SleepIreland

Privacy Notice

Draft — review before collecting live patient information. This page is a development template. The final notice should be reviewed for the actual SleepIreland controller identity, legal bases, retention periods, processors, international transfers and individual rights before the site is launched for real-world data collection.

What we collect

The assessment may collect personal details such as name, email address, age, gender, telephone number and occupation, together with sleep-related responses, screening scores, measurements and relevant history entered by the person completing the assessment.

Why we collect it

Information may be processed to provide the assessment and results, to maintain and improve the website, and — where the person has explicitly opted in — for possible future health research about sleep health and sleep apnoea, subject to applicable ethics and data-protection requirements.

Research choice

The assessment includes a separate optional research choice. A person can receive their results without opting in to future research. Research eligibility is recorded separately so that future research datasets can exclude people who did not opt in.

Data minimisation and security

The production architecture is designed to separate direct identifiers from assessment records, use a pseudonymous participant identifier, and restrict administrative access. Cloudflare D1 can be created with an EU jurisdiction so the database itself runs and stores data within the European Union. Cloudflare also provides encrypted secrets for API keys and authentication tokens. These technical controls do not by themselves make the service GDPR-compliant.

Research governance

Under Irish health research rules, processing personal data for health research can involve additional consent and governance requirements. Future research using this dataset should therefore go through the appropriate data-protection and ethics process before research use begins.

Your rights

The final notice should explain the rights available under applicable data-protection law, how to request access or deletion where applicable, how to withdraw research consent where applicable, and how to contact the person or organisation responsible for the processing.

Contact

For privacy questions, contact admin@sleepireland.com.