1. Introduction
Celtic Fox Herbal is committed to protecting your privacy and ensuring that your personal data is handled securely and lawfully, in line with the General Data Protection Regulation (EU GDPR) and the Irish Data Protection Act 2018. This Privacy Policy explains how we collect, use, process, and store your personal data when you interact with our website, book appointments, or purchase products and services.
This policy applies to all users of our services, including visitors to our website and participants in our clinical, educational, and retail offerings. If you have any questions, please reach out via our contact form.
2. Identity of the Data Controller
The data controller responsible for processing your data is: Celtic Fox Herbal – Luke Ó hErodáin
Registered in Ireland
Based in North Cork, Ireland
Contact: Via Contact Page
3. Legal Basis for Processing Your Data
Under the EU GDPR, we process personal data only when we have a lawful basis for doing so:
3.1. Contractual Obligation
To provide you with consultations, workshops, products, or other services you have booked or purchased.
3.2. Legitimate Interests
For essential operations such as confirming appointments, internal training, record-keeping, website security, and product/service updates.
3.3. Vital Interests
If we believe there’s a serious risk to your health or safety, we may share information with your GP or emergency services.
3.4. Legal Obligation
To comply with health record-keeping legislation, tax regulations, or requests from legal authorities.
3.5. Consent (When Required)
You may be asked to give consent for activities such as receiving newsletters or using anonymised case studies. You can withdraw consent at any time by contacting us.
4. Information We Collect
We collect personal data when:
- You book an appointment, walk, workshop or consultation
- You fill out a form (including intake, contact, or consent forms)
- You purchase a product or sign up for a course
- You interact with our website or social media channels
4.1. Types of Data Collected
- Identification & Contact Info: Name, email address, phone number, billing/shipping address
- Health & Medical Data: Relevant health history, clinical notes (only for consultations)
- Payment Data: Payment method details (handled securely via Stripe)
- Technical/Browsing Info: IP address, browser, device type, location (approximate)
- Minor Data: We do not knowingly collect data from minors unless essential for medical record-keeping during a consultation under guardian consent
5. Cookies & Tracking Technologies
Our website uses cookies and similar technologies (e.g., pixel tags) to improve your experience and track performance.
A full explanation of this is available in our separate [Cookie Policy]. You can manage cookie preferences via your browser or our website banner.
6. Third-Party Services & Data Sharing
We only share your data when necessary and in compliance with GDPR:
- Payment Gateway: Stripe, for secure transaction processing
- Shipping Providers: For product deliveries
- Analytics and Marketing Platforms: For performance tracking and retargeted advertising (e.g., Facebook, Google)
- Healthcare Providers: Only with your consent or in emergencies
- Authorities: If legally required
We do not sell your data.
7. Data Retention
- Medical records: Retained for a minimum of 8 years after the last consultation, or until the client reaches age 25 if under 18
- Transactional data: Kept for 6 years + current tax year, in accordance with Irish tax law
- Mailing list data: Until you unsubscribe or withdraw consent
8. Marketing Communications
We only send marketing emails (e.g. newsletter, product updates) if you’ve opted in. You can unsubscribe anytime via the email footer or by contacting us.
9. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Withdraw consent at any time
- Data portability
- Lodge a complaint with the Data Protection Commission (DPC Ireland)
To exercise your rights, please contact us via our Contact Form.
10. Policy Updates
We may update this policy occasionally to reflect changes in law or services. Updates will be posted on this page with a revised date.
CHANGELOG
Created 20 January 2019 and updated 1st April 2025