Last updated: 20 July 2026. This notice explains how the Irish Acupuncture Register (“IAR”, “we”, “us”) handles personal data under the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
Who is responsible for your data?
The Irish Acupuncture Register is the data controller for information collected through this website and through its membership, public-register and complaints processes. Data-protection enquiries may be sent through our Contact page.
Information we collect
- Contact details and messages submitted through the general-enquiries form.
- Membership application details, qualifications, declarations and supporting documents.
- Public practitioner-profile information approved for publication.
- Complaint information, correspondence and any evidence voluntarily submitted.
- Basic technical and security information generated when the website is accessed or a form is submitted.
Why we use personal data
We use personal data to respond to enquiries; assess and administer membership; maintain an accurate public register; uphold professional standards; receive and assess complaints; keep appropriate records; protect the website; and comply with applicable legal obligations.
Legal bases
Depending on the activity, processing may be necessary to take steps at your request or perform a membership agreement, comply with a legal obligation, pursue the Register’s legitimate interests in administering a professional register and protecting the public, or act on your consent. Where complaint material or supporting documents contain health or other special-category data, we will only process it where an additional lawful condition under Article 9 GDPR applies.
Public-register information
Approved profile details are intentionally made public so patients and other users can verify a practitioner’s membership status and locate the contact information the practitioner has chosen to display. Members should contact us to correct inaccurate information or request a review of what is displayed.
Who receives the information?
Access is limited to authorised people who need the information for Register functions. We may use service providers for website hosting, forms, email, document storage and administration. These providers act under appropriate data-protection arrangements. Information may also be disclosed where required by law, necessary to address a serious safety concern, or appropriate for the fair handling of a complaint.
International transfers
Some technology providers may process data outside the European Economic Area. Where this occurs, we will rely on a legally recognised transfer mechanism and appropriate safeguards, such as an adequacy decision or standard contractual clauses.
How long we keep data
We retain information only for as long as necessary for the purpose collected, including any professional, complaints, insurance, governance, accounting or legal record-keeping requirements. Different records therefore have different retention periods. Information no longer required will be securely deleted or anonymised.
Your GDPR rights
Subject to legal limits and exemptions, you may ask for access to your personal data, correction of inaccurate data, erasure, restriction, portability, or object to certain processing. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.
To exercise a right, contact us and clearly describe your request. We may need to verify your identity. You also have the right to lodge a complaint with Ireland’s Data Protection Commission.
Security
We use reasonable organisational and technical measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No internet service can guarantee absolute security.
Cookies and external links
The website may use essential technical storage required for security or functionality. Links to external websites are governed by those organisations’ own privacy notices.
Changes to this notice
We may revise this notice as the Register develops or its systems change. The current version and revision date will remain available on this page.