Date: 1 January 2025 | Last Updated: May 2026

This policy covers all services provided by QuickGP Ireland — including online/video consultations, face-to-face clinic consultations, and in-clinic surgical and dermatological procedures.

Jump to:

Back to Home

1. Introduction

QuickGP Ireland ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data across all services we provide — including online GP consultations, face-to-face clinic consultations, and in-clinic dermatological and minor surgical procedures.

Our services are delivered by IMC and ICGP registered medical practitioners. We process personal data in full compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Data Protection Acts 1988–2018, and all applicable Irish and EU healthcare and data protection legislation.

By using our services — whether online or in person — you confirm that you have read, understood, and agreed to the terms of this Privacy Policy.

2. Data Controller

QuickGP Ireland is the data controller for all personal data collected across our services.

Clinic Name: QuickGP Ireland
Contact Email: info@quickgpireland.com
Services Covered: Online GP consultations · Face-to-face clinic consultations · Dermatology consultations · Minor surgical procedures · Skin cancer screening · Prescription services

3. Personal Data We Collect

We collect different categories of personal data depending on the nature of the service provided:

3.1 Identity & Contact Data (All Services)

Full name, date of birth, gender, and address
Email address and telephone number
Next of kin / emergency contact details (for in-clinic procedures)
Payment and billing information (processed securely via Stripe)
Health insurance details (VHI, Laya, Irish Life Health, etc.) where applicable

3.2 Health & Medical Data — Online Consultations

Presenting symptoms and reason for consultation
Medical history, current medications, and known allergies
Vital measurements provided by the patient (blood pressure, heart rate, weight, temperature, oxygen saturation, blood sugar)
Consultation notes and clinical assessments
Prescriptions, sick certificates, and referral letters issued
Clinical photographs or skin images submitted by the patient for dermatological review

3.3 Health & Medical Data — Face-to-Face Clinic Consultations

All of the above, plus:
Physical examination findings recorded by the treating clinician
Dermoscopy and clinical photography of skin lesions taken at the clinic
Biometric measurements taken during the appointment
Pre-assessment questionnaires and consent forms (written or electronic)
Allergy screening and anaesthetic suitability assessment
Any previous histopathology (biopsy) results you provide or that we arrange

3.4 Health & Medical Data — Surgical & Dermatological Procedures

All of the above, plus:
Pre-operative assessment records and surgical consent forms
Photographs taken before, during, and after procedures for clinical documentation
Intraoperative notes and post-operative care instructions
Histopathology laboratory results (for biopsies, excisions, mole removals)
Anaesthetic type and tolerance records (local anaesthesia)
Follow-up wound care records and outcome assessments

⚠️ All health and medical data is classified as Special Category Data under GDPR Article 9. It is processed only with your explicit consent and/or where necessary for the provision of healthcare.

4. Legal Basis for Processing

Contractual necessity: To provide the consultation or procedure you have booked and paid for.
Healthcare provision (Article 9(2)(h) GDPR): Processing of special category health data is necessary for medical diagnosis, the provision of healthcare, treatment, and management of healthcare systems.
Explicit consent: For clinical photography, pre-operative imaging, and any data sharing beyond direct care, we obtain your explicit written consent.
Legal obligation: Retention of medical records, mandatory reporting of notifiable diseases, and compliance with the Medical Practitioners Act 2007.
Vital interests: Where processing is necessary to protect the life or health of the patient.
Legitimate interests: Quality assurance, clinical audit, fraud prevention, and service improvement.

Online & Remote Consultations

5. Privacy — Online & Video Consultations

Video, telephone, and secure text consultations are conducted over encrypted, GDPR-compliant platforms. Consultations are never recorded without your explicit prior consent. Consultation notes are documented by the clinician and stored securely in your medical record.

What we collect during online consultations:

Presenting symptoms and patient-reported history
Any photographs or images uploaded by the patient for remote dermatological review
Clinician's assessment notes and diagnosis
ePrescriptions and digital sick certificates issued
Radiology or specialist referral letters generated

How we protect your online consultation:

All video platforms use end-to-end encryption
Secure text messaging is encrypted in transit and at rest
Session data is never stored on third-party servers without a signed Data Processing Agreement
We recommend you conduct consultations in a private space and avoid public Wi-Fi

ePrescriptions & Digital Documents:

Prescriptions are transmitted digitally to your chosen pharmacy. Medical certificates are issued as secure, verifiable documents. All documents are retained as part of your medical record in line with Irish retention guidelines.

In-Clinic & Face-to-Face

6. Privacy — Face-to-Face & In-Clinic Consultations

When you attend our clinic for a face-to-face consultation, we collect and process additional personal data necessary for safe, high-quality in-person care. All data collected at the clinic is subject to the same strict confidentiality obligations as our online services.

