Privacy Policy
ReSync Privacy Policy (2026)
· @Diarmuid Hegarty
Who we are
Resync Physiotherapy Ltd (“ReSync”, “we”, “us”) runs Resync Physiotherapy & Sports Injury Clinic and the website www.resyncphysiotherapy.ie. We are the data controller for the personal information described in this policy.
- Address: Unit 16 Belarmine Plaza, Belarmine Ave, Kilgobbin, Dublin, D18 WFF3, Ireland
- Email: heretohelp@resyncphysiotherapy.ie
- Phone: +353 1 685 5181
This policy explains what information we collect when you use our website, our booking forms and landing pages, or attend the clinic, why we collect it, and your rights under the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.
Information we collect
Information you give us
- Contact details: name, phone number, email address and postal address.
- Booking details: appointment type, date, time and the practitioner you see.
- Health information: your injury or condition, medical history, treatment notes, test results (for example force plate and strength testing) and exercise programmes. This is special category data under GDPR and is handled with extra care.
- Payment details: what you paid and when. Card payments are handled by our payment provider; we do not store full card numbers.
- Anything you tell us in forms, emails, phone calls or messages.
Information collected automatically when you visit our website
- Technical data: IP address, browser and device type, pages visited, time and date of visit, and the page you came from.
- Cookie and pixel data: see “Cookies, advertising and the Meta pixel” below. We only set non-essential cookies if you accept them.
How we use your information and our lawful basis
What we use it for | Lawful basis under GDPR |
|---|---|
Booking, assessing and treating you, and keeping clinical records | Contract (Art. 6(1)(b)). For health data: provision of health care (Art. 9(2)(h)) |
Sending appointment confirmations, reminders and exercise programmes | Contract (Art. 6(1)(b)) |
Taking payment and keeping financial records | Contract and legal obligation (Art. 6(1)(b) and (c)) |
Replying to enquiries and form submissions | Legitimate interests in responding to you (Art. 6(1)(f)) |
Sending you news, offers and educational emails | Consent (Art. 6(1)(a)). You can unsubscribe at any time |
Measuring and improving our website and adverts (analytics, Meta pixel, Conversions API) | Consent, given through our cookie banner (Art. 6(1)(a)) |
Showing our adverts to people who have visited our website or engaged with our social media | Consent (Art. 6(1)(a)) |
Meeting legal, insurance and professional (CORU) requirements | Legal obligation (Art. 6(1)(c)) |
We do not use your health information for advertising, and we do not sell your personal information.
Cookies, advertising and the Meta pixel
When you first visit our website or landing pages, a cookie banner asks whether you accept non-essential cookies. You can choose Accept All, Reject All, or Customise, and change your choice at any time through the cookie settings link on the site.
- Essential cookies keep the site working (for example, remembering your cookie choice). These do not need consent.
- Analytics cookies tell us how many people visit, which pages they use and where they came from.
- Advertising cookies and the Meta pixel: if you accept, we use the Meta pixel (from Meta Platforms Ireland Ltd, which runs Facebook and Instagram) to record actions such as viewing a page, submitting a form or completing a booking. We also use Meta’s Conversions API, which sends the same events from a server so they are measured more reliably. This lets us see which adverts lead to bookings and show our adverts to people who have visited our website. The data Meta receives can include your IP address, browser details, the page visited, the action taken and, where you have given them in a form, a scrambled (hashed) version of your email address or phone number.
Meta uses this data under its own privacy policy, available at facebook.com/privacy/policy. You can control the adverts you see in your Facebook and Instagram ad settings. If you reject advertising cookies, we will not send these events to Meta.
Full details of each cookie are in our Cookie Policy.
Who we share your information with
We only share your information where needed to run the clinic, and with companies that process it for us under a written contract. These include:
- Cliniko: practice management, online booking and clinical records
- GoHighLevel: website forms, enquiry management and follow-up messages
- Everfit: online coaching and home exercise programmes
- VALD: strength and force plate testing software
- Meta (Facebook and Instagram): advertising measurement, only with your consent
- Google: website analytics and Google Business reviews, only with your consent where cookies are involved
- Our email provider, website host, payment provider, IT support and accountants
We may also share information with your GP, consultant or other health professionals where you ask us to or it is needed for your care, with your insurer where you are claiming through insurance, and with authorities where the law requires it.
Transfers outside the EU
Some of our providers store or access data outside the European Economic Area, for example in the United States. Where this happens, we rely on safeguards approved under GDPR, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
How long we keep your information
Information | How long we keep it |
|---|---|
Clinical records (adults) | 8 years after your last appointment |
Clinical records (under 18s) | Until the patient’s 25th birthday, or 8 years after the last appointment if later |
Financial records | 6 years, as required by Revenue |
Enquiries that do not lead to a booking | 12 months |
Marketing contacts | Until you unsubscribe or withdraw consent |
Cookie and pixel data | As set out in our Cookie Policy |
How we protect your information
We use secure, password-protected systems, limit access to staff who need it, and train our team on data protection. No system is completely secure, but we take reasonable steps to protect your information and will tell you and the Data Protection Commission if a breach puts you at risk.
Your rights
Under GDPR you have the right to:
- ask for a copy of the information we hold about you
- have inaccurate information corrected
- have your information deleted, where we are not required to keep it
- restrict or object to how we use it, including for direct marketing
- receive your information in a portable format
- withdraw consent at any time, for example by unsubscribing or changing your cookie settings
To use any of these rights, email heretohelp@resyncphysiotherapy.ie. We will reply within one month and will not charge a fee in most cases.
Children
We treat children only with the consent of a parent or guardian, who manages their information on their behalf. Our website and adverts are not aimed at children under 16.
Complaints
If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, at www.dataprotection.ie.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
Last updated: 28 October 2026