Privacy Policy

Last updated: May 2026

Who we are

NeoFertility is a fertility clinic based at Beacon Mall, Sandyford, Dublin 18, Ireland. The information below identifies the data controller responsible for your personal data and how to reach us about it.

Data Controller: Dr Philip ("Phil") Charlie Boyle, trading as Neo Fertility
Irish Medical Council registration: 011986 (Specialist Division, General Practice)
Registered Business Name: Neo Fertility, RBN 574145 (Irish Companies Registration Office)
Registered Office: Suite 7, 1st Floor, Beacon Mall, Beacon Court, Sandyford, Dublin 18, D18 N2E2, Ireland
Phone: +353 (0)1 293 3816
Data Protection Contact: dpo@neofertility.ie

For general clinic enquiries, please use beacon@neofertility.ie. For any question about your personal data, your rights under GDPR, or this notice, please write to the data protection contact above.

What data we collect

When you contact us

If you use our contact form or email us, we collect your name, email address, phone number (if provided), and the content of your message. We use this information to respond to your enquiry and, if appropriate, to arrange a consultation.

When you book an appointment

When you book a consultation, we collect your name, contact details, and any information you provide about your medical history. This information is used to prepare for your appointment and provide clinical care.

Patient intake form

If you complete our online patient intake form, we collect detailed medical history information including personal details, reproductive history, and health information for both partners. This data is classified as special category data under GDPR (health data) and is processed on the legal basis of providing healthcare under Article 9(2)(h) GDPR.

Patient intake data is stored securely within the European Union (Frankfurt, Germany). It is accessible only to your treating clinicians and authorised practice staff.

Website usage

We use Cloudflare Web Analytics, a privacy-first analytics service that does not collect personal data, does not use cookies, and does not track individual visitors. We do not use Google Analytics, Facebook Pixel, or any advertising tracking on this website.

How we use your data

To respond to your enquiries
To provide clinical care and treatment
To manage appointments and communications
To comply with legal and regulatory obligations

We do not sell your data. We do not share your data with advertisers. We do not use your data for marketing purposes unless you have specifically opted in.

Legal basis for processing

Provision of healthcare (Article 9(2)(h) GDPR): Processing of clinical data, including medical history, treatment plans, test results, imaging, and clinical correspondence, is carried out for the purposes of preventive or occupational medicine, medical diagnosis, and the provision of health care. This is the lawful basis for handling your special category health data.
Contract (Article 6(1)(b) GDPR): Processing necessary to provide the services you have requested, including appointment booking, billing, and other non-clinical administration.
Legal obligation (Article 6(1)(c) GDPR): Medical record-keeping requirements and other obligations imposed on a regulated medical practice.

Data storage and security

Your data is stored securely using encrypted, access-controlled systems. Our website is hosted on infrastructure with EU data processing. Patient data is stored in the European Union. We use industry-standard security measures including encryption in transit and at rest.

International data transfers

Some of our infrastructure providers operate global networks. Where any data is processed outside the European Economic Area, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards. Patient intake data and clinical records are stored exclusively in the European Union and are not transferred outside the EEA.

Data retention

Clinical records (medical history, treatment plans, test results, imaging, and patient correspondence) are retained for 8 years from the last episode of care, in accordance with the Irish Medical Council Guide to Professional Conduct (Para 28.1) and GDPR Article 5(1)(e) storage limitation. After 8 years, records are securely destroyed unless legal obligations require longer retention.

Non-clinical data is held for shorter periods proportionate to its purpose. Contact form submissions are retained for up to 12 months. We review and securely delete data that is no longer required.

Your rights

Under GDPR, you have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Ask us to correct inaccurate data
Erasure: Ask us to delete your data (subject to legal retention requirements)
Restriction: Ask us to limit how we use your data
Portability: Request your data in a portable format
Object: Object to processing based on legitimate interest
Withdraw consent: Where processing is based on your consent (such as future opt-in educational communications), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew

To exercise any of these rights, contact our data protection contact at dpo@neofertility.ie. We aim to respond within 30 days, in line with GDPR Article 12(3).

Sub-processors and third parties

We engage trusted service providers to help us deliver our services. We share your data with these providers only as necessary for the purposes described in this notice, and we use providers that offer appropriate technical and organisational safeguards. The categories of recipient are:

Cloud productivity and email providers (used for clinic email, calendars, and document handling)
Patient charting and clinical-records software providers (used to record clinical observations and treatment progress)
Website hosting and content-delivery providers (used to operate this website)
Patient-data storage providers (EU-based) (used to host the patient intake form and related records, EU-Frankfurt)
Payment processors (used for online payment of consultation and treatment fees)
Clinical laboratories and imaging providers (EU-based) (used to process blood tests, scans, and other diagnostic investigations)
Research collaborations and academic registries (where applicable, on an opt-out basis and pseudonymised at source before transmission)
Domain registry and DNS providers (used to operate our domain names and direct internet traffic to our services)
Referring consultants and hospitals (with your consent, where a clinical referral is needed)

We maintain a current internal record of the specific organisations engaged in each of these categories. You may request the current list at any time by contacting dpo@neofertility.ie.

Marketing communications

We do not currently send marketing communications. In the future, we may offer optional educational content and resources to patients who explicitly opt in via our intake form or website. This processing will be based on your consent under GDPR Article 6(1)(a), and you may withdraw consent at any time without affecting the care you receive.

Automated decision-making

We do not use automated decision-making or profiling in relation to your personal data. All clinical decisions are made by our medical team.

Complaints

If you are not satisfied with how we handle your data, please contact dpo@neofertility.ie in the first instance. You also have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority for data protection.

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
www.dataprotection.ie

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top indicates when it was most recently revised. Significant changes will be communicated through our website.

See also our Cookie Policy and Terms of Use.