6.1 Booking & Registration

Your name, date of birth, contact details, and health insurance information are recorded at booking
A pre-appointment intake form may be provided to complete before your visit
You will be asked to sign a data consent and treatment consent form on arrival

6.2 Clinical Photography at Clinic

For dermatology consultations, we may take clinical photographs of skin lesions, moles, or areas of concern using a dermoscope or clinical camera. These photographs are:

Taken only with your explicit written consent
Stored securely in your encrypted medical record
Never shared without your consent, except where required for specialist referral or histopathology
Not used for marketing, teaching, or publication without separate explicit consent

6.3 Physical Examination Data

Physical examination findings are documented by the clinician in your medical record
Vital signs and measurements may be taken and recorded
Allergy and medication reviews are conducted before any treatment is administered

6.4 Prescription & Medication Management

Prescriptions issued following a face-to-face consultation are recorded in full in your medical record. We document the medication name, dosage, frequency, duration, and dispensing instructions. Where topical treatments, medicated applications, or combination therapies are prescribed (e.g. for acne, rosacea, psoriasis, dermatitis, or post-procedure wound care), full prescribing details are retained. Repeat prescriptions are only issued following appropriate clinical review.

6.5 Referrals from Face-to-Face Consultations

If a referral is required following a face-to-face consultation (e.g. to a dermatologist, surgeon, oncologist, or for radiology including mammograms, ultrasound, MRI, or CT), a formal referral letter containing your relevant clinical data will be generated and shared — only with your consent — with the receiving specialist or centre.

6.6 Clinic Premises & Access

The clinic premises may use CCTV in non-clinical common areas (reception, waiting room) for security purposes. CCTV footage is retained for a maximum of 30 days and is not used for any clinical purpose. CCTV is never used in consultation or treatment rooms.

Surgical & Dermatology Procedures

7. Privacy — Surgical Procedures & Dermatological Treatments

QuickGP Ireland provides a range of in-clinic surgical and dermatological procedures, including but not limited to: mole assessment and removal, skin biopsy, cyst excision, cryotherapy, skin tag removal, wart treatment, abscess incision and drainage, avulsion of ingrown toenail, dermoscopy, and assessment of skin conditions including potential melanoma and other skin cancers. This section explains how your data is handled specifically in relation to these procedures.

7.1 Pre-Procedure Consent & Data Collection

Before any surgical or procedural intervention, we will:

Conduct a full pre-procedure clinical assessment and document findings
Obtain your signed informed consent form, which is retained permanently in your medical record
Document any contraindications, allergies, current medications, and blood-thinning agents
Record your anaesthetic history and suitability for local anaesthetic
Take pre-procedure clinical photographs with your written consent

7.2 During-Procedure Documentation

The treating clinician will document the procedure in full, including technique used, site, dimensions, and any findings
Intraoperative notes are retained as a permanent part of your medical record
Any tissue removed (e.g. mole, cyst, skin lesion) and sent for histopathology will be documented with the laboratory reference number

7.3 Histopathology & Biopsy Results

When tissue samples are sent to a histopathology laboratory for analysis (e.g. after mole removal, biopsy, or excision), the following applies:

Your sample is submitted with your name, date of birth, and clinical information necessary for accurate reporting
Laboratory results are received directly by your treating clinician and communicated to you as promptly as possible
Results — including any diagnosis of melanoma, basal cell carcinoma, squamous cell carcinoma, or other pathology — are stored in your medical record
In the case of a cancer diagnosis, your data may be shared with a specialist oncologist, surgeon, or the National Cancer Registry of Ireland, as required by law or for your ongoing care

7.4 Skin Cancer & Melanoma Assessments

We provide dermoscopy-based mole and skin lesion screening for the detection of melanoma and other skin cancers. This involves:

High-resolution dermoscopic images of lesions, stored securely in your record with your consent
Full clinical documentation of lesion size, shape, colour, and border characteristics
Risk stratification and follow-up planning documented and communicated to you in writing
Urgent referral pathways activated where malignancy is suspected — with your data shared only as clinically necessary

7.5 Dermatological Conditions & Treatments

For patients attending for assessment and treatment of dermatological conditions — including but not limited to acne, rosacea, eczema/dermatitis, psoriasis, fungal infections, urticaria, hyperpigmentation, and anti-ageing skin treatments — we collect and retain:

Detailed skin condition assessment notes and severity scoring
Photographic documentation of the affected area(s), taken only with your consent
Prescription records for all topical, oral, or injectable treatments prescribed
Treatment plans, including medicated applications, moisturiser regimens, sun protection advice, and lifestyle recommendations
Response to treatment, outcome notes, and any adverse reactions documented at follow-up

7.6 Post-Procedure Care Records

Written post-operative instructions provided to the patient are documented in the record
Follow-up wound care notes and healing assessments are recorded
Any complications, reactions, or unexpected outcomes are documented and managed in accordance with clinical governance standards
You have the right to request your procedure notes and post-operative records at any time

