Privacy Statement

Our Data Privacy Statement

Cavan Physiotherapy Clinic aims to achieve the best possible standards of protection for all the data, including personal data, which it collects and processes. It is committed to compliance with the requirements of the Data Protection Acts and the General Data Protection Regulations of May 2018.

This statement is updated from time to time. The latest version is published on this page, updated 13th July 2018.

Who We Are 

We are a Private Physiotherapy Practice trading partnership trading under the names of Cavan Physiotherapy Clinic and The Cavan Clinic, Carrickane, Loreto Road, Cavan, Co. Cavan, H12 RY65, Telephone number 049 437 2077,
Email address For the purposes of processing your personal data we are the Controller.

Treatments are carried out in accordance with the Irish Society of Chartered Physiotherapists rules for professional conduct - see here: ISCP Professional Code of Conduct

 What information do we collect & why?

  • Health & Medical Data: For the purposes of providing your care, we need to collect and keep information about you and your health on our records. We will only collect what is relevant and necessary for your treatment. This information is classed as sensitive data and termed as special category data. When you visit our practice, we will make notes which may include details concerning your medication, treatment and other issues affecting your health. To be able to process your personal data it is a condition of any treatment that you give your consent to allow us to document and process your personal medical data.

  • Contact Details: We will collect contact details from you such as telephone numbers, email addresses, postal addresses which may be used to provide reports or other information concerning your treatment (such as invoices, receipts and exercise programmes) or with your permission to remind you of future appointments by text.

  • Other information: We may also collect details regarding insurance providers (such as your Health insurer) and legal representatives (such as your solicitor for a medical legal claim) where applicable and payment information. You may also provide us with other information if you contact us by email, via the contact form on our website or a direct message via social media, these details will be retained by us only as relevant to any ongoing contract or for our legitimate business interests or as required for legal purposes. The third party provider (such as Facebook/Twitter) may also retain details in accordance with their Privacy Policy.

  • CCTV: CCTV systems are installed both internally and externally for the purpose of enhancing security of the premises and to protect the interests and safety of patients and staff alike. CCTV is not used in treatment rooms or toilet areas.

  • Cookies: Our website uses cookies. A cookie is a small text file that may be stored on your computer or mobile device that contains data related to a website you visit. It may allow a website "remember" your actions or preferences over a period of time, or it may contain data related to the function or delivery of the site. Cookies can be set by the owner of the website or in some cases by third party services the website owner allows to present other information, run content or provide other functionality such as analytics. For more information please see our cookies policy at

The legal basis for the processing of data in this clinic is by explicit consent and as a necessary requirement for the provision of physiotherapy / health care, for diagnosing a condition and for the treatment of that condition. The processing may also be required to comply with the legitimate interests of the physiotherapist and the patient and / or employee and compliance with legal / regulatory obligations including CORU (Regulating Health & social care professionals) and the Irish Chartered Society of Physiotherapy (ICSP) code of conduct, tax obligations/ Revenue etc.

Where we may collect your personal data from

We may collect your data from:

  • you

  • your parent/guardian

  • your family members

  • your employer or representative which includes anyone who you have authorised to act on your behalf such as a legal representative or a translator

  • your family doctor (GP) or other medical consultant and scan centres

Who has access to your information?

All Physiotherapists are bound by patient confidentiality laws, the standards of conduct, performance and ethics of CORU (Regulating Health & social care professionals) and the Irish Chartered Society of Physiotherapy (ICSP) code of conduct.

Other practice staff sign a confidentiality agreement that explicitly makes clear their duties in relation to handling personal health information and the consequences of breaching that duty. Practice staff may have access to your records for administration purposes such as handling documents to and from GP's, Scan Centres, Consultants, Insurance Companies, Solicitors etc., processing financial information etc.

As part of our obligations as healthcare practitioners there may be circumstances related to your treatment, on-going care or medical diagnosis that will require the sharing of your medical records with other healthcare practitioners such as GP's consultants, surgeons and/or medical insurance companies. Where this is required we will always inform you first unless we are under a legal obligation to comply.

Should Cavan Physiotherapy Clinic be acquired by another company, customer information may be deemed a transferable business asset, and as such will transfer to the new owners.

Your information will not be shared elsewhere outside the Cavan Physiotherapy Clinic unless you have given permission, except when;

  • required by law

  • in your best interests and you are unable to give consent 

  • in the public interest to prevent serious harm to others

How can you access your records?

You have the right to request to see the information that we hold about you. All requests will be answered within 30 days unless you are notified of a difference to this time scale. Requests can be made in writing or email to our Data Protection Representative at: Cavan Physiotherapy Clinic, Carrickane, Loreto Road, Cavan, H12 RY65 or email

Please provide the following information: your name, address, date of birth, telephone number, email address and details of the information you require.
Your rights regarding the data we hold

As we process your personal data, you have certain rights:

  • Right not to be automatically processed - we do not currently operate any automatic processing or profiling based on your personal or health data.

  • Right of access - you have the right to request a copy of the information that we hold about you.

  • Right of rectification - you have a right to correct data that we hold about you that is inaccurate or incomplete.

  • Right to be forgotten - in certain circumstances you can ask for the data we hold about you to be erased from our records. Please note that we are required to keep your data for a minimum of 7 years where you have been/are a patient.

  • Right to restriction of processing - where certain conditions apply you have a right to restrict the processing - such as restricting your information while we check the accuracy of your information.

  • Right of portability - you have the right to have the data we hold about you transferred to another organisation.

  • Right to object - you have the right to object to certain types of processing such as direct marketing.

  • Right to withdraw consent - If we are processing Personal Data based on your consent you may withdraw that consent at any time. This does not affect the Lawfulness of processing what took place prior to its withdrawal.

If you need to use one of these rights please send your request in writing to our Data Protection Representative at: Cavan Physiotherapy Clinic, Carrickane, Loreto Road, Cavan, H12 RY65 or email

Retaining Your Personal Data

Whilst you are receiving treatment from our clinic we will continue to store and use your personal data. Once you have been discharged, we are required to retain your personal data for a minimum of 7 years from your last contact with us or until you are 25 (or 26 if you are 17 when treatment ends).

If you have not received treatment, your data will be retained for no longer than 12 months.

CCTV Recordings - images captured by the CCTV system will be retained for a maximum of 28 days, except where the image identifies an issue and is retained specifically in the context of an investigation/prosecution of that issue.

How your information is kept safe?

We take our security responsibilities seriously, taking all reasonable steps, including appropriate technical and organisational measures to protect your data. We review our security measures regularly. We are committed to keeping your data safe and secure and will regularly audit our internal processes and procedures to ensure they continue to maintain our high levels of security.

We will take the utmost care to ensure that your personal information is safe whilst it is under our care. In the unlikely event that this safety was compromised you will be notified immediately as will the Data Protection Commissioner.

Your right to make a complaint

In the event that you wish to make a complaint about how your personal data is being processed by us you have the right to complain to us. If you do not get a response within 30 days, you can complain to the Data Protection Commissioner (DPC).

The details for each of these contacts are:

Cavan Physiotherapy Clinic, Carrickane, Loreto Road, Ireland, H12 RY65

Telephone 049 437 2077


Office of the Data Protection Commissioner. Canal House, Station Road, Portarlington, Co. Laois, R32 AP23
Phone 0761 104 800 LoCall 1890 25 22 31
Fax +353 57 868 4757 |