Privacy Policy

1. Who We Are

Instant Doc Online Ltd ("we", "us", "our") is the data controller responsible for your personal data. We are registered in Ireland (Company No. 123456) with our registered office at Dublin, Ireland. Our Data Protection Officer can be contacted at admin@instantdoconline.com.

2. Information We Collect

We collect the following categories of personal data:

• Identity Data: Full name, date of birth, gender, and photograph (if provided).
• Contact Data: Email address, telephone number, and postal address.
• Health Data: Symptoms described during triage, consultation notes, prescriptions issued, and any medical documents you upload. This is classified as special category data under GDPR.
• Technical Data: IP address, browser type, device information, and session logs.
• Financial Data: Payment card details (processed securely via Stripe — we never store full card numbers).

3. How We Use Your Data

We process your data for the following purposes:

• To match you with an appropriate doctor and facilitate your consultation.
• To process payments via our escrow system.
• To issue and deliver prescriptions to your chosen pharmacy.
• To provide 24/7 concierge support and handle disputes.
• To comply with legal and regulatory obligations (e.g., Irish Medical Council reporting).
• To improve our platform through anonymised analytics.

4. Legal Basis for Processing

We rely on the following legal bases under GDPR:

• Consent: For processing health data during consultations (Article 9(2)(a)).
• Contract: To deliver the consultation service you have requested.
• Legitimate Interest: For fraud prevention, platform security, and service improvement.
• Legal Obligation: To comply with healthcare regulations and financial reporting.

5. Data Retention

Consultation recordings and health data are encrypted end-to-end and automatically deleted 30 days after your session ends, unless you explicitly request longer retention. Financial records are retained for 6 years as required by Revenue Commissioners. Account data is deleted within 30 days of account closure.

6. Data Sharing

We never sell your data. We share data only with:

• The consulting doctor (health data, for treatment purposes only).
• Partner pharmacies (prescription details, for fulfilment only).
• Stripe (payment processing, PCI-DSS compliant).
• Irish regulatory bodies (when legally required).

7. Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise any right, email admin@instantdoconline.com. We will respond within 30 days.

8. Cookies

We use strictly necessary cookies for session management and optional analytics cookies (only with your consent). You can manage your cookie preferences at any time via the cookie banner or by emailing us. For full details, see our Cookies Policy.

9. Contact & Complaints

If you have concerns about how we handle your data, please contact our DPO at admin@instantdoconline.com. You also have the right to lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie.

If you have any questions about this policy, please contact us at admin@instantdoconline.com.