Privacy Policy
Privacy Policy
1. Who we are
This website, medistichealth.com, is operated by PEMS Wellness Limited, trading as Medistic Health ("Medistic Health", "we", "us", "our"), a company registered in Ireland.
Registered address: Graigue Kilcornan Pallaskenry Co. Limerick V94TH9V Ireland
Contact: [email protected]
For the purposes of the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts, we are the controller of the personal data described in this policy.
2. What this policy covers
This policy explains what personal data we collect through medistichealth.com, why we collect it, who we share it with and what rights you have. It applies to our website, our forms and our email communications. It does not apply to third party websites we link to, which have their own policies.
3. The personal data we collect
Information you give us. When you complete a form on this site we collect the information you enter. Depending on the form this may include your name, email address, telephone or mobile number, your stated availability, and any free text you choose to write in an open question field.
Information you may volunteer in free text. Some of our forms include open questions such as what you would like to ask a consultant. If you choose to write about your own health, or the health of someone else, that information may constitute special category data under Article 9 GDPR. We do not ask for health information and we would prefer you did not include it. If you do include it, we treat it as having been provided with your explicit consent, we handle it with additional care, and you may ask us to delete it at any time.
Information collected automatically. When you visit the site we and our service providers may collect your IP address, browser type and version, device type, operating system, referring page, pages viewed, time spent and similar technical information. This is collected through cookies and comparable technologies.
Email engagement data. If you receive email from us, our email platform records whether the message was delivered, opened and whether links were clicked.
Payment information. We do not sell anything through this website and we do not collect or store card, bank or other payment details.
We do not knowingly collect data from anyone under 16.
4. Why we process your data, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to an enquiry you have submitted | Performance of steps taken at your request prior to a contract, or our legitimate interest in answering people who contact us |
| Passing your enquiry to the relevant Medistic Health consultant | Consent, given when you submit the form |
| Sending you educational emails and updates | Consent, which you confirm by double opt-in and can withdraw at any time |
| Operating, securing and improving the website | Our legitimate interest in running a functioning and secure site |
| Any health information you volunteer in free text | Your explicit consent under Article 9(2)(a) |
| Meeting legal, tax and regulatory obligations | Compliance with a legal obligation |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you may object at any time using the contact details below.
5. Consultants, and what independence means for your data
Medistic Health works with independent consultants. When you submit an enquiry naming or directed to a consultant, we pass your submitted details to that consultant so they can respond to you.
You should understand what this means:
- Medistic Health consultants are independent. We do not pay them and they may have their own commercial relationships with products or technologies discussed on this site.
- Once your enquiry reaches a consultant, that consultant handles your data under their own arrangements and may be a separate controller of it.
- Some consultants are based outside the European Economic Area. Where that applies, your details will be transferred to that country, and by submitting the form you consent to that transfer.
- If you would like your data withdrawn from a consultant, contact us and we will pass the request on, but you may also need to contact the consultant directly.
6. Who else we share data with
We share personal data with service providers who process it on our behalf under contract:
- Kajabi, our website, email and CRM platform, based in the United States.
- Google, where reCAPTCHA is enabled on a form for spam protection, and where analytics are in use.
- Any email delivery, scheduling, hosting or analytics providers we engage from time to time.
We may also disclose data where we are legally required to, or to establish, exercise or defend legal claims.
We do not sell your personal data and we do not share it with advertisers.
7. International transfers
We are established in Ireland, so your data sits within the European Economic Area by default. Some of our service providers, and some of our consultants, are based outside the EEA.
Where personal data is transferred outside the EEA we rely on appropriate safeguards, which for our platform providers means the European Commission's Standard Contractual Clauses, or, for certain United States providers, the EU-US Data Privacy Framework. You may request details of the safeguards in place by writing to [email protected].
8. How long we keep data
- Enquiry and form submissions: kept for as long as needed to deal with the enquiry and then for up to 24 months, unless you ask us to delete them sooner.
- Marketing contacts: kept until you unsubscribe or ask to be removed, and then suppressed rather than deleted so that we do not contact you again in error.
- Website and analytics data: typically retained for up to 26 months.
- Records we must keep for legal or tax reasons: kept for the period Irish law requires.
9. Your rights
Under the GDPR you have the right to:
- request access to the personal data we hold about you
- have inaccurate data corrected
- have your data erased in certain circumstances
- restrict how we process your data
- receive your data in a portable format
- object to processing based on legitimate interests
- withdraw consent at any time, without affecting processing carried out before you withdrew it
- not be subject to solely automated decision making with legal or similarly significant effects, which we do not carry out
To exercise any of these, email [email protected]. We will respond within one month. We may need to verify your identity first.
You also have the right to complain to a supervisory authority. Our lead authority is the Irish Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, www.dataprotection.ie. If you live elsewhere in the EEA you may complain to your national authority instead.
10. Cookies
We use cookies that are strictly necessary for the site to function, and, where you have agreed, cookies that help us understand how the site is used. Under the Irish ePrivacy Regulations we ask for your consent before setting non-essential cookies. You can control cookies through your browser settings. Blocking all cookies may stop parts of the site working.
11. Security
We use technical and organisational measures appropriate to the risk, including encrypted connections and access controls on our platforms. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy. The version published here is the one that applies, and material changes will be flagged on this page.
13. Contact
Questions, requests or complaints about this policy or your data:
PEMS Wellness Limited, Graigue, Kilcornan, Pallaskenry, Co. Limerick, V94TH9V, Ireland
