Privacy Notice

Last updated 6 November 2026

1. Who we are

This website, dublin-chiropractic.com, is run by Posture Pros, trading as Dublin Chiropractic & Physiotherapy. We are the data controller for the personal data described in this notice.

Posture Pros, 70 Lower Mounttown Road, Monkstown, Co. Dublin, A96 R6C9.
Email [email protected] · Phone (01) 575 2623

Contact us at the email above about anything in this notice, including your rights.

2. What we collect and why

When you send an enquiry or fill in a questionnaire

We collect your name, email address, phone number and whatever you tell us in your message. That can include health information, such as your symptoms, a diagnosis or scan results. We use it only to reply to you and to tell you whether our care may suit you.

• Legal basis: taking steps at your request before you become a patient (GDPR Article 6(1)(b)).
• Health information: your explicit consent (Article 9(2)(a)), which you give with the checkbox on the form. You can withdraw it at any time by emailing us; it does not affect anything we did before you withdrew it.

If you become a patient

We keep clinical records, appointment details and contact details so we can assess and treat you safely, as health professionals are required to. These are held in our practice-management system (Zanda).

• Legal basis: providing the care you ask for (Article 6(1)(b)) and the provision of health care by professionals bound by confidentiality (Article 9(2)(h) and section 52 of the Data Protection Act 2018).

When you use this website

If you accept analytics and advertising cookies, Google Analytics and Google Ads measure how the site is used and whether our ads work. Without your consent these tags do not set cookies or identify you. On this site, measurement data passes through a server-side tagging service (Stape, EU-hosted) before reaching Google, which lets us limit what Google receives.

• Legal basis: your consent (Article 6(1)(a) and the ePrivacy Regulations 2011), which you can change at any time with “Cookie preferences” in the site footer.
• We also use Cloudflare Turnstile to keep spam off our forms, and our host keeps short-lived technical logs for security. Legal basis: our legitimate interest in keeping the site secure (Article 6(1)(f)).

We do not send newsletters, and we never sell your personal data.

Occasional messages, if you agree

On our intake form you can choose whether we may send you news and health information. If you say yes, we may occasionally email or text you, for example once after your care ends to ask whether you'd like to leave a Google review. If you say no, we won't.

• Legal basis: your consent (Article 6(1)(a) and the ePrivacy Regulations 2011). You can withdraw it at any time by replying to the message or contacting us, and we will stop.

3. Who we share it with

We use these service providers, who process data for us under contract and only on our instructions:

• Cloudflare: website hosting, security and form handling.
• Resend: delivers your enquiry to our inbox as an email.
• Google: Analytics, Ads and Tag Manager (only with your consent), and the Google Maps and YouTube content embedded on some pages.
• Stape: server-side tagging for analytics (only with your consent).
• Zanda: patient records and appointments.
• Our email provider, which stores the emails we send and receive.

We may also share information where the law requires it, or with another health professional involved in your care when you have asked us to, or it is needed to protect your vital interests.

4. Transfers outside the EU

Some providers (Google, Cloudflare and Resend) may process data in the United States. Where they do, the transfer is covered by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. Our practice-management system, Zanda, stores patient records in the United Kingdom, which the European Commission recognises as providing adequate protection; the provider's data processing agreement also includes the Standard Contractual Clauses.

5. How long we keep it

• Enquiries: 12 months from your last contact, if you do not become a patient.
• Adult patient records: 8 years after your last treatment.
• Records of patients treated as children: until your 25th birthday, or 8 years after your last treatment if that is later.
• Analytics data: for the data-retention period set in our Google Analytics account.

6. Your rights

You have the right to access your personal data, have it corrected, have it erased, restrict or object to how we use it, receive it in a portable format, and withdraw consent you have given. Some rights are limited for health records we are required to keep. Email us to use any of them; we will reply within one month.

You can also complain to the Data Protection Commission (dataprotection.ie). We would appreciate the chance to sort out any concern first.

7. Cookies

We set one strictly necessary item: a record of your cookie choice, so we don't ask again. Analytics and advertising cookies are set only if you accept them in the cookie banner. YouTube videos load from youtube-nocookie.com, and only when you press play. The map on some pages is provided by Google Maps. Change your choice at any time with “Cookie preferences” in the footer.

8. Children

Our website forms are not intended for children. A parent or guardian should contact us on behalf of anyone under 16.

9. Changes to this notice

We will update this page if how we use personal data changes, and change the date above.