7.7 Clinical Photography — Procedures

Clinical photographs taken before, during, or after procedures are:

Used solely for clinical documentation, treatment planning, and continuity of care
Stored within your encrypted medical record — never in general photo storage
Never used for commercial, marketing, social media, teaching, or publication purposes without a separate, specific written consent
Deleted at your request, subject to any clinical or legal obligation to retain them

Important — Surgical Procedure Records

Records relating to surgical procedures — including consent forms, intraoperative notes, histopathology results, and post-operative records — are retained permanently or for a minimum of 8 years (adults) / until age 25 (minors), whichever is longer, in accordance with Irish medical records legislation and medico-legal best practice. These records cannot be deleted on patient request alone due to our legal and professional obligations.

8. Medical Confidentiality — All Services

All medical information shared with our doctors — whether during an online consultation, face-to-face appointment, or surgical procedure — is treated with the strictest professional confidence, in line with Irish Medical Council Guide to Professional Conduct and Ethics (8th Edition) and our obligations under GDPR.

Your medical records are accessible only to the treating clinician(s) and essential administrative staff directly involved in your care. We do not share health information with third parties without your explicit consent, except where required by law — for example:

Mandatory reporting of notifiable infectious diseases to the HSE
Reporting of certain cancer diagnoses to the National Cancer Registry of Ireland
Where there is an immediate and serious risk to the life of the patient or another person
Where a court order or legal obligation compels disclosure

9. Sharing Your Data

We may share your data with the following third parties, only to the extent necessary:

Pharmacies: Prescription data to fulfil ePrescriptions (with consent)
Radiology centres: Referral letters for X-ray, MRI, CT, Ultrasound, Mammogram, DEXA (with consent)
Histopathology laboratories: Tissue samples with clinical information for biopsy analysis
Specialist consultants / oncologists: Where referrals are made at your request or clinical necessity
National Cancer Registry of Ireland: As required by the Health (Provision of Information) Act 1997
Health insurers (VHI, Laya, Irish Life Health): Only claims-related information, with your consent
Payment processors (Stripe): Secure payment data — Stripe is PCI-DSS Level 1 compliant
IT & cloud providers: Under strict GDPR Article 28 Data Processing Agreements
Regulatory bodies: IMC, Data Protection Commission, HSE, or HIQA where legally required

We never sell, rent, or trade your personal or medical data for commercial purposes under any circumstances.

10. Data Retention

Adult medical records (online & in-person): Minimum 8 years from date of last treatment
Children's medical records: Until age 25, or 8 years from last treatment — whichever is later
Surgical procedure records & consent forms: Minimum 8 years; may be retained permanently for medico-legal purposes
Histopathology results (biopsy/excision): Retained permanently as part of surgical records
Clinical photographs: Retained for the duration of medical record retention
CCTV footage (clinic premises): Maximum 30 days, then permanently deleted
Financial & billing records: 7 years, in accordance with Revenue requirements

After the applicable retention period, data is securely and permanently deleted or irreversibly anonymised.

11. Data Security

We implement robust technical and organisational measures across all service types:

End-to-end encryption for all data in transit (TLS 1.2+/HTTPS)
Encryption of all data at rest
Role-based access controls — clinical data accessible only to treating clinicians
Secure, GDPR-compliant cloud infrastructure
Physical security at clinic premises
Regular security audits and staff data protection training
Data breach response plan in place, with 72-hour DPC notification procedures

12. Cookies

Our website uses only essential functional cookies. We do not use third-party advertising or tracking cookies. Continued use of our site constitutes consent to essential cookies only.

13. Your Rights Under GDPR

Right of access: Request a copy of all personal and medical data we hold
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion, subject to legal retention obligations (e.g. surgical records)
Right to restriction: Request restricted processing in certain circumstances
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests
Right to withdraw consent: Withdraw consent at any time without affecting prior processing

To exercise any right, contact us at info@quickgpireland.com. We will respond within 30 days. You may also lodge a complaint with the Irish Data Protection Commission at www.dataprotection.ie.

14. Children & Minors

Our services are available for children when a parent or legal guardian books and provides consent on their behalf. We do not collect personal data from anyone under 16 without verifiable parental consent. For surgical or procedural treatments on minors, written parental/guardian consent is mandatory before any procedure commences.

15. Changes to This Policy

We may update this policy periodically to reflect changes in law, clinical practice, or our services. The current version is always available on this page with the effective date stated. Continued use of our services constitutes acceptance of any revised policy.

16. Contact Us

For any questions, data subject requests, or concerns regarding this Privacy Policy:

QuickGP Ireland

Email: info@quickgpireland.com

Website: quickgpireland.com

We aim to respond to all data protection queries within 5 business days.