This Eirdoc Online Doctor Privacy & Cookies Policy describes our policies and procedures on the collection, use, and disclosure of your personal and health information when you use our digital medical service. It also informs you about your privacy rights under United Kingdom law and how the law protects you.

We use your personal data to deliver, manage, and improve our digital healthcare services. By accessing or using this service (eirdoc.com/uk/), you agree to the collection and use of information in accordance with this Privacy and Cookies Policy.

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy & Cookies Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Company (referred to as either "the Company", "We", "Us", or "Our") refers to Eirdoc Limited, 85 Great Portland Street, First Floor, London, W1W 7LT, United Kingdom.
• Country refers to the United Kingdom.
• Cookies are small files placed on Your computer, mobile device, or any other digital device by a website, containing details of Your browsing history among its many uses.
• Device means any digital device that can access the Service, such as a computer, mobile phone, or tablet.
• Personal Data is any information that relates to an identified or identifiable individual under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
• Special Category Data refers to sensitive personal data concerning health, medical history, clinical symptoms, and prescription details.
• Service refers to the digital consultation platform and website accessible from eirdoc.com/uk/.
• Service Provider means any natural or legal person who processes data on behalf of the Company, including technical hosts, electronic prescription transmission networks, payment processors, and customer support infrastructure.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Website refers to Eirdoc UK, accessible from eirdoc.com/uk/.
• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

3.1 Personal & Medical Data

While using Our Service, We may ask You to provide Us with certain personally identifiable and health-related information necessary to deliver clinical care safely. This may include, but is not limited to:

3.2 Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (IP address), browser type, browser version, the specific pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and diagnostic data.

When You access the Service via a mobile device, We may collect certain information automatically, including the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, and diagnostic data.

We use Cookies and similar tracking technologies (beacons, tags, and scripts) to track activity on Our Service, analyze site traffic, and protect platform integrity.

Under UK data protection laws, the Company processes your data under lawful bases (including the provision of healthcare, performance of a contract, legal obligation, and legitimate interest):

We do not sell your personal or medical data. We may share your information only under the following strictly governed circumstances:

The Company will retain Your Personal Data only for as long as necessary to fulfil the purposes set out in this Policy:

Your information may be processed on secure servers located within the United Kingdom, the European Economic Area (EEA), or other jurisdictions with recognized adequacy regulations under UK data protection law.

If data is transferred to jurisdictions outside the UK/EEA without an adequacy decision, the Company ensures appropriate safeguards are in place (such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses) to protect your information to UK standards.

As a UK resident, you hold statutory rights under the UK GDPR and Data Protection Act 2018:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

We employ industry-standard technical, administrative, and organizational safeguards (including data encryption, strict access control, and secure data hosting) to protect your personal and medical information. While no electronic transmission or digital storage method is 100% secure, we continuously audit our infrastructure to safeguard your information.

Our Service may contain links to external third-party websites (such as NHS guidance portals or external resources). We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party websites.

We may update Our Privacy & Cookies Policy periodically. We will notify You of any material changes by posting the updated policy on this page with a revised "Last Updated" date. You are advised to review this Privacy Policy periodically for any updates.

For any questions regarding this Privacy & Cookies Policy, your medical data, or your privacy rights, contact our Data Protection Team: