Privacy Policy

The Lymph Glow is a wellness clinic with two locations in Cork, Ireland (Penrose Wharf, Cork City and Ballincollig). We are the data controller for the personal information described in this policy. For any privacy request, contact us through our contact page or at the clinic reception.

Booking and contact details: name, email address, phone number, preferred clinic, appointment history and deposit/payment records handled through our booking system (Phorest).

Health and consultation information: intake forms, medical history, surgical details, contraindications, treatment notes and progress photographs where you have given explicit consent. This is special category data and is only collected where it is necessary to deliver treatment safely.

Website information: messages you send us and technical data such as device type, pages viewed and approximate location, collected via cookies (see our cookie policy).

To manage bookings, deposits and reminders (contract); to deliver treatment safely and keep clinical records (explicit consent and vital interests for health data); to answer enquiries and provide aftercare (legitimate interests); to send marketing or offers only where you have opted in (consent, withdrawable at any time); and to meet accounting, insurance and legal obligations (legal obligation).

Before and after photographs are taken only with your written consent and are stored securely. Separate consent is always requested before any image is used on social media or marketing, and you may withdraw that consent at any time.

We share data only with service providers who help us operate: our booking and payment platform, payment processors, and secure IT or hosting providers. We never sell your data. We may disclose information where required by law or, with your consent, to your surgeon or healthcare professional for continuity of care.

Clinical and consultation records are retained for the period required by Irish health and insurance practice (generally 7 years from your last appointment, longer for records relating to minors). Booking and accounting records are kept for 6 years. Marketing consents are kept until you withdraw them.

Under GDPR you may request access to your data, correction, erasure, restriction or portability, and you may object to processing or withdraw consent at any time. Contact us and we will respond within one month. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

Records are held in access-controlled systems, paper forms are stored securely on site, and only therapists involved in your care can view your clinical notes.