Data controller: GP4U (contact: admin@gp4u.ie)
When you book a consultation we collect your name, date of birth, contact details, and the health information you provide in your intake questionnaire and during your consultation. This is "special category" data under GDPR, and we only process it to provide you with medical care, which is a lawful basis under Article 9(2)(h) (health care provided by a health professional).
Medical records are retained in line with Medical Council of Ireland guidance (currently a minimum of 8 years for adult patients; longer for children — until age 25, or 26 if a note was made at 17). Update this section to match your own retention policy once confirmed.
You can request a copy of everything we hold about you, ask us to correct it, or ask us to delete your account and data, by emailing admin@gp4u.ie. Every request is reviewed by a person rather than actioned automatically, since GPs are legally required to retain clinical records for a minimum period (see "How long we keep it" above) — we will provide or delete what can legally be provided or deleted, and respond within one month. You have the right to complain to the Data Protection Commission (dataprotection.ie) at any time.
Video consultations and messages are transmitted over encrypted connections, and the site itself is only served over HTTPS. Clinical notes, prescriptions, sick cert/referral letter details, and your intake answers are also encrypted at rest in our database. Payment is handled entirely by Stripe — GP4U never sees or stores your card details.
GP4U is intended for non-emergency GP consultations. If you are experiencing a medical emergency, call 112/999 or attend your nearest Emergency Department immediately. Consultations are provided by GPs registered with the Irish Medical Council. In some cases, your GP may advise that an in-person examination is required and decline to treat remotely — this is for your safety.
